US 11,683,319 B2
Hiearchical access groups for controlling data access, especially patient data access
Dominic James Panarello, Mulhuddart (IE)
Assigned to International Business Machines Corporation, Armonk, NY (US)
Filed by International Business Machines Corporation, Armonk, NY (US)
Filed on Dec. 18, 2020, as Appl. No. 17/126,444.
Application 17/126,444 is a continuation of application No. 16/257,409, filed on Jan. 25, 2019, granted, now 11,323,452.
Prior Publication US 2021/0144148 A1, May 13, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 21/62 (2013.01); G06F 21/60 (2013.01); G16H 10/60 (2018.01); H04L 67/104 (2022.01); H04L 67/60 (2022.01); H04L 67/564 (2022.01)
CPC H04L 63/104 (2013.01) [G06F 21/604 (2013.01); G06F 21/6245 (2013.01); G16H 10/60 (2018.01); H04L 63/102 (2013.01); H04L 67/1044 (2013.01); H04L 67/564 (2022.05); H04L 67/60 (2022.05); G06F 2221/2141 (2013.01)] 11 Claims
OG exemplary drawing
 
1. A system for applying access groups for controlling data access with intelligent caching, the system comprising:
a computer memory capable of storing machine instructions; and
a hardware processor in communication with the computer memory, the hardware processor configured to access the computer memory, the hardware processor performing;
a) storing in a cache, one of a criteria denoting group membership, a group membership of a person, a group membership of a user, a hierarchical structure of a group, a hierarchical structure of any subgroups, any temporal data, or a combination thereof;
b) receiving from the user, a request to access requested data associated with the person from a file system, whereby the request invokes at least one software method;
c) performing a method interception by matching the at least one software method;
d) accessing at least one group membership of the user and at least one group membership of the person;
e) determining whether two conditions are both verified i) the user is a member of a specific group and ii) the specific group contains the person;
f) in response to the two conditions are both being verified, sending the requested data to a user device to display to the user;
g) in response to the two conditions are both being unverified, denying access to the requested data; and
h) updating the cache in response to one of the criteria denoting the at least one group membership, the group membership of the person, the group membership of the user, the hierarchical structure of the group, the hierarchical structure of any subgroups, any temporal data, or a combination thereof.