US 11,379,565 B2 · Identifying and consenting to permissions for workflow and code execution

Abstract

The present invention extends to methods, systems, and computer program products for identifying and consenting to permissions for workflow and code execution. Aspects of the invention can be used to automatically scan a workflow or code definition to identify (potentially all) the actions/triggers a workflow or program intends to perform on behalf of a user. The user is shown the actions/triggers the workflow or program intends to perform (e.g., at a user interface) before consent to perform the actions/triggers is granted. As such, a user is aware of intended actions/triggers of a workflow or program before granting consent. Further, since actions/triggers are identified from the workflow or code definition (and not formulated by an author), permission requests better align with permissions that workflow or program functionality actually uses during execution.

Claims20

Dependent claims

A computer system, comprising:

one or more processors;
memory coupled to the one or more processor and storing instructions configured to cause the one or more processor to:
generate a machine code generated permission summary by scanning a workflow definition from which a workflow is to be instantiated to automatically identify one or more of triggers or actions that use a user credential to access a user resource;
receive a user request to instantiate the workflow;
access user consent data indicative of user consent allowing workflow use of the user credential based on an association between the machine code generated permission summary and the user credential;
instantiate the workflow;
and
perform a workflow activity defined in the machine code generated permission summary on the user resource using the user credential.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application

15/976,868Filed 11 May 2018 · us provisional application

Priority

2 Oct 2017

Published

US 2019/0102525 A14 Apr 2019

Granted

5 Jul 2022

Term ends

Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 12/0875
Addressing of a memory level in which the access to the desired data or data block requires associative addressing means, e.g. caches: with…
G06F 12/0891
Addressing of a memory level in which the access to the desired data or data block requires associative addressing means, e.g. caches: using…
G06F 21/51
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: at application…

Identifying and consenting to permissions for workflow and code execution

Life of this patent

Identifying and consenting to permissions for workflow and code execution

Life of this patent

Abstract

Claims20