Security system for event monitoring, detection and notification system

• US 6,697,810 B2
• Filed: 06/20/2001
• Issued: 02/24/2004
• Est. Priority Date: 04/19/2001
• Status: Expired due to Term

• Current Assignee: Infor Global Solutions Michigan Incorporated (Infor Incorporated)
• Original Assignee: Vigilance, Inc. (Netflix, Inc.)
• Inventors: Tu, Kevin Hsiaohsu, Kumar, Nithin, Chen, Bing-Shing, Mi, Peiwei
• Primary Examiner(s): Jung, David Yiuk
• Application Number:
  US09/886,402
• Publication Number:
  US 20020156785A1
• Time in Patent Office: 979 Days
• Field of Search: 707/1-206
• US Class Current: 1/1
• CPC Class Codes: G06F 11/0709 in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: Y10S 707/99942 Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

Methods and apparatus for providing access in an event detection and tracking system are disclosed, where the event detection and tracking system is adapted for storing data associated with a plurality of detected events. An access request for access to at least a portion of data associated with one of the plurality of detected events is received and access information associated with the access request is obtained. It is then determined from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events. When it is determined from the access information that access to at least a portion of the data is to be provided, access is provided in accordance with the access information.

Claims

1. A method for providing access in an event detection and tracking system the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining access information associated with the access request;

determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information;

wherein each of the plurality of detected events is defined by a set of one or more event attributes, and wherein the data includes a set of one or more values associated with one or more of the event attributes, the access information indicating whether access to at least a portion of the data is to be provided based upon the set of values associated with the one or more of the event attributes or based on a set of values of the data stored in association with the detected event.

2. The method as recited in claim 1, wherein the data comprises an indicator oft least one of a condition tat has been satisfied with respect to one of the detected events, a status of one of the detected events, a priority of one of the detected events, an analysis provided in association with one of the detected events, an author of the analysis, a time at which one of the events was detected, one or more individuals to whom resolution of the condition has been assigned, and one or more individuals who are to be notified of the detected event.

3. The method as recited in claim 1, wherein the data comprises a set of monitoring information to be accessed by a monitoring module, the set of monitoring information indicating one or more events to be monitored.

4. The method as recited in claim 1, wherein the access information indicates whether access to a portion of the data is to be provided based upon content of the portion of the data.

5. The method as recited in claim 1, wherein the access information indicates whether access to a 1, portion of the data is to be provided based upon a content of a second portion of the data.

6. The method as recited in claim 1, wherein the access information indicates whether access to the data is to be provided based upon content of a portion of to data.

7. The method as recited in claim 1, wherein the access information indicates whether access to a plurality of portions of the data is to be provided based upon content of one of the plurality of portions of the data.

8. The method as recited in claim 1, wherein the access is at least one of read access and write access.

9. The method as recited in claim 1, wherein the access information indicates whether access to at least a portion of the data is to be provided based upon content of at least a portion of the data.

10. The method as recited in claim 9, wherein the data includes information that tracks a sequence of one or more collaboration processes performed to resolve a condition associated with the detected event.

11. The method as recited in claim 9, wherein the data includes analysis associated wit the detected event and wherein access is granted when the analysis is authored by at least one of a user from which the access request is received, one or more individuals in a security group associated with the user;

and one or more individuals associated with a company for which the user is employed.

12. The method as recited in claim 1, wherein the data associated with one of the plurality of detected events indicates one or more entities responsible for resolution of the condition, and wherein the access information indicates whether access is granted based upon the entities responsible for resolution of to condition.

13. The method as recited in claim 12, wherein access is granted when the entities responsible for resolution of the condition are a user from which the access request is received, one or more individuals in a security group with which the user is associated, or one or more individuals in a company associated with the user.

14. The method as recited in claim 1, wherein the access information indicates one or more values associated with one or more event attributes.

15. The method as recited in claim 14, wherein access to the data is to be provided when the one or more values indicated in the access information are approximately equal to the set of values in the data.

16. The method as recited in claim 14, wherein access to the data is to be provided when the one or more values indicated in the access information include the set of values in the data.

17. The method as recited in claim 1, wherein the access information indicates whether access is granted based upon a source oft least a portion of the data.

18. The method as recited in claim 17, wherein access is granted when the source of the data is a user from which the access request is received, one or more individuals in a security group associated with the user, or one or more individuals in a company associated with the user.

19. The method as recited in claim 1, wherein the access information indicates whether access is granted to a second portion of the data based upon contents of a first portion of the data.

20. The method as recited in claim 19, wherein the first portion of the data indicates a creator of the second portion of the data.

21. The method as recited in claim 20, wherein the first portion of the data indicates an author of analysis associated with one of the plurality of detected events, the analysis being stored in the second portion of the data.

22. The method as recited claim 20, wherein access is granted when the author is a user from which the access requested is received, an individual in a security group associated with the user, or an individual in a company associated with the user.

23. The method as recited in claim 1, wherein the data indicates a status associated with the detected event and wherein the access information indicates whether access is to be granted based upon the status associated with the detected event.

24. The method as recited in claim 1, wherein the detected event is associated with a condition that has been satisfied with respect to the detected event.

25. The method as recited in claim 23, wherein the data indicates an estimated closure date for resolution of the condition with respect to the detected event, and wherein the access information indicates whether access is granted to the estimated closure date indicated in the data.

26. The method as recited in claim 23, wherein the data indicates a priority for resolution of the condition with respect to the detected event, and wherein the access information indicates whether access is granted to the priority indicated in the data.

27. The method as recited in claim 23, wherein the data includes an assignment indicator indicating one or more individuals responsible for resolution of the condition, and wherein the access information indicates whether access is granted to the assignment indicator.

28. The method as recited in claim 23, wherein the data includes one or more analysis portions associated with resolution of the condition, and wherein the access information indicates whether access is granted one or more of the analysis portions.

29. The method as recited in claim 23, wherein the data indicates a set of notification preferences via which notification of the condition with respect to the detected event is to be transmitted, and wherein the access information indicates whether access is granted to the set of notification preferences.

30. The method as recited in claim 29, wherein the set of notification preferences indicates at least one of one or more entities to which the notification is to be sent, a notification medium via which the notification is to be transmitted, and a notification timing preference during which the notification is to be sent.

31. The method as recited in claim 29, wherein when the access includes write access, the notification can be forwarded via a second set of notification preferences.

32. The method as recited in claim 1, wherein the data associated with one of the plurality of detected events indicates one or more entities to be notified of the condition, and wherein the access information indicates whether access is granted based upon the entities to be notified of the condition.

33. The method as recited in claim 1, wherein access is granted when the entities to be notified of the condition are a user from which the access request is received, one or more individuals in a security group with which the user is associated, or one or more individuals in a company associated with the user.

34. A method for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

receiving an access request for access to at least a portion of data associated wit one of the plurality of detected events;

obtaining access information associated with the access request;

determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information;

wherein the access information is associated with a user from which the access request is received.

35. A method for providing access in an event detection and tracking system, to event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining access information associated with the access request;

determining from to access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information;

wherein the access request is received from a user, and wherein the access information is associated with a security group to which the user belongs.

36. A method for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events comprising:

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining access information associated with the access request;

determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information;

wherein the data indicates a condition that has been satisfied with respect to the detected event and wherein the access information indicates whether access to the condition is to be provided.

37. A method for providing in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining access information associated with the access request;

determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information;

wherein the access information includes one or more access rules, each of the access rules indicating whether access is granted to at least a portion of the data.

38. The method as recited in claim 37, wherein the access is at least one of read access and write access.

39. The method as recited in claim 37, wherein each of the plurality of detected events is defined by one or more event attributes, and wherein the data includes a set of one or more values associated with one or more of the event attributes, the access information indicating whether access to one or more of the set of values is to be provided.

40. The method as recited in claim 37, wherein each of the plurality of detected events is defined by a set of one or more event attributes, the access information indicating whether access to one or more of the set of event attributes is to be provided.

41. The method as recited in claim 37, wherein the data indicates a status associated with the detected event, and wherein the access information indicates whether access is granted to the status indicated in the data.

42. A method for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining access information associated with the access request;

determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information;

wherein the access request is received from a user, wherein providing access to at least a portion of the data comprises;

filtering the data provided according to a viewing filter associated with the user, the viewing filter indicating one or more attributes for which accessed data is to be viewed.

43. A computer-readable medium storing thereon computer-readable instructions for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

instruction, for receiving en access request for access to at least a portion of data associated with one of the plurality of detected events;

instructions for obtaining access information associated with the access request;

instructions for determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

instructions for providing access to at least a portion of the data in accordance with the access information when it is determined from the access information that access to at least a portion of the data is to be provided;

wherein each of the plurality of detected events is defined by a set of one or more event attributes, and wherein the data includes a set of one or more values associated with one or more of the event attributes, the access information indicating whether access to at least a portion of the data is to be provided based upon the set of values associated with the one or more of the event attributes or based upon a set of values of the data stored in association with the detected event.

44. An apparatus for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

means for receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

means for obtaining access information associated with the access request;

means for determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

means for providing access to at least a portion of the data in accordance with the access information when it is determined from the access information that access to at least a portion of the data is to be provided;

wherein each of the plurality of detected events is defined by a set of one or more event attributes, and wherein the data includes a set of one or more values associated with one or more of the event attributes, the access information indicating whether access to at least a portion of the data is to be provided based upon the set of values associated with the one or more of the event attributes or based upon a set of values of the data stored in association with the detected event.

45. An apparatus for providing access in an event detection and tracking system, the event detection and tracking system adapted for storing data associated with a plurality of detected events, comprising:

a processor; and

a memory, at least one of the processor and the memory being adapted for;

receiving an access request for access to at least a portion of data associated with one of the plurality of detected events;

obtaining access information associated with the access request;

determining from the access information whether to provide access to at least a portion of the data associated with one of the plurality of detected events; and

when it is determined from the access information that access to at least a portion of the data is to be provided, providing access to at least a portion of the data in accordance with the access information;

wherein each of the plurality of detected events is defined by a set of one or more event attributes, and wherein the data includes a set of one or more values associated with one or more of the event attributes, the access information indicating whether access to at least a portion of the data is to be provided based upon the set of values associated with the one or more of the event attributes or based upon a set of values of the data stored in association with the detected event.