US 11,381,563 B1 · Automated methods and systems for granting complex permissions

Abstract

A permissions management system (PMS) defines the permissions associated with a user and thereby the activities the user can perform with any specific object and/or application or class of objects and/or applications. However, such a PMS requires an administrator to either authorise each permission individually or default permissions to a configuration previously established. The former is time consuming and the latter does not eliminate the former in establishing the roles initially or new roles or custom configurations. According, methods and systems for automating the establishment of permissions and their ongoing maintenance are presented based upon an initial discovery phase of actions performed by either the user or an administrator followed by an automated harmonization phase and a verification phase. This verification phase may employ human interactions or be automated exploiting an artificial intelligence engine.

Claims16

Dependent claims

A method comprising:

establishing upon a system comprising at least a microprocessor an impersonation role as a delegated user for an impersonator where the delegated user is associated with a user of the system;
executing by the impersonator a session as the delegated user;
simulating a plurality of actions within the session undertaken by the impersonator within the session where each action is an action to be performed by the user and is associated with an object forming part of the system, a permission for performing the action upon the object, and a context of the action upon the object;
harmonizing with the system the objects, permissions and contexts associated with the plurality of actions;
and
establishing a subset of the harmonized objects, permissions, and contexts as a profile for the user.

3 more elements

A method comprising:

establishing upon a system comprising at least a microprocessor a training session for a user of the system by an impersonator of the system;
executing the training session by the user;
monitoring a plurality of actions within the session undertaken by the user within the training session where each action is an action associated with an object forming part of the system, a permission for performing the action upon the object, and a context of the action upon the object;
harmonizing with the system the objects, permissions and contexts associated with the plurality of actions;
establishing verification of a subset of the harmonized objects, permissions, and contexts with a first verification process;
and
establishing the subset of the harmonized objects, permissions, and contexts verified by the administrator as a profile for the user.

4 more elements

Dependencies are inferred from the claim text.

Automated methods and systems for granting complex permissions

Life of this patent

Automated methods and systems for granting complex permissions

Life of this patent

Abstract

Claims16