SYSTEM AND METHOD FOR EVALUATION AND PRESENTING AUTHORIZATION RIGHTS IN AN ORGANIZATION

• US 20100082685A1
• Filed: 09/23/2008
• Published: 04/01/2010
• Est. Priority Date: 09/23/2008
• Status: Abandoned Application

• Current Assignee: Brightman Almagor Zohar & Company
• Original Assignee: Brightman Almagor Zohar & Company
• Inventors: Koren, Asaf, Zimbalist, Shimon Eitan, Gilman, Anna, BARR HOISMAN, Hila, Segal, Marina, Ben Yaakov, Yifat
• Application Number:
  US12/235,755
• Publication Number:
  US 20100082685A1
• Time in Patent Office: Days
• US Class Current: 707/785
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling

Abstract

A system and method for evaluating instances of authorization authority or segregation of duties in an organization against criteria for such authorizations, storing results of such evaluations and presenting such results to a user through queries of the stored results.

Claims

1. A system comprising:

a data base having stored thereon;

a plurality of authorization criteria for actions of an organization; and

a plurality of instances in said organization that satisfy said criteria;

a memory with access to the database, and said memory having stored therein an evaluation protocol to compare said instances that satisfy said criteria against a plurality of practices; and

a processor, in connection with the memory, to;

generate a plurality of results of said evaluations for storage in the memory;

accept a request from a user to retrieve from said memory a result of said plurality of results for an instance from among said plurality of instances; and

generate a display of said results for said instance from among said plurality of instances.

2. The system as in claim 1, wherein said instances are selected from the group consisting of individuals in said organization, sub-structures of said organization and functions of said organization.

3. The system as in claim 1, wherein said evaluation comprises compliance with a suggested practice for limiting access to data.

4. The system as in claim 1, wherein said processor is to generate results for all of said instances.

5. The system as in claim 1, wherein said criteria comprise model criteria suitable for testing a plurality of organizations.

6. The system as in claim 1, wherein said processor is to accept said request in QlikView.

7. The system as in claim 1, wherein said database or ERP comprises a data base compatible with an Oracle application system.

8. The system as in claim A1, wherein said system is compatible with an SAP system.

9. A method comprising:

evaluating a plurality of instances against authorization criteria for segregation of duties in an organization;

storing a plurality of results of said evaluations;

accepting from a user a selection of an instance from said plurality of instances; and

displaying a result for said instance from among said plurality of stored results.

10. The method as in claim 9, further comprising storing said results as responses to pre-formulated queries.

11. The method as in claim 9, further comprising

retrieving said instances from a data base selected from the group comprising an SAP compatible data base and an Oracle ERP compatible system;

and

converting said instances into a text file.

12. The method as in claim 11, further comprising evaluating said policies of said organization against an established standard.

13. The method as in claim 9, wherein said storing comprises storing evaluation results for all of said instances.

14. The method as in claim 9, wherein said evaluating comprises evaluating compliance with suggested practices for limiting authorizations to take actions on behalf of said organization.