# US 2013/0160075 A1 · Entitlement security and control > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2013/0160075 A1 - Document ID: US20130160075A1 - Status: Published application - Kind: A1 - Application number: 13/769,060 - Filed: 2013-02-15 - Published: 2013-06-20 - Earliest claimed: 2003-03-17 - Assignees: Intel Corporation - Inventors: DAVID SCHLESINGER; Timothy Waite; Thiru Thangarathinam - Web page: https://patentgrep.com/patent/US20130160075A1 ## CPC - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F 21/00: Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06Q 20/3674: {involving authentication} - G06Q 20/382: {insuring higher security of transaction} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A system, apparatus, and method are provided for entitlement security and control. A method of embodiments of the invention includes granting an entitlement permission upon satisfaction of entitlement rules by an entitlement request. ## Claims ### Claim 1 A method comprising: granting an entitlement permission upon satisfaction of entitlement rules by an entitlement request. ### Claim 2 (depends on 1) The method of claim 1, further comprising: generating an audit trail of entitlement events by tracking the entitlement events relating to the granting of the entitlement permission, the audit trail having entitlement-related information, the entitlement-related information having information relating to one or more of first users requesting the entitlement permission, second users receiving the entitlement permission, and third users receiving the entitlement permission and not receiving an access permission. ### Claim 3 (depends on 1) The method of claim 1, further comprising: generating an audit trail of entitlement events by tracking the entitlement events relating to the granting of the entitlement permission, wherein the tracking of the entitlement events includes one or more of tracking one or more of trusted data sources and reviewing one or more of entitlement requests, entitlement permission upon changes in one or more of the entitlement rules, entitlement regulations, and user characteristics. ### Claim 4 (depends on 1) The method of claim 1, further comprising: rejecting the entitlement permission upon dissatisfaction of the entitlement rules by the entitlement request; and granting an exception when the entitlement request is not satisfied, the exception comprises an option to submit a second entitlement request to seek the entitlement permission. ### Claim 5 (depends on 1) The method of claim 1, wherein the entitlement rules comprise security classified entitlement rules, and wherein the security classified rules comprise one or more of laws, regulations, policies, plans, roles, and considerations. ### Claim 6 (depends on 1) The method of claim 1, wherein the entitlement permission comprises authorizing access to one or more of a system, an application, and a database. ### Claim 7 A system comprising: a computing device having a memory to store instructions, and a processing device to execute the instructions, the computing device further having a mechanism to perform one or more operations comprising: granting an entitlement permission upon satisfaction of entitlement rules by an entitlement request. ### Claim 8 (depends on 7) The system of claim 7, wherein the one or more operations further comprise: generating an audit trail of entitlement events by tracking the entitlement events relating to the granting of the entitlement permission, the audit trail having entitlement-related information, the entitlement-related information having information relating to one or more of first users requesting the entitlement permission, second users receiving the entitlement permission, and third users receiving the entitlement permission and not receiving an access permission. ### Claim 9 (depends on 7) The system of claim 7, wherein the one or more operations further comprise: generating an audit trail of entitlement events by tracking the entitlement events relating to the granting of the entitlement permission, wherein the tracking of the entitlement events includes one or more of tracking one or more of trusted data sources and reviewing one or more of entitlement requests, entitlement permission upon changes in one or more of the entitlement rules, entitlement regulations, and user characteristics. ### Claim 10 (depends on 7) The system of claim 7, wherein the one or more operations further comprise: rejecting the entitlement permission upon dissatisfaction of the entitlement rules by the entitlement request; and granting an exception when the entitlement request is not satisfied, the exception comprises an option to submit a second entitlement request to seek the entitlement permission. ### Claim 11 (depends on 7) The system of claim 7, wherein the entitlement rules comprise security classified entitlement rules, and wherein the security classified rules comprise one or more of laws, regulations, policies, plans, roles, and considerations. ### Claim 12 (depends on 7) The system of claim 7, wherein the entitlement permission comprises authorizing access to one or more of a system, an application, and a database. ### Claim 13 At least one machine-readable storage medium comprising a plurality of instructions that in response to being executed on a computing device, causes the computing device to carry out a method according to one or more operations comprising: granting an entitlement permission upon satisfaction of entitlement rules by an entitlement request. ### Claim 14 (depends on 13) The machine-readable storage medium of claim 13, wherein the one or more operations further comprise: generating an audit trail of entitlement events by tracking the entitlement events relating to the granting of the entitlement permission, the audit trail having entitlement-related information, the entitlement-related information having information relating to one or more of first users requesting the entitlement permission, second users receiving the entitlement permission, and third users receiving the entitlement permission and not receiving an access permission. ### Claim 15 (depends on 13) The machine-readable storage medium of claim 13, wherein the one or more operations further comprise: generating an audit trail of entitlement events by tracking the entitlement events relating to the granting of the entitlement permission, wherein the tracking of the entitlement events includes one or more of tracking one or more of trusted data sources and reviewing one or more of entitlement requests, entitlement permission upon changes in one or more of the entitlement rules, entitlement regulations, and user characteristics. ### Claim 16 (depends on 13) The machine-readable storage medium of claim 13, wherein the one or more operations further comprise: rejecting the entitlement permission upon dissatisfaction of the entitlement rules by the entitlement request; and granting an exception when the entitlement request is not satisfied, the exception comprises an option to submit a second entitlement request to seek the entitlement permission. ### Claim 17 (depends on 13) The machine-readable storage medium of claim 13, wherein the entitlement rules comprise security classified entitlement rules, and wherein the security classified rules comprise one or more of laws, regulations, policies, plans, roles, and considerations. ### Claim 18 (depends on 13) The machine-readable storage medium of claim 13, wherein the entitlement permission comprises authorizing access to one or more of a system, an application, and a database.