DOMAIN BASED WORKFLOWS

• US 20110055673A1
• Filed: 08/10/2010
• Published: 03/03/2011
• Est. Priority Date: 12/22/2000
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Teng, Joan C., Remahl, Thomas B.
• Granted Patent: US 9,235,649 B2
• Time in Patent Office: Days
• US Class Current: 715/200
• CPC Class Codes: G06F 16/972 Access to data in other repository systems, e.g. legacy data or dynamic Web page generation
• CPC Class Codes: G06F 16/986 Document structures and storage, e.g. HTML extensions
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/565 Conversion or adaptation of application format or content adding application control or application functional data H04L67/561
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

Technology is disclosed for using workflows based on domains in a hierarchical data structure (e.g. LDAP directory) or other type of data structure. When a workflow is created, it is associated with domain. The domain is defined by a selected node and all nodes below that selected node in the hierarchical data structure. At run time, the system identifies which workflows perform a requested task and are associated with a domain that includes the target of the task. If multiple workflows are determined, the user is provided with the ability to choose one of the identified workflows for performing the tasks.

Claims

1-33. -33. (canceled)

34. A computer-implemented method for selecting a workflow of a plurality of workflows to perform a task, the method comprising:

associating each workflow of the plurality of workflows with a corresponding portion of a directory structure each portion of the directory structure storing object information,

wherein the plurality of workflows comprises workflows that are different from each other, and

wherein each workflow in the plurality of workflows is capable of performing the task;

receiving a request to perform the task wherein the task affects a first object;

determining a first portion of the directory structure storing information associated with the first object; and

determining a first workflow of the plurality of workflows associated with the first portion of the directory structure and capable of performing the task.

35. The method of claim 34 wherein, each workflow uses a predefined set of steps for performing the task and wherein the workflows in the plurality of workflows differ from each other in at least one step of the predefined set of steps.

36. The method of claim 34 further comprising executing a predefined set of steps of the first workflow for performing the task.

37. The method of claim 36, wherein executing the predefined set of steps of the first workflow affects the first object by modifying one or more attributes of the first object.

38. The method of claim 34 wherein the object represents one of:

person, group of users, department, server, or printer and is identified by a set of attributes.

39. The method of claim 34 wherein the task is a task to create the first object, delete the first object, or change an attribute of the first object.

40. The method of claim 34 wherein the directory structure is an LDAP directory structure.

41. The method of claim 40 wherein associating each workflow of the plurality of workflows with the corresponding portion of the directory structure comprises specifying the corresponding portion of the directory structure using an LDAP filter.

42. The method of claim 34 wherein the steps of associating, receiving, and determining are performed by an integrated identity and access system.

43. The method of claim 34 wherein the request includes an identification of the first object.

44. The method of claim 34, further comprising, when the determining from the plurality of workflows determines more than one workflow as being associated with the first portion of the directory structure and capable of performing the task:

outputting a list of the more than one workflow to a user; and

receiving from the user a selection of the first workflow for performing the task.

45. A processor readable storage device storing plurality of instructions causing a processor to select a workflow of a plurality of workflows to perform a task, the plurality of instructions comprising code for:

associating each workflow of the plurality of workflows with a corresponding portion of a directory structure each portion of the directory structure storing object information,

wherein the plurality of workflows comprises workflows that are different from each other, and

wherein each workflow in the plurality of workflows is capable of performing the task;

receiving a request to perform the task wherein the task affects a first object;

determining a first portion of the directory structure storing information associated with the first object; and

determining a first workflow of the plurality of workflows associated with the first portion of the directory structure and capable of performing the task.

46. The processor readable storage device of claim 45 wherein, each workflow uses a predefined set of steps for performing the task and wherein the workflows in the plurality of workflows differ from each other in at least one step of the predefined set of steps.

47. The processor readable storage device of claim 45 further comprising executing a predefined set of steps of the first workflow for performing the task and wherein executing the predefined set of steps of the first workflow affects the first object by modifying one or more attributes of the first object.

48. The processor readable storage device of claim 45 wherein the object represents one of:

person, group of users, department, server, or printer and is identified by a set of attributes.

49. The processor readable storage device of claim 45 wherein the task is a task to create the first object, delete the first object, or change an attribute of the first object.

50. The processor readable storage device of claim 45 wherein the directory structure is an LDAP directory structure and wherein associating each workflow of the plurality of workflows with the corresponding portion of the directory structure comprises specifying the corresponding portion of the directory structure using an LDAP filter.

51. A computing system comprising:

a memory; and

a processor coupled to the memory and configured to execute instructions for;

associating each workflow of the plurality of workflows with a corresponding portion of a directory structure each portion of the directory structure storing object information,

wherein the plurality of workflows comprises workflows that are different from each other, and

wherein each workflow in the plurality of workflows is capable of performing the task;

receiving a request to perform the task wherein the task affects a first object;

determining a first portion of the directory structure storing information associated with the first object; and

determining a first workflow of the plurality of workflows associated with the first portion of the directory structure and capable of performing the task.

52. The computing system of claim 51 wherein, each workflow uses a predefined set of steps for performing the task and wherein the workflows in the plurality of workflows differ from each other in at least one step of the predefined set of steps.

53. The computing system of claim 51 wherein the object represents one of:

person, group of users, department, server, or printer and is identified by a set of attributes.