US 11,108,882 B2Granted

System for assessing and enhancing role defining parameters associated with access to resources in a network

AssigneeBank of America Corporation

InventorsRajesh Gopinathapai, Jennifer Greenwald, David Pritchard

Life of this patent

Estimating the term…

Loading patent…

Abstract

Embodiments of the present invention provide a system for assessing role defining parameters associated with access to resources in a network. The system is configured for extracting information associated with one or more resources, one or more users, and one or more authorizations, determining one or more metrics associated with one or more roles within an entity based on the extracted information, calculating a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources, determining if the parameter is below a predefined threshold, and performing one or more actions.

Claims15

Dependent claims

A system for assessing and enhancing role defining parameters associated with access to resources in a network, the system comprising:

at least one network communication interface;
at least one non-transitory storage device;
and
at least one processing device coupled to the at least one non-transitory storage device and the at least one network communication interface, wherein the at least one processing device is configured to:
extract information associated with one or more resources, one or more users, and one or more authorizations;
determine one or more metrics associated with one or more roles within an entity based on the extracted information, wherein the one or more metrics comprise at least role impact, similarity, and role drift;
calculate a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources;
in response to calculating the role defining parameter, determine that the parameter is below a predefined threshold;
in response to determining that the role defining parameter is below the predefined threshold, identify one or more actions to enhance the role defining parameter;
automatically generate a single click functionality for performing the one or more actions;
display the single click functionality on a dashboard;
receive a single click input associated with the single click functionality from at least one user;
and
in response to receiving the single click input, perform the one or more actions.

11 more elements

A computer program product for assessing and enhancing role defining parameters associated with access to resources in a network, the computer program product comprising a non-transitory computer-readable storage medium having computer executable instructions for causing a computer processor to perform the steps of:

extracting information associated with one or more resources, one or more users, and one or more authorizations;
determining one or more metrics associated with one or more roles within an entity based on the extracted information, wherein the one or more metrics comprise at least role impact, similarity, and role drift;
calculating a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources;
in response to calculating the role defining parameter, determining that the parameter is below a predefined threshold;
in response to determining that the role defining parameter is below the predefined threshold, identifying one or more actions to enhance the role defining parameter;
automatically generating a single click functionality for performing the one or more actions;
displaying the single click functionality on a dashboard;
receiving a single click input associated with the single click functionality from at least one user;
and
in response to receiving the single click input, performing the one or more actions.

7 more elements

A computer implemented method for assessing and enhancing role defining parameters associated with access to resources in a network, the method comprising:

extracting information associated with one or more resources, one or more users, and one or more authorizations;
determining one or more metrics associated with one or more roles within an entity based on the extracted information, wherein the one or more metrics comprise at least role impact, similarity, and role drift;
calculating a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources;
in response to calculating the role defining parameter, determining that the parameter is below a predefined threshold;
in response to determining that the role defining parameter is below the predefined threshold, identifying one or more actions to enhance the role defining parameter;
automatically generating a single click functionality for performing the one or more actions;
displaying the single click functionality on a dashboard;
receiving a single click input associated with the single click functionality from at least one user;
and
in response to receiving the single click input, performing the one or more actions.

7 more elements

Dependencies are inferred from the claim text.