Systems And Methods For Rule Inheritance

• US 20080270353A1
• Filed: 06/04/2008
• Published: 10/30/2008
• Est. Priority Date: 02/01/2000
• Status: Active Grant

• Current Assignee: Morinville V. Paul
• Original Assignee: ORG Structure Innovations, LLC (Patrick J. Curry)
• Inventors: Morinville, Paul V.
• Granted Patent: US 7,822,777 B2
• Time in Patent Office: Days
• US Class Current: 707/2
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 10/0631 Resource planning, allocation, distributing or scheduling for enterprises or organisations
• CPC Class Codes: G06Q 10/06311 Scheduling, planning or task assignment for a person or group
• CPC Class Codes: G06Q 10/06315 Needs-based resource requirements planning or analysis
• CPC Class Codes: G06Q 10/06316 Sequencing of tasks or work
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management
• CPC Class Codes: G06Q 30/0282 Rating or review of business operators or products
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99936 Pattern matching access
• CPC Class Codes: Y10S 707/99942 Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing
• CPC Class Codes: Y10S 707/99947 Object-oriented database structure reference
• CPC Class Codes: Y10S 707/99948 Application of database or data structure, e.g. distributed, multimedia, or image

Abstract

Systems and methods for automating and increasing the efficiency of access to data using inheritance of access rules within an organization based upon the relationship of positions within the organization and the roles associated with the positions. In one embodiment, a role structure is used in conjunction with a hierarchical organization structure to allow access rules to be inherited by some of the positions from other positions based upon the relationship of positions within the organization and the roles associated with the positions. Access rules can be applied across equivalent or similar positions, yet differentiated between distinct portions of the organization and the distinct roles associated with the positions. Consequently, particular access rules are not necessarily inherited by all of the positions subordinate to a particular position with which the rule originates, and are not necessarily inherited by all of the positions that are associated with a particular role.

Claims

1-19. -19. (canceled)

20. A method comprising:

defining a hierarchical structure of positions;

associating at least a first one of the positions with at least a first user;

associating one or more roles with at least one of the group consisting of the first position and the first user;

associating one or more rules for one or more business processes with the one or more roles;

automatically applying the one or more rules to positions and users that are subordinate to the first position within the hierarchical structure and that are associated with the one or more roles; and

controlling access to the one or more business processes according to the rules.

21. The method of claim 20, wherein the one or more roles comprise ones of the roles that have a selected major function.

22. The method of claim 20, wherein the one or more roles comprise ones of the roles that have a selected major function and a selected specialty.

23. The method of claim 20, wherein the one or more roles comprise ones of the roles that have a selected major function, a selected specialty and a selected skill.

24. The method of claim 20, further comprising:

for a second position subordinate to the first position,

associating one or more additional rules with the one or more business processes, wherein the additional rules are applicable to one or more of the roles, and

automatically applying the one or more additional rules to positions that are subordinate to the second position within the hierarchical structure and that are associated with the one or more of the roles to which the additional rules are applicable.

25. The method of claim 20, wherein each position in the hierarchical structure inherits the access/approval rules that are associated with all of the superior positions in the hierarchical organizational structure and that are applicable to the one or more roles associated with the position.

26. The method of claim 20, wherein the one or more rules define access rights of the one or more roles with respect to the one or more business processes.

27. The method of claim 20, wherein the one or more rules define restrictions of the one or more roles with respect to the one or more business processes.

28. The method of claim 20, wherein the one or more business processes comprise accessing a company'"'"'s information.

29. The method of claim 20, further comprising the first position modifying rules implemented by the first position and positions subordinate to the first position in the hierarchical structure.

30. The method of claim 29, further comprising preventing the first position from modifying rules implemented by positions superior to the first position in the hierarchical structure.

31. The method of claim 20, further comprising automatically making the one or more business processes available to all positions subordinate to the first role within the hierarchical structure.

32. A product comprising a computer-readable medium having instructions encoded thereon which are executable by a computer system to perform the method including:

defining a hierarchical structure of positions;

associating at least a first one of the positions with at least a first user;

associating one or more roles with at least one of the group consisting of the first position and the first user;

associating one or more rules for one or more business processes with the one or more roles; and

automatically applying the one or more rules to positions and users that are subordinate to the first position within the hierarchical structure and that are associated with the one or more roles.

33. The product of claim 32, wherein the one or more roles comprise ones of the roles that have a selected major function.

34. The product of claim 32, wherein the one or more roles comprise ones of the roles that have a selected major function and a selected specialty.

35. The product of claim 32, wherein the one or more roles comprise ones of the roles that have a selected major function, a selected specialty and a selected skill.

36. The product of claim 32, further comprising:

for a second position subordinate to the first position,

associating one or more additional rules with the one or more business processes, wherein the rules are applicable to one or more of the roles, and

automatically associating the one or more additional rules with the one or more business processes for positions that are subordinate to the second position within the hierarchical structure and that are associated with the one or more roles.

37. The product of claim 32, wherein each position in the hierarchical structure inherits the rules that are associated with all of the superior positions in the hierarchical structure and that are applicable to the one or more roles associated with the position.

38. The product of claim 32, wherein the method further comprises enabling the first position to modify rules implemented by the first position and positions subordinate to the first position in the hierarchical structure.

39. The product of claim 38, wherein the method further comprises preventing the first position from modifying rules implemented by positions superior to the first position in the hierarchical structure.

40. A computer-readable medium having instructions encoded thereon which are executable by a computer system to perform the method including:

enabling definition of a hierarchical structure of positions;

associating at least a first one of the positions with at least a first user;

associating one or more roles with at least one of the group consisting of the first position and the first user;

associating one or more rules for one or more business processes with the one or more roles;

automatically applying the one or more rules to positions and users that are subordinate to the first position within the hierarchical structure and that are associated with the one or more roles; and

controlling access to the one or more business processes according to the rules.

41. A computer-readable medium having instructions encoded thereon which are executable by a computer system to perform the method including:

receiving data defining a hierarchical structure of positions;

receiving data defining an association of at least a first one of the positions with at least a first user;

receiving data defining associations of one or more roles with at least one of the group consisting of the first position and the first user;

receiving data defining associations of one or more rules for one or more business processes with one or more of the roles;

automatically applying the one or more rules with all positions and users that are subordinate to the first position and that are associated with the one or more roles; and

storing data defining associations of the one or more rules with the positions and users that are subordinate to the first position and that are associated with the one or more roles.