System and method for managing user profiles

• US 7,231,378 B2
• Filed: 04/26/2001
• Issued: 06/12/2007
• Est. Priority Date: 04/26/2001
• Status: Expired due to Term

• Current Assignee: General Electric Company
• Original Assignee: General Electric Company
• Inventors: Basu, Subroto Kumar, Lawson, Robert James, Creekmore, Mark Jr.
• Primary Examiner(s): PHAM, HUNG Q
• Application Number:
  US09/842,577
• Publication Number:
  US 20020161766A1
• Time in Patent Office: 2,238 Days
• Field of Search: 707/2, 707/9, 707/10, 709/203, 709/217, 709/232
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A system and a method for managing user and data profiles utilizing a web-enabled interactive database to organize, store and retrieve the information to create a consistent security model through centralized administration, are disclosed. The system captures various rules and pre-determined methodologies to provide on-line, up-to-date decisions to the users when users request access to a set of specific data or an application. The system further provides the capability to the user to request access to information that the user currently does not have access to, tracks the status of the request, obtains approval/disapproval decision from the data owner, implements the decision, and notifies requester within a reasonable time.

Claims

1. A method of managing user profiles for controlling access to a web-based system that includes a server system coupled to a centralized database and at least one client system, said method comprising the steps of:

creating an electronic profile for a user from the at least one client system within the centralized database;

creating data profiles within the centralized database for applications of the server system, wherein creating the data profile comprises establishing rules and access methods;

determining whether to grant the user access to an application of the server system after completing an evaluation based on the created user electronic profile, established rules and access methods in response to a request from the user for access to the application;

if the user is denied access to the application, notifying the user of the denial to access the application;

if the user is granted access to the application, determining whether to grant the user access to a set of specific data within the application afier completing another evaluation based on the created user electronic profiles, established rules and access methods in response to another request from the user for access to the set of specific data;

if the user is denied access to the set of specific data;

prompting the user to complete a request for quick approval wherein the request for quick approval includes a list of data for approval;

automatically determining, using an internal exception access process, an approval or a disapproval of quick access based on pre-established criteria and the list of data for approval;

if the request for quick approval is approved, determining either to add a rule or to add the user to the centralized database;

if the rule is added, updating an exception list;

if the user is added, updating the centralized database;

notifying the user of the approval of the request for quick approval; and

continuing with the application and accessing the set of specific data;

if the request for quick approval is denied, notifying the user of the denial of the request for quick approval;

if the user is granted access to the set of specific data, continuing with the application and accessing the set of specific data.

2. A method according to claim 1 wherein said step of creating an electronic profile for a user further comprises the step of creating an electronic profile based on information available from at least one an Oracle Human Resource Application and a Request for Computer Access Application.

3. A method according to claim 1 wherein the created data profiles is based on at least one of Data Elements, Data Tags, Rules of Access, an Approver'"'"'s Name for Each Rule of Access, Rules of Exclusion, an Exception List, and Field Tags.

4. A method according to claim 3 wherein said step of establishing rules and access methods further comprises the steps of:

establishing rules based on at least one of Rule Based Access guidelines, Group Based Access guidelines, Search &

Subscribe Utilities guidelines, Active Positioning monitoring guidelines, Hard Exclusion Rules guidelines, and Access Audits guidelines; and

establishing access methods to ensure timely and accurate decision making based on criteria established by system administrators.