Methods and systems for implementing service level consolidated user information management

• US 8,533,773 B2
• Filed: 11/17/2010
• Issued: 09/10/2013
• Est. Priority Date: 11/20/2009
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Maes, Stephane H.
• Primary Examiner(s): Yalew, Fikremariam A
• Application Number:
  US12/948,450
• Publication Number:
  US 20110126261A1
• Time in Patent Office: 1,028 Days
• Field of Search: None
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Embodiments of the invention provide methods and systems for implementing service level consolidated user information management. According to one embodiment, a method comprises intercepting, at a policy enforcer, a manipulation request of data. The method may further include analyzing the request to determine which data the manipulation request is associated with and, based on that analysis, selecting a policy from a plurality of policies. Furthermore, the method may execute the selected policy. The policy may be configured to direct the policy enforcer to allow the manipulation request to pass through to the associated destination data system to process the request, delegate processing of the manipulation request to at least one of a plurality of data systems, or process the manipulation request by the policy enforcer.

Claims

1. A method of implementing service level consolidated user information management, the method comprising:

providing, by a computer system executing a policy enforcer, a common interface to a plurality of data systems, the common interface providing an aggregated view of user data stored on the plurality of data systems;

providing, by the computer system through the common interface a unified user profile (UUP);

obtaining, by the computer system via the common interface, access to each of the plurality of data systems;

intercepting, by a computer system executing a policy enforcer, a manipulation request, the manipulation request comprising a request to manipulate user information of at least one of the plurality of data systems;

analyzing the request, by the computer system executing the policy enforcer, to determine which data the manipulation request is associated with;

based on the associated data, selecting, by the computer system executing the policy enforcer, a policy from a plurality of policies configured for enforcement related to the associated data; and

executing, by the computer system executing the policy enforcer, the selected policy, wherein the policy is configured to direct the policy enforcer to delegate processing of the manipulation request to at least one of the plurality of data systems.

2. The method of claim 1, further comprising verifying, by the computer system executing the policy enforcer, that the policy enforcer and the at least one of the plurality of data systems have permissions to manipulate the data.

3. The method of claim 1, further comprising returning an error message to the requestor through the common interface when a failure is expected to result in the UUP.

4. The method of claim 1, wherein the data includes dependent data, wherein the dependent data comprises data which is changed in response to the data changing.

5. The method of claim 4, further comprising in response to the manipulation request affecting the dependent data, changing the dependent data.

6. The method of claim 1, wherein the manipulation request is a subscription management manipulation request, wherein the subscription management manipulation request comprises information about a user(s).

7. The method of claim 1, wherein the manipulation request is a profile management manipulation request, wherein the profile management manipulation request comprises data about preferences and/or information about a user(s).

8. The method of claim 1, wherein the manipulation request includes an associated destination data system.

9. The method of claim 8, wherein the destination data system owns the data.

10. The method of claim 1, wherein the data'"'"'s location is known at the time of the request, and the request is made through the common interface.

11. The method of claim 10, wherein the request made through the common interface includes information as to how the data is to be mapped.

12. The method of claim 1, further comprising returning an error message in response to the manipulation request through a requestor interface when the request fails.

13. A system comprising:

a processor; and

a memory coupled with and readable by the processor and storing a set of instructions for implementing service level consolidated user information management which, when executed by the processor, causes the processor to execute a policy enforcer, the policy enforcer configured to provide a common interface to a plurality of data systems, the common interface providing an aggregated view of user data stored on the plurality of data systems, provide, through the common interface a unified user profile (UUP), obtain, via the common interface, access to each of the plurality of data systems, intercept a manipulation request, the manipulation request comprising a request to manipulate user information of at least one of the plurality of data systems, analyze the request to determine which data the manipulation request is associated with, based on the associated data, select a policy from a plurality of policies configured for enforcement related to the associated data, and execute the selected policy, wherein the policy is configured to direct the policy enforcer to-delegate processing of the manipulation request to at least one of the plurality of data systems.

14. The system of claim 13, further comprising executing an aggregator/federator configured to aggregate and/or federate the data, provide managed identities, and aggregate/federate schemas for the data.

15. The system of claim 14, wherein the aggregator/federator is further configured to map data to be completed by an administrator at installation or run time, and that is exposed and controlled programmatically via a plurality of interfaces.

16. The system of claim 13, wherein at least one of the plurality of data systems is a business support system (BSS), operations support system (OSS), a billing system, a subscription system, a service system, a network system, or a profile management system.

17. The system of claim 16, wherein the policy enforcer delegates the processing of the manipulation request to the BSS.

18. The system of claim 13, further comprising a policy repository to store the plurality of policies.

19. A machine-readable memory for implementing service level consolidated user information management which, when executed by a machine, causes the machine to:

provide a common interface to a plurality of data systems, the common interface providing an aggregated view of user data stored on the plurality of data systems;

provide, through the common interface a unified user profile (UUP);

obtain, via the common interface, access to each of the plurality of data systems;

intercept, at a policy enforcer, a manipulation request, the manipulation request comprising a request to manipulate user information of at least one of the plurality of data systems;

analyze the request to determine which data the manipulation request is associated with;

based on the associated data, select a policy from a plurality of policies configured for enforcement related to the associated data; and

execute the selected policy, wherein the policy is configured to direct the policy enforcer to delegate processing of the manipulation request to at least one of the plurality of data systems.