Security system for event monitoring, detection and notification system

• US 20020156785A1
• Filed: 06/20/2001
• Published: 10/24/2002
• Est. Priority Date: 04/19/2001
• Status: Active Grant

• Current Assignee: Infor Global Solutions Michigan Incorporated (Infor Incorporated)
• Original Assignee: Vigilance, Inc. (Netflix, Inc.)
• Inventors: Chen, Bing-Shing, Mi, Peiwei, Tu, Kevin Hsiaohsu, Kumar, Nithin
• Granted Patent: US 6,697,810 B2
• Time in Patent Office: Days
• US Class Current: 707/10
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: Y10S 707/99942 Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

Methods and apparatus for providing access in an event detection and tracking system are disclosed, where the event detection and tracking system is adapted for storing data associated with a plurality of detected events. An access request for access to at least a portion of data associated with one of the plurality of detected events is received and access information associated with the access request is obtained. It is then determined from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events. When it is determined from the access information that access to at least a portion of the data is to be provided, access is provided in accordance with the access information.

Claims

1. A method for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining access information associated with the access request;

determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information.

2. The method as recited in claim 1, wherein the data comprises an indicator of at least one of a condition that has been satisfied with respect to one of the detected events, a status of one of the detected events, a priority of one of the detected events, an analysis provided in association with one of the detected events, an author of the analysis, a time at which one of the events was detected, one or more individuals to whom resolution of the condition has been assigned, and one or more individuals who are to be notified of the detected event.

3. The method as recited in claim 1, wherein the data comprises a set of monitoring information to be accessed by a monitoring module, the set of monitoring information indicating one or more events to be monitored.

4. The method as recited in claim 1, wherein the access information indicates whether access to a portion of the data is to be provided based upon content of the portion of the data.

5. The method as recited in claim 1, wherein the access information indicates whether access to a first portion of the data is to be provided based upon a content of a second portion of the data.

6. The method as recited in claim 1, wherein the access information indicates whether access to the data is to be provided based upon content of a portion of the data.

7. The method as recited in claim 1, wherein the access information indicates whether access to a plurality of portions of the data is to be provided based upon content of one of the plurality of portions of the data.

8. The method as recited in claim 1, wherein the access is at least one of read access and write access.

9. The method as recited in claim 1, wherein the access information is associated with a user from which the access request is received.

10. The method as recited in claim 1, wherein the access request is received from a user, and wherein the access information is associated with a security group to which the user belongs.

11. The method as recited in claim 1, wherein the access information indicates whether access to at least a portion of the data is to be provided based upon content of at least a portion of the data.

12. The method as recited in claim 11, wherein the data includes information that tracks a sequence of one or more collaboration processes performed to resolve a condition associated with the detected event.

13. The method as recited in claim 11, wherein the data includes analysis associated with the detected event, and wherein access is granted when the analysis is authored by at least one of a user from which the access request is received, one or more individuals in a security group associated with the user, and one or more individuals associated with a company for which the user is employed.

14. The method as recited in claim 1, wherein the data indicates a condition that has been satisfied with respect to the detected event, and wherein the access information indicates whether access to the condition is to be provided.

15. The method as recited in claim 1, wherein the data associated with one of the plurality of detected events indicates one or more entities responsible for resolution of the condition, and wherein the access information indicates whether access is granted based upon the entities responsible for resolution of the condition.

16. The method as recited in claim 15, wherein access is granted when the entities responsible for resolution of the condition are a user from which the access request is received, one or more individuals in a security group with which the user is associated, or one or more individuals in a company associated with the user.

17. The method as recited in claim 1, wherein the data associated with one of the plurality of detected events indicates one or more entities to be notified of the condition, and wherein the access information indicates whether access is granted based upon the entities to be notified of the condition.

18. The method as recited in claim 17, wherein access is granted when the entities to be notified of the condition are a user from which the access request is received, one or more individuals in a security group with which the user is associated, or one or more individuals in a company associated with the user.

19. The method as recited in claim 1, wherein the access information includes one or more access rules, each of the access rules indicating whether access is granted to at least a portion of the data.

20. The method as recited in claim 19, wherein the access is at least one of read access and write access.

21. The method as recited in claim 1, wherein each of the plurality of detected events is defined by one or more event attributes, and wherein the data includes a set of one or more values associated with one or more of the event attributes, the access information indicating whether access to one or more of the set of values is to be provided.

22. The method as recited in claim 1, wherein each of the plurality of detected events is defined by a set of one or more event attributes, the access information indicating whether access to one or more of the set of event attributes is to be provided.

23. The method as recited in claim 1, wherein each of the plurality of detected events is defined by a set of one or more event attributes, and wherein the data includes a set of one or more values associated with one or more of the event attributes, the access information indicating whether access to the data is to be provided based upon the set of values associated with the one or more of the event attributes.

24. The method as recited in claim 23, wherein the access information indicates one or more values associated with one or more event attributes.

25. The method as recited in claim 24, wherein access to the data is to be provided when the one or more values indicated in the access information are approximately equal to the set of values in the data.

26. The method as recited in claim 24, wherein access to the data is to be provided when the one or more values indicated in the access information include the set of values in the data.

27. The method as recited in claim 1, wherein the access request is received from a user, wherein providing access to at least a portion of the data comprises:

filtering the data provided according to a viewing filter associated with the user, the viewing filter indicating one or more attributes for which accessed data is to be viewed.

28. The method as recited in claim 1, wherein the access information indicates whether access is granted based upon a source of at least a portion of the data.

29. The method as recited in claim 28, wherein access is granted when the source of the data is a user from which the access request is received, one or more individuals in a security group associated with the user, or one or more individuals in a company associated with the user.

30. The method as recited in claim 1, wherein the access information indicates whether access is granted to a second portion of the data based upon contents of a first portion of the data.

31. The method as recited in claim 30, wherein the first portion of the data indicates a creator of the second portion of the data.

32. The method as recited in claim 31, wherein the first portion of the data indicates an author of analysis associated with one of the plurality of detected events, the analysis being stored in the second portion of the data.

33. The method as recited in claim 31, wherein access is granted when the author is a user from which the access request is received, an individual in a security group associated with the user, or an individual in a company associated with the user.

35. The computer-readable medium as recited in claim 34, wherein the computer readable medium is selected from the group consisting of CD-ROM, floppy disk, tape, flash memory, system memory, hard drive, and data signal embodied in a carrier wave.

39. The method as recited in claim 38, further comprising:

configuring a plurality of rules from which the one or more access rules can be obtained.

40. The method as recited in claim 39, wherein configuring comprises:

associating the plurality of rules with one or more users.

41. The method as recited in claim 39, wherein configuring comprises:

associating the plurality of rules with a security group, the security group being linked to one or more users.

42. The method as recited in claim 1, wherein the data indicates a status associated with the detected event, and wherein the access information indicates whether access is granted to the status indicated in the data.

43. The method as recited in claim 1, wherein the access information indicates whether access is to be granted based upon a status associated with the detected event.

44. The method as recited in claim 1, wherein the detected event is associated with a condition that has been satisfied with respect to the detected event.

45. The method as recited in claim 43, wherein the data indicates an estimated closure date for resolution of the condition with respect to the detected event, and wherein the access information indicates whether access is granted to the estimated closure date indicated in the data.

46. The method as recited in claim 43, wherein the data indicates a priority for resolution of the condition with respect to the detected event, and wherein the access information indicates whether access is granted to the priority indicated in the data.

47. The method as recited in claim 43, wherein the data includes an assignment indicator indicating one or more individuals responsible for resolution of the condition, and wherein the access information indicates whether access is granted to the assignment indicator.

48. The method as recited in claim 43, wherein the data includes one or more analysis portions associated with resolution of the condition, and wherein the access information indicates whether access is granted one or more of the analysis portions.

49. The method as recited in claim 43, wherein the data indicates a set of notification preferences via which notification of the condition with respect to the detected event is to be transmitted, and wherein the access information indicates whether access is granted to the set of notification preferences.

50. The method as recited in claim 49, wherein the set of notification preferences indicates at least one of one or more entities to which the notification is to be sent, a notification medium via which the notification is to be transmitted, and a notification timing preference during which the notification is to be sent.

51. The method as recited in claim 49, wherein when the access includes write access, the notification can be forwarded via a second set of notification preferences.

34. A computer-readable medium for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

instructions for receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

instructions for obtaining one or more access rules associated with the access request, the one or more access rules indicating whether access to the data is granted based upon a content of at least a portion of the data;

instructions for determining from the access rules whether to provide access to at least a portion of the data; and

instructions for providing access to at least a portion of the data in accordance with the access information when it is determined from the access rules that access to at least a portion of the data is to be provided.

36. An apparatus for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

a processor; and

a memory, at least one of the processor and the memory being adapted for;

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining one or more access rules associated with the access request, the one or more access rules indicating whether access to the data is granted based upon a content of at least a portion of the data;

determining from the access rules whether to provide access to at least a portion of the data; and

when it is determined from the access rules that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information.

37. An apparatus for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

means for receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

means for obtaining one or more access rules associated with the access request, the one or more access rules indicating whether access to the data is granted based upon a content of at least a portion of the data;

means for determining from the access rules whether to provide access to at least a portion of the data; and

means for providing access to at least a portion of the data in accordance with the access information when it is determined from the access rules that access to at least a portion of the data is to be provided.

38. A method for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining one or more access rules associated with the access request, the one or more access rules indicating whether access to the data is granted based upon a content of at least a portion of the data;

determining from the access rules whether to provide access to at least a portion of the data; and

when it is determined from the access rules that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information.

52. A method of monitoring events in a monitoring system, comprising:

obtaining a set of monitor information including a set of one or more events to be detected;

monitoring data to detect one or more of the set of events;

storing information associated with each of the detected events; and

providing access to the stored information in accordance with one or more access rules.

53. The method s recited in claim 52, wherein the set of monitor information indicates an author of the set of monitor information, and wherein one or more of the access rules indicates whether access to the information associated with one or more of the detected events is enabled based upon the author of the set of monitor information.

54. The method as recited in claim 53, wherein the one or more access rules indicate that access is enabled when the author of the set of monitor information is at least one of a user from which an access request for at least a portion of the stored information is received, an individual in a security group associated with the user, and an individual in a company associated with the user.

55. The method as recited in claim 52, wherein the set of monitor information further includes a set of one or more conditions to be satisfied with respect to one or more of the set of events, and wherein monitoring the data further comprises detecting satisfaction of one or more of the set of conditions with respect to the events.

56. The method as recited in claim 52, wherein at least one of the access rules indicates whether access to at least a portion of the information is to be provided based upon content of a portion of the information.

57. The method as recited in claim 52, wherein each of the set of one or more events is defined by a set of one or more attributes, and wherein at least one of the access rules indicates whether one or more of the set of attributes can be accessed.

60. The method as recited in claim 59, wherein the access is at least one of read access and write access.

61. The method as recited in claim 59, wherein the set of monitor information indicates that monitoring in association with the set of monitor information is to be activated when in a first state, and de-activated when in a second state.

58. A method of monitoring events in a monitoring system, comprising:

monitoring data in accordance with a set of monitor information including a set of one or more events to be detected;

storing information associated with each of the detected events; and

providing access to the stored information in accordance with one or more access rules.

59. A method of providing access to a set of monitor information for monitoring events in a monitoring system, comprising:

monitoring data in accordance with a set of monitor information including a set of one or more events to be detected;

receiving a request to access at least a portion of the set of monitor information;

obtaining an access rule indicating whether at least a portion of the set of monitor information can be accessed; and

providing access to at least a portion of the set of monitor information when the access rule indicates that at least a portion of the set of monitor information can be accessed.

62. A method of configuring an event tracking system, comprising:

receiving a configuration for one or more access rules, the configuration indicating whether access to at least a portion of data associated with one or more detected events is to be enabled, wherein one or more of the configured access rules indicate that access to at least a portion of data associated with the one or more detected events is enabled based upon a value of at least a portion of the data; and

associating the configured access rules with one or more individuals.

63. The method as recited in claim 62, wherein one of the access rules indicates whether access to at least a portion of data associated with one or more of the detected events is enabled.

64. The method as recited in claim 62, wherein one of the access rules indicates whether access to an analysis portion of data associated with one or more of the detected events is enabled.