Claims:CLAIMS
What is claimed is:
1. A method comprising:
executing a computing platform engine (170) on one or more servers (1021) of a computing system (100);
executing a component (1761-M) of the computing platform engine (170) on a client device (1061-M) communicatively coupled to the one or more servers (1021) through a computer network (104);
through the component (1761-M) of the computing platform engine (170), initiating a query (2021-K) to the computing platform engine (170) for information from data resident on one or more data sources (1901-R) associated with the computing system (100);
automatically applying, through the computing platform engine (170), one or more entitlements (2101-M) associated with an authorized user (1921-M) of the computing platform engine (170) initiating the query (2021-K) at a time of submission of the query (2021-K) or prior to the time of submission thereof, the one or more entitlements (2101-M) relevant to a level of access to the data resident on the one or more data sources (1901-R); and
efficiently addressing, through the computing platform engine (170), the query (2021-K) based on searching the one or more data sources (1901-R) solely in accordance with the one or more entitlements (2101-M) associated with the authorized user (1921-M) automatically applied to the query (2021-K).
2. The method of claim 1, further comprising retrieving, through the computing platform engine (170), the information (2121-K) from the data resident on the one or more data sources (1901-R) in accordance with the searching of the one or more data sources (1901-R).
3. The method of claim 2, further comprising populating, through the computing platform engine (170), a document (3021/3022) with the retrieved information (2121-K) from the data resident on the one or more data sources (1901-R).
4. The method of claim 1, comprising the one or more data sources (1901-R) comprising a database (204).
5. The method of claim 1, comprising automatically applying, through the computing platform engine (170), the one or more entitlements (2101-M) associated with the authorized user (1921-M) to the query (2021-K) via at least one of: a language used for the query (2021-K) and a script therefor.
6. A computing system (100) comprising:
a server (1021) executing a computing platform engine (170) thereon; and
a client device (1061-M) communicatively coupled to the server (1021) through a computer network (104) and executing a component (1761-M) of the computing platform engine (170) thereon to initiate a query (2021-K) to the computing platform engine (170) for information from data resident on one or more data sources (1901-R) associated with the computing system (100),
wherein the computing platform engine (170),
automatically applies one or more entitlements (2101-M) associated with an authorized user (1921-M) of the computing platform engine (170) initiating the query (2021-K) at a time of submission of the query (2021-K) or prior to the time of submission thereof, the one or more entitlements (2101-M) relevant to a level of access to the data resident on the one or more data sources (1901-R), and
efficiently addresses the query (2021-K) based on searching the one or more data sources (1901-R) solely in accordance with the one or more entitlements (2101-M) associated with the authorized user (1921-M) automatically applied to the query (2021-K).
7. The computing system (100) of claim 6, wherein the computing platform engine (170) further retrieves the information (2121-K) from the data resident on the one or more data sources (1901-R) in accordance with the searching of the one or more data sources (1901-R).
8. The computing system (100) of claim 7, wherein the computing platform engine (170) further populates a document (3021/3022) with the retrieved information (2121-K) from the data resident on the one or more data sources (1901-R).
9. The computing system (100) of claim 6, wherein the computing platform engine (170) automatically applies the one or more entitlements (2101-M) associated with the authorized user (1921-M) to the query (2021-K) via at least one of: a language used for the query (2021-K) and a script therefor.
10. A method comprising:
executing a computing platform engine (170) on one or more servers (1021) of a computing system (100);
executing a component (1761-M) of the computing platform engine (170) on a client device (1061-M) communicatively coupled to the one or more servers (1021) through a computer network (104);
through the component (1761-M) of the computing platform engine (170), initiating a query (2021-K) to the computing platform engine (170) for information from data resident on one or more data sources (1901-R) associated with the computing system (100);
automatically applying, through the computing platform engine (170), one or more entitlements (2101-M) associated with an authorized user (1921-M) of the computing platform engine (170) initiating the query (2021-K) at a time of submission of the query (2021-K) or prior to the time of submission thereof, the one or more entitlements (2101-M) relevant to a level of access to the data resident on the one or more data sources (1901-R); and
efficiently addressing, through the computing platform engine (170), the query (2021-K) based on searching the one or more data sources (1901-R) solely in accordance with the one or more entitlements (2101-M) associated with the authorized user (1921-M) automatically applied to the query (2021-K) and retrieving the information (2121-K) from the data resident on the one or more data sources (1901-R) in accordance with the searching of the one or more data sources (1901-R).
, Description:ENTITLEMENTS BASED EFFICIENT ADDRESSING OF A QUERY THROUGH A COMPUTING SYSTEM

FIELD OF TECHNOLOGY
[0001] This disclosure relates generally to computing systems and, more particularly, to an entitlements based efficient addressing of a query through a computing system.

BACKGROUND
[0002] A computing system may have a number of data sources associated therewith. Access to specific data within the number of data sources may require submission of queries. Submission of said queries to the computing system may result in searching and retrieving a number of sources within, thereby resulting in inefficiencies associated therewith.
SUMMARY
[0003] Disclosed are methods and a system of an entitlements based efficient addressing of a query through a computing system.
[0004] In one aspect, a method includes executing a computing platform engine on one or more servers of a computing system, executing a component of the computing platform engine on a client device communicatively coupled to the one or more servers through a computer network, and, through the component of the computing platform engine, initiating a query to the computing platform engine for information from data resident on one or more data sources associated with the computing system. The method also includes automatically applying, through the computing platform engine, one or more entitlements associated with an authorized user of the computing platform engine initiating the query at a time of submission of the query or prior to the time of submission thereof, and efficiently addressing, through the computing platform engine, the query based on searching the one or more data sources solely in accordance with the one or more entitlements associated with the authorized user automatically applied to the query. The one or more entitlements is relevant to a level of access to the data resident on the one or more data sources.
[0005] In another aspect, a computing system includes a server executing a computing platform engine thereon, and a client device communicatively coupled to the server through a computer network and executing a component of the computing platform engine thereon to initiate a query to the computing platform engine for information from data resident on one or more data sources associated with the computing system. The computing platform engine automatically applies one or more entitlements associated with an authorized user of the computing platform engine initiating the query at a time of submission of the query or prior to the time of submission thereof, and efficiently addresses the query based on searching the one or more data sources solely in accordance with the one or more entitlements associated with the authorized user automatically applied to the query. The one or more entitlements is relevant to a level of access to the data resident on the one or more data sources.
[0006] In yet another aspect, a method includes executing a computing platform engine on one or more servers of a computing system, executing a component of the computing platform engine on a client device communicatively coupled to the one or more servers through a computer network, and, through the component of the computing platform engine, initiating a query to the computing platform engine for information from data resident on one or more data sources associated with the computing system. The method also includes automatically applying, through the computing platform engine, one or more entitlements associated with an authorized user of the computing platform engine initiating the query at a time of submission of the query or prior to the time of submission thereof, and efficiently addressing, through the computing platform engine, the query based on searching the one or more data sources solely in accordance with the one or more entitlements associated with the authorized user automatically applied to the query and retrieving the information from the data resident on the one or more data sources in accordance with the searching of the one or more data sources. The one or more entitlements is relevant to a level of access to the data resident on the one or more data sources.
[0007] Other features will be apparent from the accompanying drawings and from the detailed description that follows.
BRIEF DESCRIPTION OF THE DRAWINGS
[0008] The embodiments of this invention are illustrated by way of example and not limitation in the figures of the accompanying drawings, in which like references indicate similar elements and in which:
[0009] Figure 1 is a schematic view of a computing system, according to one or more embodiments.
[0010] Figure 2 is a schematic view of queries applied to a database associated with computing platform engine of the computing system of Figure 1, according to one or more embodiments.
[0011] Figure 3 is a schematic view of a population of a document with results of a query in accordance with the embodiments of Figures 1-2.
[0012] Figure 4 is a process flow diagram detailing the operations involved in an entitlements based efficient addressing of a query through a computing system, according to one or more embodiments.
[0013] Other features of the present embodiments will be apparent from the accompanying drawings and from the detailed description that follows.
DETAILED DESCRIPTION
[0014] Example embodiments, as described below, may be used to provide methods and/or a system of an entitlements based efficient addressing of a query through a computing system. Although the present embodiments have been described with reference to specific example embodiments, it will be evident that various modifications and changes may be made to these embodiments without departing from the broader spirit and scope of the various embodiments.
[0015] Figure 1 shows a computing system 100 (e.g., a distributed computing system), according to one or more embodiments. In one or more embodiments, computing system 100 may include a number of servers 1021-N communicatively coupled to one another through a computer network 104 (e.g., a Wide Area Network (WAN), a Local Area Network (LAN) and/or a short range network (e.g., WiFi®, Bluetooth®)). Other forms of computer network 104 are within the scope of the exemplary embodiments discussed herein. In one or more embodiments, computing system 100 may also include a number of client devices 1061-M communicatively coupled to the number of servers 1021-N through computer network 104. As implied above, computer network 104 may, in some embodiments, encompass a wide variety of computer networks.
[0016] In one or more embodiments, computing system 100 may be a traditional computing system with data centers, a cloud based computing system or a hybrid computing system. In one or more embodiments, computing system 100 may provide one or more computing environment(s) through a computing platform 150 thereof. Computing platform 150, as discussed herein, may encompass hardware, software, operating systems, applications including browsers and/or virtualized environments (e.g., virtual machines representing operating systems, virtual storage). It should be noted that elements of computing system 100 may be virtualized to provide for efficiency, reduced latency and/or simplified data center level control. Figure 1 shows a computing platform engine 170 (e.g., a comprehensive engine enabling capabilities and functionalities provided through computing platform 150) executing on a server 1021 and components (e.g., computing platform engine components 1702-N; computing platform engine components 1761-M) thereof executing on other servers 1022-N and client devices 1061-M. Examples of client devices 1061-M may include but are not limited to desktop computers, laptops, notebooks, smart devices and mobile phones. Other client devices 1061-M including thin clients are within the scope of the exemplary embodiments discussed herein. Each client device 1061-M may represent a type of a channel for accessing capabilities provided through computing platform engine 170.
[0017] For example, one client device 1061-M may be a mobile device, another client device 1061-M may be a desktop/laptop computer and so on. Each server 1021-N discussed above may be a standalone server or a network of servers configured to operate in conjunction with one another and capable of handling large sets of data. “Processor,” as used herein, may also refer to a number of processors configured to operate in conjunction with one another. In one or more embodiments, server 1021 may include a processor 1721 communicatively coupled to a memory 1741. Figure 1 shows computing platform engine 170 stored in memory 1741; computing platform engine 170 may be executable through processor 1721. Similarly, computing platform engine components 1702-N and computing platform engine components 1762-M may be stored in corresponding memories to be executed on processors associated therewith.
[0018] In one or more embodiments, as shown in Figure 1, computing platform engine 170 may execute an entitlements server 180, which is an engine that enables centralization of definition of application and resource entitlements such that policies relevant to users, groups and roles may be generated to access object representations of applications and resources. "Entitlements," as discussed herein, may refer to rights to use, consume and/or access applications and resources in computing system 100. It should be noted that entitlements server 180 may execute in a distributed manner across servers 1021-N of computing system 100 and that mere execution on server 1021 is shown for the sake of illustrative convenience.
[0019] Figure 1 also shows data sources 1901-R within computing system 100. In one or more embodiments, data sources 1901-R may include but are not limited to mainframes, Relative Database Management Systems (RDBMS), NoSQL databases, feeds, files, legacy systems, Software-as-a-Service (SaaS), a Management Information System (MIS) and/or an entitlement data server (e.g., associated with entitlements server 180). In one or more embodiments, data sources 1901-R may be local to one or more servers 1021-N, local to one or more client devices 1041-M and/or external to both the one or more servers 1021-N and the one or more client devices 1061-M. Figure 1 shows data sources 1901-R as being communicatively coupled to servers 1021-N through computer network 104 merely for the sake of illustrative convenience.
[0020] An example data source 1901-R may include account information of authorized users 1921-M; each authorized user 1921-M may be at a client device 1061-M of computing system 100. It should be noted that client device 1061-M (e.g., a common computing resource) may be shared by multiple users and one authorized user 1921-M per client device 1061-M is merely for illustrative purposes.
[0021] Other constituent information pertinent to data sources 1901-R may include but are not limited to organizational information (not shown) and control information (not shown) related to computing platform 150. Other forms of information within data sources 1901-R are within the scope of the exemplary embodiments discussed herein. In one or more embodiments, one authorized user 1921-M may differ from another authorized user 1921-M in terms of roles within an entity or outside thereof. For example, one or more servers 1021-N may be associated with an example entity of a banking institution, and one or more client devices 1061-M may be associated with one or more authorized users 1921-M (e.g., customers of the banking institution, banking personnel). One or more other servers 1021-N may be associated with another example entity of a software service provider associated with computing platform engine 170. One or more other client devices 1061-M may be associated with one or more other authorized users 1921-M (e.g., sales, pre-sales, testing and/or development team personnel associated with the another example entity of the software service provider).
[0022] Figure 2 shows queries 2021-K applied to a database 204 associated with computing platform engine 170, according to one or more embodiments. In one or more embodiments, database 204 may be regarded as an example data source 1901-R. A "query" may be defined as a request for information for data resident on data sources 1901-R. Typically, a generic query for information from a data source may result in searching the entire data source for the specific information. In case the information requested is very specific, a language used for the query may incorporate specificities therein. For example, a query to a database may request information from a specific number of fields therewithin. This specificity may be incorporated in the query and/or in a query script. The information may thus be fetched from a reduced search space.
[0023] In the case of an authorized user 1921-M submitting a typical query to computing platform engine 170, the information retrieved from one or more data sources 1901-R in accordance with the requirements of the query may then be filtered based on the entitlements 2101-M (or, entitlement data) associated therewith. In one or more embodiments, as discussed above, entitlements 2101-M of an authorized user 1921-M may be relevant to a level of access to data resident on data sources 1901-R. For example, if authorized user 1921-M is authorized to access only specific fields of a database (example data source 1901-R), then entitlements server 180 may apply the restrictions on/filter the retrieved information/data/data sets to provide the filtered information that authorized user 1921-M is authorized to access. This may be an information retrieval process that is inefficient and/or slower than the process to be discussed below because the filtering based on entitlements 2101-M is done after the information retrieval. Figure 2 shows entitlements 2101-M being part of memory 1741 of server 1021 and associated with entitlements server 180.
[0024] In accordance with the exemplary embodiments discussed herein, entitlements 2101-M associated with (or of) an authorized user 1921-M may be automatically applied to a query 2021-K initiated (e.g., through a client device 1061-M) thereby at a time of submission thereof to computing platform engine 170 or prior thereto. In one or more embodiments, thus, computing platform engine 170 executing entitlements server 180 itself may automatically apply the aforementioned entitlements 2101-M of authorized user 1921-M initiating query 2021-K for information from data resident on one or more data sources 1901-R to query 2021-K at the time of the submission thereof or prior thereto.
[0025] In one specific implementation, a language used for a query 2021-K and/or a script therefor may automatically incorporate entitlement information (e.g., entitlements 2101-M) therein (e.g., through computing platform engine 170) such that the process of searching and/or retrieving information from the data resident on the one or more data sources 1901-R may be efficient. In one or more embodiments, this may reduce the search space across the one or more data sources 1901-R and/or quicken the retrieval of requested information (e.g., requested information 2121-K) pertinent to query 2021-K as data resident on the one or more data sources 1901-R solely relevant to entitlements 2101-M of authorized user 1921-M may be searched within and requested information 2121-K retrieved therefrom.
[0026] Figure 3 shows population of a document (e.g., a report) 3021/3022 with results of a query 2021-K in accordance with the embodiments of Figures 1-2. In one or more embodiments, in response to computing platform engine 170 detecting a query 2021-K from authorized user 1921/authorized user 1922, as seen above, computing platform engine 170 (e.g., entitlements server 180) may automatically apply entitlements 2101/entitlements 2102 of authorized user 1921/authorized user 1922 to the detected query 2021-K prior to submission thereof to computing platform engine 170 or at the time of submission. In one or more embodiments, the efficient information retrieval process enabled thereby may further enable computing platform engine 170 to populate a document 3021/document 3022 (e.g., a text document, a word document, a spreadsheet, a file) with the retrieved information from the one or more data sources 1901-R. Based on the automatic application of corresponding entitlements 2101/2102 to queries 2021-K, the retrieved information populating documents 3021/3022 may provide for continued confidentiality and/or uncompromised integrity of the data resident on the one or more data sources 1901-R and/or data floating around computing system 100.
[0027] Figure 4 shows a process flow diagram detailing the operations involved in an entitlements based efficient addressing of a query (e.g., query 2021-K) through a computing system (e.g., computing system 100), according to one or more embodiments. In one or more embodiments, operation 402 may involve executing a computing platform engine (e.g., computing platform engine 170) on one or more servers (e.g., server 1021) of the computing system. In one or more embodiments, operation 404 may involve executing a component (e.g., computing platform engine component 1761-M) of the computing platform engine on a client device (e.g., client device 1061-M) communicatively coupled to the one or more servers through a computer network (e.g., computer network 104).
[0028] In one or more embodiments, operation 406 may involve, through the component of the computing platform engine, initiating the query to the computing platform engine for information from data resident on one or more data sources (1901-R) associated with the computing system. In one or more embodiments, operation 408 may involve automatically applying, through the computing platform engine, one or more entitlements (e.g., entitlements 2101-M) associated with an authorized user (e.g., authorized user 1921-M) of the computing platform engine initiating the query at a time of submission of the query or prior to the time of submission thereof.
[0029] In one or more embodiments, the one or more entitlements may be relevant to a level of access to the data resident on the one or more data sources. In one or more embodiments, operation 410 may then involve efficiently addressing, through the computing platform engine, the query based on searching the one or more data sources solely in accordance with the one or more entitlements associated with the authorized user automatically applied to the query.
[0030] It may be appreciated that the various systems, methods, and apparatus disclosed herein may be embodied in a non-transitory machine-readable medium (e.g., a hard disk, a Compact Disc (CD), a Digital Video Disc (DVD), a Blu-ray disc®) and/or a machine-accessible medium compatible with a data processing system (e.g., computing system 100, servers 1021-N), and/or may be performed in any order.
[0031] The structures and modules in the figures may be shown as distinct and communicating with only a few specific structures and not others. The structures may be merged with each other, may perform overlapping functions, and may communicate with other structures not shown to be connected in the figures.
[0032] Although the present embodiments have been described with reference to specific example embodiments, it will be evident that various modifications and changes may be made to these embodiments without departing from the broader spirit and scope of the various embodiments. Accordingly, the specification and drawings are to be regarded in an illustrative rather than a restrictive sense.