Processing device security management and configuration system and user interface

• US 20050125689A1
• Filed: 09/17/2004
• Published: 06/09/2005
• Est. Priority Date: 09/17/2003
• Status: Abandoned Application

• Current Assignee: Siemens Medical Solutions Health Services Corporation (Siemens AG)
• Original Assignee: Siemens Medical Solutions Health Services Corporation (Siemens AG)
• Inventors: Snyder, Domonic
• Application Number:
  US10/944,126
• Publication Number:
  US 20050125689A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A centralized system, for configuring security settings of different processing devices via network communication, includes a display generator, a communication processor, and a configuration processor. The display generator initiates generation of data representing images including one or more images supporting user selection of data items. The data items include identifiers for identifying different processing devices, an identifier for identifying different websites hosted by corresponding different processing devices, and an identifier for identifying directories of the different websites. The communication processor establishes communication links with the different processing devices via a network. The configuration processor employs the communication links and the data items for initiating setting of security properties of the directories of the different websites in response to a user command.

Claims

1. A centralized system for configuring security settings of a plurality of different processing devices via network communication, comprising:

a display generator for initiating generation of data representing a plurality of images including at least one image supporting user selection of data items including,

identifiers for identifying a plurality of different processing devices,

an identifier identifying a plurality of different websites hosted by a corresponding plurality of said different processing devices and

an identifier for identifying directories of said plurality of different websites;

a communication processor for establishing communication links with said plurality of different processing devices via a network; and

a configuration processor employing said communication links and said data items for initiating setting of security properties of said directories of said plurality of different websites, in response to user command.

2. A system according to claim 1, wherein

said at least one image supports user selection of security properties of said directories.

3. A system according to claim 2, wherein

said security properties of said directories restrict access to at least one of, (a) said directories and (b) an individual one of a plurality of documents identified in a directory.

4. A system according to claim 2, wherein

said security properties restrict access to at least one of, (a) a user at a particular Internet Protocol (IP) compatible address, (b) a user having an IP compatible address within a predetermined range of IP addresses and (c) a particular user within a predetermined group of users.

5. A system according to claim 1, wherein

said at least one image supports user selection of at least one of, (a) a name associated with configuration parameters of a particular user, (b) an identifier identifying a predetermined list of processing devices including said plurality of different processing devices and (c) said security properties.

6. A system according to claim 1, wherein

said plurality of different processing devices comprise at least one of, (a) a plurality of different servers, (b) a plurality of different computers, (c) a plurality of portable processing devices.

7. A system according to claim 1, wherein

said communication processor establishes said communication links using a secure communication protocol and

said secure server communication protocol includes at least one of, (a) Active Directory Service Interface (ADSI) compatible protocol, (b) Secure Socket Layer (SSL) compatible protocol, (c) Lightweight Directory Access Protocol (LDAP), (d) RSA-security compatible protocol and (e) Microsoft windows management instrumentation (WMI) compatible protocol.

8. A system according to claim 1, wherein

said configuration processor sets said security properties of said directory by at least one of, (a) replacing existing settings with new settings and (b) establishing new settings.

9. A system according to claim 1, wherein

a directory comprises an index identifying documents associated with a web site.

10. A system according to claim 1, wherein

said communication processor includes a security processor for initiating access to security settings associated with a directory using an identifier identifying a particular processing device of said plurality of different processing devices, an identifier identifying a particular website, of said plurality of different websites, hosted by said particular processing device and an identifier identifying a directory of said particular website and

said configuration processor stores a record of said set security properties of said directories.

11. A system according to claim 1, wherein

said data items received by said communication processor includes security settings comprising at least one of, (a) an Internet Protocol (IP) compatible address, (b) an identifier identifying a predetermined group of users, (c) an identifier identifying an individual user of a group of users and (d) a plurality of identifiers identifying a corresponding plurality of users associated with a particular group.

12. A system according to claim 1, wherein

said at least one image displays an alert message in response to at least one of, (a) a failure to establish a communication link with a particular processing device of said plurality of different processing devices, (b) a failure to identify a particular website, of said plurality of different websites, hosted by said particular processing device and (c) a failure to identify a directory of said particular website.

13. A system according to claim 1, wherein

said directories of said plurality of different websites are at least one of, (a) virtual directories and (b) physical file directories having a physical storage location.

14. A system according to claim 1, wherein

said at least one image supports user selection of data items including identifiers for identifying a plurality of different processing devices based on user selection of said plurality of different processing devices from at least one predetermined list of processing devices.

15. A system according to claim 1, wherein

said configuration processor employs said communication links and said data items for initiating setting of security properties of a particular directory of a particular website hosted by a particular processing device and including

a data processor for examining a predetermined list identifying websites and directories associated with corresponding processing devices to identify a processing device having said particular directory.

16. A centralized system for configuring security settings of a plurality of different processing devices via network communication, comprising:

a display generator for initiating generation of data representing a plurality of images including at least one image supporting user selection of data items including,

identifiers for identifying a plurality of different processing devices,

an identifier identifying a website hosted by at least one of said different processing devices and

an identifier for identifying a directory of said website;

a communication processor for establishing communication links with said plurality of different processing devices via a network; and

a configuration processor employing said communication links and said data items for setting security properties of said directory of said website hosted by said at least one said plurality of different processing devices, in response to user command.

17. A centralized system for configuring security settings of a plurality of different processing devices via network communication, comprising:

a display generator for initiating generation of data representing a plurality of images including at least one image supporting user selection of data items including,

identifiers for identifying a plurality of different processing devices,

an identifier identifying a plurality of different websites hosted by a corresponding plurality of said different processing devices and

an identifier for identifying directories of said plurality of different websites;

a communication processor for initiating communication with said plurality of different processing devices using a network in response to user command entered via said at least one image; and

a configuration processor employing said communication links and said data items, for initiating setting of security properties of said directories of said plurality of different websites hosted by said corresponding plurality of said different processing devices, in response to user command.

18. A system according to claim 17, including

a tracking processor for maintaining a record of at least one of, (a) user identifiers and (b) changes in security settings, supporting providing an audit trail identifying security setting changes and associated users.

19. A system according to claim 17, wherein

said configuration processor adaptively initiates setting of a plurality of different types of security properties of said directories by a corresponding plurality of different security setting processes.

20. A system according to claim 19, wherein

said plurality of different types of security properties at least one of, (a) restrict user access to a particular Internet Protocol (IP) compatible address or address range, (b) restrict user access to a user within a predetermined group of users and (c) restrict user access to a user within predetermined plurality of groups of users.

21. A system according to claim 20, wherein

said configuration processor employs RSA-security compatible protocol to restrict user access to a user within a predetermined group of users.

22. A system according to claim 17, wherein

said configuration processor sets security properties of said directories of said plurality of different websites hosted by said corresponding plurality of said different processing devices, to the same settings.

23. A system according to claim 17, wherein

said configuration processor sets security properties of said directories of said plurality of different websites hosted by said corresponding plurality of said different processing devices, to settings of a directory of a web site hosted by a particular processing device and imported from said particular processing device.

24. A system according to claim 17, wherein

said configuration processor uses a first communication protocol for establishing a path to said directory and uses a different second communication protocol for communicating setting information to said particular processing device.

25. A system according to claim 24, wherein

said first and second communication protocol comprise at least one of, (a) Active Directory Service Interface (ADSI) compatible protocol, (b) Secure Socket Layer (SSL) compatible protocol, (c) Lightweight Directory Access Protocol (LDAP), (d) RSA-security compatible protocol and (e) Microsoft windows management instrumentation (WMI) compatible protocol.

26. A system according to claim 17, wherein

said directory is at least one of, (a) a virtual directory and (b) a physical file directory having a physical storage location.

27. A system according to claim 17, wherein

said communication processor uses said secure communication link for determining an access path comprising at least one of, (a) a communication path and (b) an address of a physical stored file containing said directory.

28. A system according to claim 27, wherein

said configuration processor associates a label with said access path, said label identifying a group of users.

29. A method for configuring security settings of a plurality of different processing devices via network communication, comprising the activities of:

initiating generation of data representing a plurality of images including at least one image supporting user selection of data items including,

identifiers for identifying a plurality of different processing devices,

an identifier identifying a plurality of different websites hosted by a corresponding plurality of said different processing devices and

an identifier for identifying directories of said plurality of different websites;

establishing communication links with said plurality of different processing devices via a network; and

employing said communication links and said data items for initiating setting of security properties of said directories of said plurality of different websites, in response to user command.

30. A method for configuring security settings of a plurality of different processing devices via network communication, comprising the activities:

initiating generation of data representing a plurality of images including at least one image supporting user selection of data items including,

identifiers for identifying a plurality of different processing devices,

an identifier identifying a plurality of different websites hosted by a corresponding plurality of said different processing devices and

an identifier for identifying directories of said plurality of different websites;

initiating communication with said plurality of different processing devices using a network in response to user command entered via said at least one image; and

employing said communication links and said data items, for initiating setting of security properties of said directories of said plurality of different websites hosted by said corresponding plurality of said different processing devices, in response to user command.

31. A method for configuring security settings of a plurality of different processing devices via network communication, comprising the activities of:

initiating generation of data representing a plurality of images including at least one image supporting user selection of data items including,

identifiers for identifying a plurality of different processing devices,

an identifier identifying a website hosted by at least one of said different processing devices and

an identifier for identifying a directory of said website;

establishing communication links with said plurality of different processing devices via a network; and

employing said communication links and said data items for setting security properties of said directory of said website hosted by said at least one said plurality of different processing devices, in response to user command.