METHOD AND APPARATUS FOR SPECIFYING TIME-VARYING INTELLIGENT SERVICE-ORIENTED MODEL

• US 20130007835A1
• Filed: 06/30/2011
• Published: 01/03/2013
• Est. Priority Date: 06/30/2011
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: PATIL, Sandeep R., RAMANATHAN, Sri, TREVATHAN, Matthew B., IYER, Sreekanth R., SIVAKUMAR, Gandhi
• Granted Patent: US 8,893,217 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 17/00 Digital computing or data processing equipment or methods, specially adapted for specific functions information retrieval, database structures or file system structures therefor G06F16/00
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 8/10 Requirements analysis; Specification techniques
• CPC Class Codes: G06Q 30/016 After-sales
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 50/10 Services
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and an apparatus for specifying a time-varying, intelligent service-oriented model are provided. A method implemented in a computer infrastructure having computer executable code embodied on a computer readable storage medium having programming instructions, includes defining information of a service which is to be provided to one or more users having access to a system storing the defined information. The method further includes defining policies associated with the defined information to allow and deny access to selected portions of the defined information, and exposing to a user of the one or more users the selected portions of the defined information based on the defined policies allowing access to the selected portions of the defined information.

Claims

1. A method implemented in a computer infrastructure having computer executable code embodied on a computer readable storage medium having programming instructions, comprising:

defining information of a service which is to be provided to one or more users having access to a system storing the defined information;

defining policies associated with the defined information to allow and deny access to selected portions of the defined information; and

exposing to a user of the one or more users the selected portions of the defined information based on the defined policies allowing access to the selected portions of the defined information.

2. The method of claim 1, wherein the defined policies comprise at least one service operation which the user is allowed to perform on the defined information.

3. The method of claim 1, wherein the defined policies comprise at least one type of information of the defined information which the user is allowed to access, while denying access to another type of information of the defined information.

4. The method of claim 1, wherein the defined policies comprise at least one time period when the user is allowed access to the defined information.

5. The method of claim 1, wherein the defined information and the defined policies are defined by at least one of the one or more users and a service provider.

6. The method of claim 1, wherein the defined information comprises at least one business object which comprises at least one of:

one or more attributes of the one or more users; and

one or more relationships between the at least one business object and other business objects.

7. The method of claim 6, wherein the defined policies comprise at least one attribute of the one or more attributes that the user is allowed to access.

8. The method of claim 6, wherein the defined policies comprise at least one relationship of the one or more relationships that the user is allowed to access.

9. The method of claim 1, wherein the exposing of the selected portions of the defined information comprises at least one of:

sending the selected portions of the defined information to the user upon receipt of a request for the defined information; and

manifesting the selected portions of the defined information such that the user can directly access the selected portions of the defined information.

10. The method of claim 1, wherein a service provider at least one of creates, maintains, deploys and supports a computer infrastructure operable to perform the steps of claim 1.

11. The method of claim 1, wherein steps of claim 1 are provided by a service provider on a subscription, advertising, and/or fee basis.

12. A system implemented in hardware, comprising:

a computer infrastructure operable to;

create a business object of a service provided to one or more users;

define a context component of the business object for manifestation of the business object, the context component comprising at least one time period when the business object is manifested to the one or more users; and

manifest the business object when a current time is within the at least one time period.

13. The system of claim 12, wherein the context component comprises at least one service operation which the one or more users are allowed to perform on the business object.

14. The system of claim 12, wherein the context component comprises at least one type of business objects that is manifested to the one or more users.

15. The system of claim 12, wherein the business object and the context component are defined by the one or more users.

16. The system of claim 12, wherein the business object comprises at least one of:

one or more attributes of the one or more users; and

one or more relationships between the business object and other business objects.

17. The system of claim 16, wherein the context component comprises at least one attribute of the one or more attributes that is manifested to the one or more users.

18. The system of claim 16, wherein the context component comprises at least one relationship of the one or more relationships that is manifested to the one or more users.

19. The system of claim 12, wherein the computer infrastructure is further operable to:

send the business object to the one or more users upon receipt of a request for the business object from the one or more users; and

manifest the business object such that the one or more users can directly access the business object.

20. The system of claim 12, wherein the computer infrastructure is further operable to stop manifesting the business object when the current time is no longer within the at least one time period.

21. A computer program product comprising a computer usable storage medium having readable program code embodied in the storage medium, the computer program product includes at least one component operable to:

define information of a service which is to be provided to one or more users having access to a system storing the defined information;

define policies associated with the defined information to allow and deny access to selected portions of the defined information; and

expose to a user of the one or more users the selected portions of the defined information based on the defined policies allowing access to the selected portions of the defined information.

22. The computer program product of claim 21, wherein the defined policies comprise at least one of:

at least one service operation which the user is allowed to perform on the defined information;

at least one type of information of the defined information which the user is allowed to access, while denying access to another type of information of the defined information; and

at least one time period when the user is allowed access to the defined information.

23. A method of specifying a time-varying, intelligent service-oriented model, comprising:

providing a computer infrastructure, being operable to;

request a service port for accessing information of a service provided to one or more users;

request access of the information based on the service port; and

access the information when the information is manifested based on parameters defined by the one or more users.

24. The method of claim 23, wherein the parameters comprise at least one of:

at least one service operation which the one or more users are allowed to perform on the information;

at least one type of the information which are manifested to the one or more users; and

at least one time period when the information is manifested to the one or more users.

25. A computer system for specifying a time-varying, intelligent service-oriented model, the system comprising:

a CPU, a computer readable memory and a computer readable storage media;

first program instructions to receive a request from a user to access information that is stored on a system;

second program instructions to determine whether at least a first user and a second user are authorized to have access to the information based on defined rules as to time of retrieval;

third program instructions to provide the first user access to a first type of the information when the first user is requesting access within the defined time of retrieval, while denying access to additional information stored on the system; and

fourth program instructions to provide the second user access to a second type of the information when the second user is requesting access within the defined time of retrieval, while denying access to remaining information stored on the system,

wherein the first, second, third, and fourth program instructions are stored on the computer readable storage media for execution by the CPU via the computer readable memory.