Providing authorized access and request-initiated translation of data files

• US 7,509,319 B2
• Filed: 05/13/2005
• Issued: 03/24/2009
• Est. Priority Date: 12/05/2000
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Gupta, Sanjay, Chidiac, Ghassan, Palleschi, Giancarlo, Roubiecek, Evan E., Vimba, Arnold O., Nordyke, Jeff, Rosenthal, Matthew, Betros, Kim, Zarnick, Michael P.
• Primary Examiner(s): Vital; Pierre M
• Assistant Examiner(s): Nofal; Christopher P
• Application Number:
  US11/128,679
• Publication Number:
  US 20050273455A1
• Time in Patent Office: 1,411 Days
• Field of Search: 707/6, 707/9, 707/10, 709223-226, 726 2- 4
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/61 taking into account QoS or priority requirements
• CPC Class Codes: Y10S 707/99936 Pattern matching access
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method, system and computer program product for controlling access to data files stored in a repository is disclosed. The method includes receiving a request for a data file from a requester. The request specifies a data format preference for receiving the data file. The requested data format is different than either of a data format used to create the data file and a data format in which the data file is stored at the time of the request. The method also includes determining if the requester is authorized to access the requested data file and translating the requested data file from a stored data format into the requested data format responsive to receiving the request if the stored format differs from the requested format. The method further includes making the translated data file accessible to the requester if it is determined that the requester is authorized.

Claims

1. A computer-implemented method for providing access to data files stored in a data repository comprising the steps of:

receiving a request for a data file from a requester, the request specifying a data format preference for receiving the data file, the requested data format being different than at least one of a data format used to create the data file and a data format in which the data file is stored at the time of the request;

parsing said request into at least a metadata portion being stored in a metadata directory indicating the contents of the repository;

receiving said request at a staging database;

creating a flat file that includes said metadata portion;

loading said flat file into said metadata directory;

accessing a keyword table that is stored in the repository, said keyword table having a first level showing requested formats and a second level list which is a prioritized list of formats;

accessing said data format preference from the first level;

comparing said prioritized list of formats to said metadata portion of said parsed request;

selecting a highest priority that is listed in said prioritized list of formats;

determining if said requester is authorized to access said requested data file;

translating the requested data file from a stored data format into said requested data format responsive to said receiving of said request from said requester, if said stored format differs from said requested format;

making said translated data file accessible to said requester if it is determined that said requester is authorized; and

providing periodic updates of said meta data directory, said updates reflecting changes to data in the data repository,

wherein said changes to the data in the data repository are captured via delta metadata and forwarded by a schedule query that generates and mails the data to said metadata directory on at least one of a predetermined basis and an immediately triggered update based on a high priority change.

2. A method according to claim 1 wherein the repository resides behind a secure firewall, and said metadata directory resides outside of said firewall.

3. A method according to claim 1 wherein said determining step further including the step of:

providing an access control element including data indicating whether a requester is to be permitted to access said requested data file.

4. A method according to claim 1 wherein said repository resides behind a secure firewall and wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

5. A method according to claim 1 wherein said repository resides behind a secure firewall, the method further comprising the steps of:

providing an access control system outside of said firewall for receiving said request for said data file;

determining via said access control system if the requested data file is stored in the repository; and

passing said request to said repository if said requester is authorized and said requested data file is stored in said repository.

6. A method according to claim 5 wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

7. A method according to claim 6 wherein:

said translating step is undertaken at said response repository; and

said translated file retained at said response repository may be further translated based upon requests from said authorized requesters.

8. A method according to claim 7 further including the steps of:

determining based on said received request which of said stored data formats is to be used to perform said translating into said requested file format; and

using the results of said determination to retrieve the data file having the determined format from said repository, wherein said staging database is within said firewall.

9. A method according to claim 8 wherein said access control system includes said response repository outside of said firewall and wherein said translated data file is transferred from said staging database to said response repository outside of said firewall and retained at said response repository outside of said firewall in response to said request.

10. A method according to claim 1 further comprising the steps of:

providing the requester with the status of the fulfillment of the request for the data file;

providing an indication of stored formats for the requested data file; and

storing a requester'"'"'s format preferences for the requested data file.

11. A computer program product for providing access to data files stored in a data repository, the computer program product embedded on a computer-readable storage medium including executable instructions for causing a computer to implement a method, the method comprising:

receiving a request for a data file from a requester, the request specifying a data format preference for receiving the data file, the requested data format being different than at least one of a data format used to create the data file and a data format in which the data file is stored at the time of the request;

parsing said request into at least a metadata portion being stored in a metadata directory indicating the contents of the repository;

receiving said request at a staging database;

creating a flat file that includes said metadata portion;

loading said flat file into said metadata directory;

accessing a keyword table that is stored in the repository, said keyword table having a first level showing requested formats and a second level list which is a prioritized list of formats;

accessing said data format preference from the first level;

comparing said prioritized list of formats to said metadata portion of said parsed request;

selecting a highest priority that is listed in said prioritized list of formats;

determining if said requester is authorized to access said requested data file;

translating the requested data file from a stored data format into said requested data format responsive to said receiving of said request from said requester, if said stored format differs from said requested format;

making said translated data file accessible to said requester if it is determined that said requester is authorized; and

providing periodic updates of said meta data directory, said updates reflecting changes to data in the data repository,

wherein said changes to the data in the data repository are captured via delta metadata and forwarded by a schedule query that generates and mails the data to said metadata directory on at least one of a predetermined basis and an immediately triggered update based on a high priority change.

12. A computer program product according to claim 11 wherein the repository resides behind a secure firewall, and said metadata directory resides outside of said firewall.

13. A computer program product according to claim 11 wherein said determining step further including the step of:

providing an access control element including data indicating whether a requester is to be permitted to access said requested data file.

14. A computer program product according to claim 11 wherein said repository resides behind a secure firewall and wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

15. A computer program product according to claim 11 wherein said repository resides behind a secure firewall, the method further comprising the steps of:

providing an access control system outside of said firewall for receiving said request for said data file;

determining via said access control system if the requested data file is stored in the repository; and

passing said request to said repository if said requester is authorized and said requested data file is stored in said repository.

16. A computer program product according to claim 15 wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

17. A computer program product according to claim 16 wherein:

said translating step is undertaken at said response repository; and

said translated file retained at said response repository may be further translated based upon requests from said authorized requesters.

18. A computer program product according to claim 17 wherein the method further comprises the steps of:

determining based on said received request which of said stored data formats is to be used to perform said translating into said requested file format; and

using the results of said determination to retrieve the data file having the determined format from said repository, wherein said staging database is within said firewall.

19. A computer program product according to claim 18 wherein said access control system includes said response repository outside of said firewall and wherein said translated data file is transferred from said staging database to said response repository outside of said firewall and retained at said response repository outside of said firewall in response to said request.

20. A computer program product according to claim 11, wherein the method further comprises the steps of:

providing the requester with the status of the fulfillment of the request for the data file;

providing an indication of stored formats for the requested data file; and

storing a requester'"'"'s format preferences for the requested data file.