Reconciling Access Rights at IAM System Implementing IAM Data Model
AssigneeBank of America Corporation
InventorsJohn Kling, Bryan Thompson, Ward Green
Life of this patent
Estimating the term…
Abstract
Systems and methods for reconciling access rights provisioned for physical computing resources of a computer system are provided. A reconciler may identify current physical computing resources accessible to a user account of the computer system and a physical entitlement specification associated with the user account. The reconciler may determine whether adjustment of access rights is needed based on a comparison of the current physical computing resources to the physical entitlement specification. Access rights to at least one physical computing resource may be adjusted in response to a determination that adjustment of access rights is needed.
Claims20
A computer-implemented method for reconciling access rights provisioned for physical computing resources of a computer system comprising:
- identify, at a reconciler, a set of current physical computing resources accessible to a user account of the computer system;
- identify, at the reconciler, a physical entitlement specification associated with the user account;
- determining, by the reconciler, whether adjustment of access rights is needed based on a comparison of individual current physical computing resources to the physical entitlement specification;
- and
- adjusting access rights to at least one of the physical computing resources of the computer system responsive to a determination that adjustment of access rights is needed.
A system for reconciling access rights provisioned for physical computing resources of a computer system comprising:
- a processor;
- an entitlement translator that, in operation, generates a physical entitlement specification based at least in part on a set of logical entitlements associated with a user account and a set of physical permission specifications;
- an access control manager that, in operation, initiates provisioning of access rights to at least one physical computing resource specified in the physical entitlement specification;
- and
- a reconciler that, in operation,
- determines whether adjustment of access rights is needed based on a comparison of the physical entitlement specification to a set of current physical computing resources a user account has access to, and
- initiates an adjustment of access rights to at least one of the physical computing resources of the computer system responsive to a determination that adjustment of access rights is needed.
A non-transitory computer-readable medium having instructions stored thereon that, when executed by a processor, cause the processor to perform steps for reconciling access rights for physical computing resources of a computer system, the steps comprising:
- identifying a set of current physical computing resources accessible to a user account of the computer system;
- identifying a physical entitlement specification associated with the user account;
- determining whether adjustment of access rights is needed based on a comparison of individual current physical computing resources to the physical entitlement specification;
- and
- adjusting access rights to at least one of the physical computing resources of the computer system responsive to a determination that adjustment of access rights is needed.
Dependencies are inferred from the claim text.