Medidata Solutions, Inc.

Aaron Weiner

Matthew Szenher

Isaac Wong

Nolan Carroll

A system for preserving causality of audits may include an upstream service, a downstream service, and an audit service. The upstream service receives a first request including a trace ID and a first span ID, generates a first audit concerning a resource owned by the upstream service and having the trace ID and the first span ID as metadata, persists the first audit to a first database, and generates a second request including the trace ID, a parent span ID, and a second span ID. The downstream service receives the second request from the upstream service, generates a second audit concerning a resource owned by the downstream service and having the trace ID, second span ID, and parent span ID as metadata, and persists the second audit to a second database. The audit service receives and asynchronously centralizes the first and second audits. The metadata can be used to infer causality of the audits. A method for preserving causality of audits is also disclosed and claimed.

System and method for preserving causality of audits

A method for controlling access to a software application includes generating a policy machine template based on at least one role and at least one permission for an operator, generating a policy machine based on the operator and at least one object associated with the operator, and maintaining at least one logical link between the policy machine template and the policy machine. The policy machine is an access control framework permitting directed acyclic graph relationships between objects, and the policy machine controls access to the software application.

Controlling access to a software application

A system for controlling access to a software application includes a policy machine template generator and a policy machine generator. The policy machine template generator may generate a policy machine template based on roles and permissions. The policy machine generator is coupled to the policy machine template generator and may generate a policy machine based on users and objects. The combination of the policy machine template and the policy machine is also claimed, as is a method for controlling access to a software application.

Growing community of inventors

Brooklyn, NY, United States of America

Aaron Weiner