Method and apparatus for specifying time-varying intelligent service-oriented model

• US 9,621,557 B2
• Filed: 01/28/2016
• Issued: 04/11/2017
• Est. Priority Date: 06/30/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Iyer, Sreekanth R., Patil, Sandeep R., Ramanathan, Sri, Sivakumar, Gandhi, Trevathan, Matthew B.
• Primary Examiner(s): McNally, Michael S
• Application Number:
  US15/008,998
• Publication Number:
  US 20160149920A1
• Time in Patent Office: 439 Days
• Field of Search: 726 1
• CPC Class Codes: G06F 17/00 Digital computing or data processing equipment or methods, specially adapted for specific functions information retrieval, database structures or file system structures therefor G06F16/00
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 8/10 Requirements analysis; Specification techniques
• CPC Class Codes: G06Q 30/016 After-sales
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 50/10 Services
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and an apparatus for specifying a time-varying, intelligent service-oriented model are provided. A method implemented in a computer infrastructure having computer executable code embodied on a computer readable storage medium having programming instructions, includes defining information of a service which is to be provided to one or more users having access to a system storing the defined information. The method further includes defining policies associated with the defined information to allow and deny access to selected portions of the defined information, and exposing to a user of the one or more users the selected portions of the defined information based on the defined policies allowing access to the selected portions of the defined information.

Claims

1. A method comprising:

defining information of a service which is to be provided to one or more users having access to a system storing the defined information; and

exposing, by a processor, to a user of the one or more users the selected portions of the defined information based on defined policies allowing access to the selected portions of the defined information,

wherein;

the defined information is contained in at least one business object and includes an element or information needed for the service; and

the defined policies are associated with the defined information and comprise time information of the at least one business object, the time information specifying one or more time periods when the user is allowed access to the selected portions of the defined information.

2. The method of claim 1, wherein the defined policies comprise at least one service operation which the user is allowed to perform on the defined information.

3. The method of claim 1, wherein the defined policies comprise at least one type of information of the defined information which the user is allowed to access, while denying access to another type of information of the defined information.

4. The method of claim 1, wherein the defined information and the defined policies are defined by at least one of the one or more users and a service provider.

5. The method of claim 1, wherein the at least one business object comprises at least one of:

one or more attributes of the one or more users; and

one or more relationships between the at least one business object and other business objects.

6. The method of claim 5, wherein the defined policies comprise at least one attribute of the one or more attributes that the user is allowed to access.

7. The method of claim 5, wherein the defined policies comprise at least one relationship of the one or more relationships that the user is allowed to access.

8. The method of claim 1, wherein:

the defined policies associated with the business object comprise type information, the type information including a first type and a second type;

the selected portions of the defined information include a first attribute of the first type and a second attribute of the second type;

the selected portions of the defined information include a first relationship to the first attribute and a second relationship to the second attribute;

the time information specifies that the user is allowed access to the first attribute during a first time period of the one or more time periods; and

the time information specifies that the user is allowed access to the second attribute during a second time period of the one or more time periods.

9. The method of claim 1, wherein the exposing the selected portions of the defined information comprises:

manifesting, based on the time information and the type information, the first attribute and the first relationship to a device of the user when a current time is within the first time period;

stopping manifesting the first attribute and the first relationship when the current time is no longer within the first time period;

manifesting, based on the time information and the type information, the second attribute and the second relationship to the device of the user when the current time is within the second time period; and

stopping manifesting the second attribute and second relationship when the current time is no longer within the second time period.

10. The method of claim 9, wherein the type information specifies that the at least one business object is to manifest as one of a billing address object and a service address object.

11. The method of claim 1, further comprising:

preventing the user from accessing the selected portions of the defined information outside the one or more time periods when the user is allowed access to the selected portions of the defined information.