System and method for access control and for supply chain management via a shared bill of material

• US 8,046,379 B1
• Filed: 10/14/2009
• Issued: 10/25/2011
• Est. Priority Date: 04/10/2000
• Status: Expired due to Fees

• Current Assignee: Arena Solutions, Inc (PTC Inc.)
• Original Assignee: Arena Solutions, Inc (PTC Inc.)
• Inventors: Yu, Janet, Larkin, Eric, Topolovac, Michael
• Primary Examiner(s): ROBINSON, GRETA LEE
• Application Number:
  US12/579,268
• Time in Patent Office: 741 Days
• Field of Search: 707/999.009, 707/999.01, 707/999.1, 707/999.101, 707/999.102, 707/609, 707/694, 707/788, 707/802, 707/805, 707/821, 707783-786, 707770-781, 705/28, 705/29
• US Class Current: 707/783
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 10/0875 Itemisation or classification of parts, supplies or services, e.g. bill of materials
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A system for securely uploading and downloading data from a client to a remote data storage location under control of a remote application program. The data is stored in encrypted form so that the data server has no access to the data. The data is associated with a bill of material (BOM) and may be accessed by users without providing access to the data space of the client. Also disclosed is a method and computer program so automatically assign access privileges to one or more users of data in a bill of material stored in a shared database such that the step of refining a role for the user for a data item automatically assigns access privileges for the user for the data and other related data items. Also described is linking BOMs to provide peer-to-peer access and views to different users. Also described is a method and software program that provides of propagation of data through the supply chain via one or more bills of materials.

Claims

1. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information on at least one bill of material (BOM) of the plurality of BOMs, each BOM describable as a tree with each node an element, each BOM associated with an owner of a set of owners and each element in each BOM associated with an owner of the set of owners, and

a server processing system coupled to the network and storing the plurality of BOMs in a local or distributed database, such that BOMs associated with different owners are stored in the same database, the storing including storing one or more data structures in the database configured to store the plurality of BOMs; and

wherein the server processing system provides unrestricted access to confidential information in a particular stored BOM only to the owner associated with the particular BOM and to any designate of the owner;

wherein the server processing system provides access to the stored BOMs to one or more users, each user being associated with an entity, the providing access including providing remote access over the network via the client terminal, and

wherein a role of a set of roles is assigned to one or more users for a particular element of a particular BOM, each role having an associated set of rules that define access privileges for a role-holding user for the particular element,

such that the assigned role for a user for an element automatically defines the access privilege that the role-holding-user has to the element.

2. A system as recited in claim 1,

wherein the role assigned to a user is one of a set of roles of a supply chain.

3. A system as recited in claim 2, wherein the roles of the supply chain include one or more of the set that includes:

the role of employee, assigned to any user that is associated with the owner of the element;

the role of partner for any user that is associated with an entity other than the owner;

the role of supplier of a BOM element for a user that is associated with an entity that has a sourcing relationship for the element; and

the role of contract manufacturer for any user that is associated with an entity that has a contract manufacturer relationship for the element.

4. A system as recited in claim 3, wherein the set includes:

the role of customer for any user who is associated with an entity that has a customer relationship for the element.

5. A system as recited in claim 3, wherein a contact manufacturing relationship is a type of sourcing relationship.

6. A system as recited in claim 3, wherein the set further includes:

the role of customer for any user who is associated with an entity that has a customer relationship for the element.

7. A system as recited in claim 1, arranged to automatically generate for each user a view of data matched to the role the user has to the data.

8. A system as recited in claim 7, wherein a change made by a first user having a first role of a supply chain of roles is propagated through the supply chain of roles, such that as a result of the first user having the first role to an element of a BOM making a change of an aspect of the element of the BOM, the view of the BOM presented to a second user having second role of the supply chain to the element is automatically updated to reflect the change.

9. A system as recited in claim 1, wherein the one or more data structures in the database configured to store the plurality of BOMs are arranged to allow a BOM element belonging to a first entity to be linked to a second BOM element belonging to a second entity, and further to allow a BOM element owned by a third entity to be shared as an element in another BOM owned by another entity different to the third entity,

wherein by linking and sharing of data in BOMS amongst entities that have different roles to the data, information is cascade through a supply chain for an item.

10. A system as recited in claim 1, wherein a change made by a first user having a first role of a supply chain of roles is propagated through the supply chain of roles.

11. A system as recited in claim 1, wherein one of the roles is that of a supplier, and wherein the server processing system:

stored a list of elements in the database, each element in the list of elements having a unique element identifier, each element in each BOM being one of the elements in the list of elements;

stored a set of entities in the database;

stored a set of sourcing relationships between an element in the list of elements and an entity in the list of entities, such that a sourcing relationship is defined for at least some of the elements in the list of elements, said entity being the supplier for the at least some of the elements,

such that a user who is associated with the supplier is automatically assigned the role of a supplier, with access privileges pre-defined for a supplier for the at least some of the elements, without the role of supplier needing to be explicitly assigned to the user.

12. A system as recited in claim 1, wherein the one or more data structures in the database configured to store the plurality of BOMs are arranged to allow a BOM element owned by a first entity to be linked to another BOM element owned by a second entity.

13. A system as recited in claim 1, wherein the one or more data structures in the server processing system configured to store the plurality of BOMs are arranged to allow a BOM element owned by a first entity to be shared as an element in a second BOM owned by a second entity.

14. A system as recited in claim 1, wherein the privileges associated with the roles for a role-holding-user include at least one of the set consisting of:

the type of data of the element the role holder may view;

the type of data of the element the role holder may not view;

the type of data of the element the role holder may edit; and

the type of data of the element the role holder may not edit.

15. A system as recited in claim 1,

wherein each user is associated with one or more entities,

wherein each entity may have a relationship of a set of relationships to an element, and

wherein the role assigned to a user is according to the entity with which the user is associated, and according to the relationship the associated entity has with the element.

16. A system as recited in claim 15, wherein one or the set of relationships is a sourcing relationship, such that a user associated with an entity that has a sourcing relationship with an element has a role of a supplier for that element.

17. A system as recited in claim 1, wherein one of the roles is that of a supplier, and wherein the server processing system:

stores a list of elements in the database, each element in the list of elements having a unique element identifier, each element in each BOM being one of the elements in the list of elements;

stores a set of entities in the database; and

stores a set of sourcing relationships between an element in the list of elements and an entity in the list of entities, such that a sourcing relationship is defined for at least some of the elements in the list of elements, said entity being the supplier for the at least some of the elements, such that a user who is associated with the supplier is automatically assigned the role of a supplier, with access privileges pre-defined for a supplier for the at least some of the elements, without the role of supplier needing to be explicitly assigned to the user.

18. A system as recited in claim 17,

wherein the server processing system:

stores a list of elements in the database, each element in the list of elements having a unique element identifier, each element in each BOM being one of the elements in the list of elements;

wherein one or more elements in the element list are associated with a respective owner of a set of owners, and wherein the list of elements includes an indication of ownership for each element associated with one of the owners, AND

wherein the processing system restricts access to information about a particular element in the element list that is associated with a particular owner to the particular owner and to any designate(s) of the particular owner.

19. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information on a particular bill of material (BOM), the particular BOM being one of a plurality of BOMs, each BOM describable as a tree with each node an element, and each branch of the tree defining a parent-child relationship, each element in each BOM having an owner of a set of more than one owners, and each BOM having an owner of the set of owners, the particular BOM having a particular owner;

a server processing system coupled to the network and storing a database, the database including;

a list of elements, each element having a unique identifier, one or more of the elements being for inclusion in at least one BOM of the plurality of BOMs, including the particular BOM; and

one or more BOM data structures for storing the plurality of BOMs, the one or more BOM data structures storing information on the parent-child relationships of the plurality of BOMs, two or more of the BOM being associated with a respective owner of the set of owners;

the server processing system configured to provide remote access to one or more elements of information in the database to one or more users, including providing access via the client terminal, each user associated with at least one entity such that the database contains at least two BOMS having different owners,

wherein the database includes confidential information of at least one of the owners such that unrestricted access to the confidential information is limited to the owner and any designate(s) of the owner, and

wherein users are assigned roles with respect to different data stored in the database, such that access privileges to data and views of data to different users depends on the roles assigned to the different users.

20. A system as recited in claim 19, wherein a BOM of the particular owner includes confidential information, and wherein the confidential information of the particular owner includes the BOM confidential information.

21. A system as recited in claim 19,

wherein one or more elements in the element list is associated with a respective owner of the set of owners, wherein the list of elements includes an indication of ownership for each element associated with one of the owners, and

wherein the confidential information of an owner that owns a element in the list of elements includes confidential information in the list of elements, such that unrestricted access to confidential information about a particular element in the element list that is associated with a particular owner is limited to the particular owner and any designate(s) of the particular owner.

22. A system as recited in claim 19, wherein a first BOM of a first owner may share one or more elements of the list of elements with a second BOM of a second owner.

23. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information the BOMs;

a server processing system coupled to the network and storing a database, the database including;

a list of elements, each element having a unique identifier, one or more elements of the list of elements being for inclusion in one or more of the plurality BOMs;

a list of entities; and

one or more data structures for storing the plurality of BOMs, each bill of material (BOM) describable as a tree with each node an element of the list of elements, and each branch of the tree defining a parent-child relationship, and each BOM having an owner of the set of owners,

such that the database may contain two BOMS associated with two different owners, wherein at least one of the BOMs includes confidential information of the owner of the BOM,

wherein database is arranged such that an entity may be designated a role for a particular element in a BOM,

wherein the server processing system provides remote access to one or more elements of information in the database to one or more users associated with one or more of the entities, the providing access including providing remote access over the network via the client terminal,

such that access to the confidential information in the BOM is limited to the owner and to any entities designated by the owner of the BOM,

wherein an access privileges for an entity for accessing confidential information for a particular element are automatically defined by the role designated to the entity, such that the role designated for a particular entity automatically defines access privileges for any user associated with the particular entity for the particular element.

24. A system as recited in claim 23, wherein one or more elements in the element list are associated with a respective owner of the set of owners, and wherein the list of elements includes an indication of ownership for each element associated with one of the owners,

the system further configured to restrict access to information about a particular element in the element list that is associated with a particular owner to the particular owner and to at least one entity designated by the particular owner, the restricting of access to a designate including assigning a role for the designate, each role having an associated set of rules that define the type of access a user associated with the designate has for the element,

such that the role assigned to a particular entity for a particular element of a BOM automatically defines access privileges for any user associated with the particular entity for the particular element.

25. A system as recited in claim 23, wherein one of the roles is the role of a supplier,

such that a user associated with an entity that is a supplier for the particular entity is automatically provided with pre-defined access privileges accorded to suppliers for the particular element,

such that the user'"'"'s access is restricted to pre-defined access privileges accorded to suppliers without the need to explicitly assign privileged for the particular user.

26. A system as recited in claim 23, further comprising a list of users, and further comprising a list of association of users, the association list defining with which entity or entities a user is associated.

27. A system as recited in claim 23, wherein a first BOM of a first owner may share one or more elements of the list of elements with a second BOM of a second owner.

28. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information the BOMs;

a server processing system coupled to the network and storing a database, the database including;

a list of elements, each element having a unique identifier, one or more of the elements being for inclusion in at least one bill of materials (BOM) of the plurality of BOMs; and

one or more BOM data structures for storing the plurality of BOMs, each BOM describable as a tree with each node an element of the list of elements and each branch of the tree defining a parent-child relationship, the one or more BOM data structures storing information on the parent-child relationships of the plurality of BOMs, two or more of the BOMs being associated with a respective owner of the set of owners; and

wherein the server processing system provides remote access to one or more elements of information in the database to one or more users, each user being associated with an entity, such that the database may contain BOMS having different owners, the providing access including providing remote access over the network via the client terminal,

wherein the database includes confidential information of at least one of the owners such that unrestricted access to the confidential information is limited to the owner and any designate(s) of the owner, wherein one or more elements in the element list is associated with a respective owner of the set of owners,

wherein the list of elements includes an indication of ownership for each element associated with one of the owners, and wherein the confidential information of an owner that owns a element in the list of elements includes confidential information in the list of elements,

such that unrestricted access to confidential information about a particular element in the element list that is associated with a particular owner is limited to the particular owner and to any designate(s) of the particular owner.

29. A system as recited in claim 28, wherein the processing system is a distributed system.

30. A system as recited in claim 28, wherein providing remote access includes providing remote access via a public network.

31. A system as recited in claim 30, wherein the public network is the Internet.

32. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information the BOMs;

a server processing system coupled to the network and storing a database, the database including;

a list of elements, each element having a unique identifier, one or more of the elements being for inclusion in at least one bill of materials (BOM) of a plurality of bills of material (BOMs); and

one or more BOM data structures for storing the plurality of BOMs, each BOM describable as a tree with each node an element of the list of elements and each branch of the tree defining a parent-child relationship, the one or more BOM data structures storing information on the parent-child relationships of the plurality of BOMs, two or more of the BOMs being associated with a respective owner of the set of owners; and

wherein the server processing system provides remote access to one or more elements of information in the database to one or more users, each user being associated with an entity, the providing access including providing remote access over the network via the client terminal,

such that the database may contain BOMS having different owners, wherein the database includes confidential information of at least one of the owners such that unrestricted access to the confidential information is limited to the owner and any designate(s) of the owner,

wherein the database is arranged such that a first BOM of a first owner may share one or more elements of the list of elements with a second BOM of a second owner.

33. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information the BOMs;

a server processing system coupled to the network and storing a database, the database including;

a list of elements, each element having a unique identifier, one or more of the elements being for inclusion in at least one bill of materials (BOM) of a plurality of bills of material (BOMs); and

one or more BOM data structures for storing the plurality of BOMs, each BOM describable as a tree with each node an element of the list of elements and each branch of the tree defining a parent-child relationship, the one or more BOM data structures storing information on the parent-child relationships of the plurality of BOMs, two or more of the BOMs being associated with a respective owner of the set of owners; and

wherein the server processing system provides remote access to one or more elements of information in the database to one or more users, each user being associated with an entity, such that the database may contain BOMS having different owners, the providing access including providing remote access over the network via the client terminal,

wherein an element in the element list is one of the set consisting of a physical element and a process, wherein the database is arranged such that the physical element may itself be a BOM, and wherein the database is arranged such that the process may reference a set of steps or operations.

34. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information the BOMs;

a server processing system coupled to the network and storing a database, the database including;

a list of elements, each element having a unique identifier, one or more of the elements being for inclusion in at least one bill of materials (BOM) of a plurality of bills of material (BOMs); and

one or more BOM data structures for storing the plurality of BOMs, each BOM describable as a tree with each node an element of the list of elements and each branch of the tree defining a parent-child relationship, the one or more BOM data structures storing information on the parent-child relationships of the plurality of BOMs, two or more of the BOMs being associated with a respective owner of the set of owners; and

wherein the server processing system provides remote access to one or more elements of information in the database to one or more users, each user being associated with an entity, such that the database may contain BOMS having different owners, the providing access including providing remote access over the network via the client terminal,

wherein each BOM data structure is for storing the parent-child relationships for at least one BOM of the plurality of BOMs, and

wherein a BOM data structure includes, for a particular BOM, an entry for each element in the particular BOM, said element entry including a reference to the element'"'"'s entry in the list of elements, an entry indicating the owner, and an entry indicating any child of the element in the case the element has a child in the tree representing the particular BOM.

35. A system as recited in claim 34, wherein the parent child relationships for all the BOMS are stored in a single BOM data structure.

36. A system as recited in claim 34,

wherein the database is a relational database, and

wherein the list of elements and the BOM data structure are each a table in the relational data structure, and wherein the element identifier is a single field in the table of the list of elements forming a primary key for the table of the list of elements.

37. A system for managing a plurality of bills of material (BOMs) comprising:

a client terminal coupled to a network and providing access to one or more users to information the BOMs;

a server processing system coupled to the network and storing a database, the database including;

a list of elements, each element having a unique identifier, one or more of the elements being for inclusion in at least one bill of materials (BOM) of a plurality of bills of material (BOMs); and

one or more BOM data structures for storing the plurality of BOMs, each BOM describable as a tree with each node an element of the list of elements and each branch of the tree defining a parent-child relationship, the one or more BOM data structures storing information on the parent-child relationships of the plurality of BOMs, two or more of the BOMs being associated with a respective owner of the set of owners; and

wherein the server processing system provides remote access to one or more elements of information in the database to one or more users, each user being associated with an entity, such that the database may contain BOMS having different owners, the providing access including providing remote access over the network via the client terminal,

wherein the database further includes a list of owners in the set of owners, each owner having an entry including a unique owner identifier in the list of owners.

38. A system as recited in claim 37,

wherein at least one owner is associated with one or more respective workspaces, each workspace containing data of the database that is associated with the workspace owner,

wherein the database is arranged such that each BOM may belong to a workspace, and wherein each BOM data structure entry includes an indication of the workspace of the BOM.

39. A system as recited in claim 38, wherein the database includes, for each workspace, a private list of elements associated with the owner of the workspace.

40. A system as recited in claim 37, wherein the database is arranged such that the database may contain information confidential to one or more of the owners, the system further configured to limit access to any confidential data in the database associated with an owner to the owner of the confidential data and to any designate(s) of the owner of the confidential data.

41. A system as recited in claim 37, wherein the element list includes an indication of the owner for each element that has an owner.

42. A system as recited in claim 41, wherein the indication of the owner is used to limit unrestricted access to one or more particular elements of the element list to respective owners of the particular elements and to any designate(s) of the owners of the particular elements.

43. A system as recited in claim 37, wherein the database further includes a list of users, each user having an entry in the list of users that includes a unique user identifier in the list of users, each user possibly being associated one or more of the owners.

44. A system as recited in claim 43, wherein a particular owner may set different levels of access to information in the database associated with the particular owner to each user associated with the particular owner.

45. A system as recited in claim 43, wherein each entry for a user further includes a function of a user password, wherein the system is further configured to:

accept at the remote user terminal a user password provided by a user;

identify at the server processing system the user using said password; and

provide access according to successfully identifying the user as one in the list of users and providing access according to the identity of one or more of the owners associated with the identified user in the case that the identified user is associated with at least owner.

46. A system as recited in claim 37, wherein at least one owner is associated with one or more respective workspaces, each workspace containing data of the database that is associated with the workspace owner, wherein each BOM may belong to a workspace, and wherein each BOM data structure entry includes an indication of the workspace of the BOM.

47. A system as recited in claim 46, wherein each element in a private list of elements includes a reference to a corresponding element in the list of elements, such that the list of elements includes the elements in any private lists of elements, and elements that are in one or more BOMs that are associated with different owners.

48. A system as recited in claim 46, wherein each element in a private list of elements includes a unique identifier within the private list of elements and a reference to a corresponding element in the list of elements, such that two elements in two different private lists of elements that refer to the same one element in the list of elements may each have a different unique identifier in the respective private lists.

49. A system as recited in claim 37, wherein the database includes a list of vendors to provide data related to vendors for one or more elements of the element list.

50. A system as recited in claim 49, wherein the database includes a vendor element relations list that includes data relating one or more elements of the element list to one or more corresponding vendors of the vendor list such that the vendor element relations list provides the sourcing relationship between an element in the element list and a vendor in the of vendor list.

51. A system as recited in claim 50, wherein the vendor element relations list further includes information about the quantity of each element that the vendor of the element can supply.

52. A system as recited in claim 50, wherein no users, or one or more users are associated with a vendor in the vendor list, the system further configured to provide to a particular user associated with a particular vendor access to information about an element in the element list that is sourced by the particular vendor, the providing access including providing remote access via the client terminal.

53. A system as recited in claim 52, wherein the level of access provided to the particular user associated with the particular vendor is set by the owner associated with the particular element.

54. A system as recited in claim 49, wherein the vendor list includes for one or more of the vendors, vendor identification data including one or more of a vendor name, vendor contact information, and a vendor identification number.

55. A system as recited in claim 49, wherein the database includes a vendor transaction history for one or more of the vendors.

56. A system as recited in claim 49, wherein the vendor list includes a rating of one or more of the vendors.