System for Controlling Database Security and Access

• US 20170300704A1
• Filed: 04/19/2016
• Published: 10/19/2017
• Est. Priority Date: 04/19/2016
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Subramanian, Senthil Ramachandran, Iruku, Satya V. Rao
• Granted Patent: US 9,977,915 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

Systems for controlling access to a database are provided. A system may include a computing platform that may receive a request to access a database from a computing device. A unique identifier of the computing device may be compared to pre-registered device identifiers to determine whether the computing device is authorized to access the database. If not, the computing platform may prevent the computing device from accessing the database. If the computing device is authorized to access the database, the system may receive credentials from a user associated with the computing device. The system may determine whether the credentials of the user match credentials of a user authorized to access the database. If not, the system may prevent the user from accessing the database. If the user authorized to access the database, the system may determine one or more types of data the user is authorized to access.

Claims

1. A database access control computing platform, comprising:

a processor;

a communication interface communicatively coupled to the at least a first processor; and

a memory storing computer-readable instructions that, when executed by the at least one processor, cause the database access control computing platform to;

receive, from a user computing device, a request to connect to a database;

determine whether the user computing device is authorized to access the database;

responsive to determining that the user computing device is authorized to access the database, receive credentials from a user associated with the user computing device;

determine whether the received credentials are associated with a user who is authorized to access the database;

responsive to determining that the credentials are associated with a user who is authorized to access the database, connecting the user computing device to the database;

identifying, based on the received credentials, types of data to which the user associated with the user computing device has access; and

dynamically generate a user interface displaying portions of the database including the identified types of data.

2. The database access control computing platform of claim 1, wherein connecting the user computing device to the database includes providing the user computing device with access to the database but not to data stored within the database.

3. The database access control computing platform of claim 1, wherein determining whether the user computing device is authorized to access the database includes determining whether a unique identifier of the user computing device has been pre-registered to access the database.

4. The database access control computing platform of claim 3, wherein connecting the first user computing device to the database is performed only in response to determining that the user computing device is authorized to access the database and determining that the credentials are associated with a user who is authorized to access the database.

5. The database access control computing platform of claim 1, further including instructions that, when executed, cause the database access control computing platform to:

transmit the dynamically generated user interface to the user computing device and cause the user interface to be displayed on a display of the user computing device.

6. The database access control computing platform of claim 1, further including instructions that, when executed, cause the database access control computing platform to:

responsive to determining that the user computing device is not authorized to connect to the database, preventing the user computing device from connecting to the database;

generating a notification; and

causing the notification to be displayed on a display of the user computing device.

7. The database access control computing platform of claim 1, further including instructions that, when executed, cause the database access control computing platform to:

responsive to determining that the received credentials are not associated with a user authorized to access the database, generating a notification and causing the notification to be displayed on a display of the user computing device.

8. The database access control computing platform of claim 1, further including instructions that, when executed, cause the database access control computing platform to:

identify a work group of the user associated with the user computing device; and

identify a plurality of other users within the work group,

wherein identifying the types of data to which the user associated with the user computing device has access includes identifying types of data not associated with the identified plurality of other users within the work group, and

wherein dynamically generating the user interface displaying portions of the database includes not displaying data associated with the plurality of other users in the work group.

16. The method of claim 1, further including:

identifying, by the database access control server, a work group of the user associated with the user computing device; and

identifying, by the database access control server, a plurality of other users within the work group,

wherein identifying the types of data to which the user associated with the user computing device has access includes identifying types of data not associated with the identified plurality of other users within the work group, and

wherein dynamically generating the user interface displaying portions of the database includes not displaying data associated with the plurality of other users in the work group.

9. A method, comprising:

receiving, from a user computing device, a request to connect to a database;

determining, by a database access control server, whether the user computing device is authorized to access the database;

responsive to determining that the user computing device is authorized to access the database, receiving, by the database access control server, credentials from a user associated with the user computing device;

determining, by the database access control server, whether the received credentials are associated with a user who is authorized to access the database;

responsive to determining that the credentials are associated with a user who is authorized to access the database, connecting the user computing device to the database;

identifying, by the database access control server and based on the received credentials, types of data to which the user associated with the user computing device has access; and

dynamically generating, by the database access control server, a user interface displaying portions of the database including the identified types of data.

10. The method of claim 9, wherein connecting the user computing device to the database includes providing the user computing device with access to the database but not to data stored within the database.

11. The method of claim 9, wherein determining whether the user computing device is authorized to access the database includes determining whether a unique identifier of the user computing device has been pre-registered to access the database.

12. The method of claim 11, wherein connecting the user computing device to the database is performed only in response to determining that the user computing device is authorized to access the database and determining that the credentials are associated with a user who is authorized to access the database.

13. The method of claim 9, further including:

transmitting, by the database access control server, the dynamically generated user interface to the user computing device and causing, by the database access control server, the user interface to be displayed on a display of the user computing device.

14. The method of claim 9, further including:

responsive to determining that the user computing device is not authorized to connect to the database, preventing, by the database access control server, the user computing device from connecting to the database;

generating, by the database access control server, a notification; and

causing, by the database access control server, the notification to be displayed on a display of the user computing device.

15. The method of claim 9, further including:

responsive to determining that the received credentials are not associated with a user authorized to access the database, generating, by the database access control server, a notification and causing, by the database access control server, the notification to be displayed on a display of the user computing device.

17. One or more non-transitory computer-readable media storing instructions that, when executed by a computer system comprising at least one processor, memory, and a communication interface, cause the computer system to:

receive, from a user computing device, a request to connect to a database;

determine whether the user computing device is authorized to access the database;

responsive to determining that the user computing device is authorized to access the database, receive credentials from a user associated with the user computing device;

determine whether the received credentials are associated with a user who is authorized to access the database;

responsive to determining that the credentials are associated with a user who is authorized to access the database, connecting the user computing device to the database;

identifying, based on the received credentials, types of data to which the user associated with the user computing device has access; and

dynamically generate a user interface displaying portions of the database including the identified types of data.

18. The one or more non-transitory computer-readable media of claim 17, wherein connecting the user computing device to the database includes providing the user computing device with access to the database but not to data stored within the database.

19. The one or more non-transitory computer-readable media of claim 17, wherein determining whether the user computing device is authorized to access the database includes determining whether a unique identifier of the user computing device has been pre-registered to access the database.

20. The one or more non-transitory computer-readable media of claim 19, wherein connecting the user computing device to the database is performed only in response to determining that the user computing device is authorized to access the database and determining that the credentials are associated with a user who is authorized to access the database.

21. The one or more non-transitory computer-readable media of claim 17, further including instructions that, when executed, cause the computer system to:

transmit the dynamically generated user interface to the user computing device and cause the user interface to be displayed on a display of the user computing device.

22. The one or more non-transitory computer-readable media of claim 17, further including instructions that, when executed, cause the computing system to:

responsive to determining that the user computing device is not authorized to connect to the database, preventing the user computing device from connecting to the database;

generating a notification; and

causing the notification to be displayed on a display of the user computing device.

23. The one or more non-transitory computer-readable media of claim 17, further including instructions that, when executed, cause the computing system to:

responsive to determining that the received credentials are not associated with a user authorized to access the database, generating a notification and causing the notification to be displayed on a display of the user computing device.

24. The one or more non-transitory computer-readable media of claim 17, further including instructions that, when executed, cause the computing system to:

identify a work group of the user associated with the user computing device; and

identify a plurality of other users within the work group,

wherein identifying the types of data to which the user associated with the user device has access includes identifying types of data not associated with the identified plurality of other users within the work group, and

wherein dynamically generating the user interface displaying portions of the database includes not displaying data associated with the plurality of other users in the work group.