Enhanced user interface and data handling in business intelligence software

• US 9,866,561 B2
• Filed: 09/16/2015
• Issued: 01/09/2018
• Est. Priority Date: 05/30/2008
• Status: Active Grant

• Current Assignee: eThority LLC (Equifax, Inc.)
• Original Assignee: eThority LLC (Equifax, Inc.)
• Inventors: Psenka, Michael, Booty, Michael D., Duncan, Brian
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US14/855,609
• Publication Number:
  US 20160006738A1
• Time in Patent Office: 846 Days
• CPC Class Codes: G06F 16/24575 using context
• CPC Class Codes: G06F 16/248 Presentation of query results
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A business intelligence and reporting solution can include a databook interface that acts as both as a reporting mechanism and an interface for providing data visualization parameters. In some embodiments, the databook includes a plurality of palettes whereby visualization parameters can be specified through a drag-and-drop interaction with the databook. The databook can include a tab interface to select between data views, graphic visualizations of data currently in the databook, and a composite visualization mechanism that provides output to place one or more rows in context to other data in the databook and/or to forecast trends for one or more databook values. The databook may rely on an underlying dataset collected from multiple distinct sources, such as different databases. The solution may include a security policy restricting access to certain fields, records, and/or columns based on a user'"'"'s role in an organization, data content, and/or a defined access hierarchy for different data items.

Claims

1. A data visualization method, comprising:

providing a databook interface to a user;

identifying a security control policy associated with the user;

querying an operational data set based on a databook definition parameter and returning data results from the operational data set in response to the query, the data results from the operational data set including data from separate source systems using different data formats;

determining, prior to displaying the returned data results, that the security control policy prohibits the user from accessing a first subset of the returned data results and that the security control policy allows the user to access a second subset of the returned data results, the second subset of returned data results including data from the separate source systems;

updating the databook interface to display results of the query, wherein updating the databook interface comprises;

hiding the first subset of the returned data results so that the first subset of the returned data results are prevented from being displayed via the databook interface, and

adding interface objects to the databook interface that provide a common format for displaying the second subset of the returned data results, and

providing the updated databook interface to the user;

determining that rows of data will span multiple pages and dividing the rows for display on the multiple pages; and

rendering a row browsing interface in response to a user command, wherein the row browsing interface comprises (i) a visually-compressed view of the fields of at least one column for at least some of the rows that would otherwise be displayed on the multiple pages and (ii) a magnified view area, wherein a selection of the magnified view area causes an increase in a size of a first portion of the visually-compressed view while the size of a second portion of the visually-compressed view remains unchanged and still visible,

wherein, in response to a user input provided after a selection of a portion of the visually-compressed view, a data display area of the databook interface is updated to select the page containing the rows in the selected magnified view area.

2. The method of claim 1, wherein determining that the security control policy prohibits the user from accessing the first subset of the returned data results comprises:

accessing a content-based security control parameter in the first subset of the returned data results; and

determining that the content-based security control parameter has a value indicating that the user lacks access rights to the first subset of the returned data results.

3. The method of claim 2, wherein the content-based security control parameter is included in a column in the first subset of the returned data results and wherein rows with the value of the content-based security control parameter are hidden from the user in the updated databook interface.

4. The method of claim 1, wherein the security control policy comprises a role-based security control policy and wherein determining that the security control policy prohibits the user from accessing the first subset of the returned data results comprises:

accessing data describing a role of the user in a set of predefined roles;

identifying roles the set of predefined roles that are allowed access to the first subset of the returned data results; and

determining that the role of the user is not included in the roles that are allowed access to the first subset of the returned data results.

5. The method of claim 1, wherein the security control policy comprises a hierarchical-based security control policy,

wherein determining that the security control policy prohibits the user from accessing the first subset of the returned data results comprises identifying a position of the user in a predefined hierarchy and determining that the position of the user in the predefined hierarchy is insufficient to allow access to the first subset of the returned data results.

6. The method of claim 1, wherein the first subset of the returned data results is hidden without hiding columns of the databook interface.

7. The method of claim 1, wherein the databook interface includes at least a group, sort, and filter palette whereby definition parameters for grouping the rows of data, sorting the rows of data, and filtering data from the operational dataset can be specified, respectively.

8. The method of claim 1, wherein the databook interface includes a graphical selection feature for specifying one of a plurality of views, the plurality of views further including:

a graph view rendering at least one graph based on at least some rows and columns of data from the operational data set.

9. The method of claim 1, wherein the operational data set is maintained in memory of at least one computing device, and further comprising:

accessing a plurality of data sources stored in memory separate from the memory in which the operational dataset is maintained; and

copying data from the accessed data sources into the operational dataset.

10. A system comprising:

a processing device; and

a memory device communicatively coupled to the processing device, the processing device being configured to execute instructions stored in the memory device to cause the processing device to;

provide a databook interface to a user,

identify a security control policy associated with the user,

query an operational data set based on a databook definition parameter and return data results from the operational data set in response to the query, the data results from the operational data set including data from separate source systems using different data formats,

determine, prior to a display of the returned data results, that the security control policy prohibits the user from accessing a first subset of the returned data results and that the security control policy allows the user to access a second subset of the returned data results, the second subset of returned data results including data from the separate source systems, and

update the databook interface to display results of the query, wherein updating the databook interface comprises;

hiding the first subset of the returned data results so that the first subset of the returned data results are prevented from being displayed via the databook interface, and

adding interface objects to the databook interface that provide a common format for displaying the second subset of the returned data results, and

providing the updated databook interface to the user,

determine that rows of data will span multiple pages and dividing the rows for display on the multiple pages,

render a row browsing interface in response to a user command, wherein the row browsing interface comprises;

a visually-compressed view of the fields of at least one column for at least some of the rows that would otherwise be displayed on the multiple pages, and a magnified view area that is configured to respond to a selection by causing an increase in a size of a first portion of the visually-compressed view while the size of a second portion of the visually-compressed view remains unchanged and still visible, and

update, in response to a user input provided after a selection of a portion of the visually-compressed view, a data display area of the databook interface to select the page containing the rows in the selected magnified view area.

11. The system of claim 10, wherein the processing device is configured to determine that the security control policy prohibits the user from accessing the first subset of the returned data results by performing operations comprising:

accessing a content-based security control parameter in the first subset of the returned data results; and

determining that the content-based security control parameter has a value indicating that the user lacks access rights to the first subset of the returned data results.

12. The system of claim 11, wherein the content-based security control parameter is included in a column in the first subset of the returned data results and wherein the processing device is configured to hide rows with the value of the content-based security control parameter from the user in the updated databook interface.

13. The system of claim 10, wherein the security control policy comprises a role-based security control policy and wherein the processing device is configured to determine that the security control policy prohibits the user from accessing the first subset of the returned data results by performing operations comprising:

accessing data describing a role of the user in a set of predefined roles;

identifying roles the set of predefined roles that are allowed access to the first subset of the returned data results; and

determining that the role of the user is not included in the roles that are allowed access to the first subset of the returned data results.

14. The system of claim 10, wherein the security control policy comprises a hierarchical-based security control policy,

wherein the processing device is configured to determine that the security control policy prohibits the user from accessing the first subset of the returned data results by performing operations comprising:

identifying a position of the user in a predefined hierarchy, and

determining that the position of the user in the predefined hierarchy is insufficient to allow access to the first subset of the returned data results.

15. The system of claim 10, wherein the processing device is further configured to hide the first subset of the returned data results without hiding columns of the databook interface.

16. The system of claim 10, wherein the databook interface includes at least a group, sort, and filter palette whereby definition parameters for grouping the rows of data, sorting the rows of data, and filtering data from the operational dataset can be specified, respectively.

17. The system of claim 10, wherein the databook interface includes a graphical selection feature for specifying one of a plurality of views, the plurality of views further including:

a graph view rendering at least one graph based on at least some rows and columns of data from the operational data set.

18. The system of claim 10, wherein the operational data set is maintained in memory of at least one computing device, wherein the processing device is further configured to:

access a plurality of data sources stored in memory separate from the memory in which the operational dataset is maintained; and

copy data from the accessed data sources into the operational dataset.