# US 2021/0176331 A1 · System for assessing and enhancing role defining parameters associated with access to resources in a network > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2021/0176331 A1 - Document ID: US20210176331A1 - Status: Published application - Kind: A1 - Application number: 16/707,853 - Filed: 2019-12-09 - Published: 2021-06-10 - Earliest claimed: 2019-12-09 - Assignees: Bank of America Corporation - Applicants: Bank of America Corporation - Inventors: Rajesh Gopinathapai; Jennifer Greenwald; David Pritchard - Web page: https://patentgrep.com/patent/US20210176331A1 ## CPC - H04L 67/306: User profiles - H04L 63/104: {Grouping of entities} - H04L 67/535: {Tracking the activity of the user (network monitoring arrangements H04L43/00; recording of computer activity G06F11/34)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Embodiments of the present invention provide a system for assessing role defining parameters associated with access to resources in a network. The system is configured for extracting information associated with one or more resources, one or more users, and one or more authorizations, determining one or more metrics associated with one or more roles within an entity based on the extracted information, calculating a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources, determining if the parameter is below a predefined threshold, and performing one or more actions. ## Claims ### Claim 1 A system for assessing and enhancing role defining parameters associated with access to resources in a network, the system comprising: at least one network communication interface; at least one non-transitory storage device; and at least one processing device coupled to the at least one non-transitory storage device and the at least one network communication interface, wherein the at least one processing device is configured to: extract information associated with one or more resources, one or more users, and one or more authorizations; determine one or more metrics associated with one or more roles within an entity based on the extracted information; calculate a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources; and in response to calculating the role defining parameter, determine if the parameter is below a predefined threshold. ### Claim 2 (depends on 1) The system of claim 1, wherein the at least one processing device is configured to: determine that the role defining parameter is below the predefined threshold; and in response to determining that the role defining parameter is below the predefined threshold, perform one or more actions to enhance the role defining parameter. ### Claim 3 (depends on 2) The system of claim 2, wherein the at least one processing device is configured to receive the one or more actions from at least one user. ### Claim 4 (depends on 1) The system of claim 1, wherein the at least one processing device is further configured to determine that the role defining parameter is below the predefined threshold and display the role defining parameter and the one or more metrics on a graphical user interface of a user device associated with at least one user. ### Claim 5 (depends on 4) The system of claim 4, wherein displaying the role defining parameter and the one or more metrics comprises generating one or more graphs to represent the one or more metrics and the role defining parameter and displaying the one or more graphs on the graphical user interface. ### Claim 6 (depends on 1) The system of claim 1, wherein the at least one processing device is further configured to: identify real-time changes associated with the one or more resources, the one or more users, and the one or more authorizations; update the one or more metrics associated with the one or more roles; and re-calculate the role defining parameter associated with the one or more roles. ### Claim 7 (depends on 1) The system of claim 1, wherein the one or more metrics comprise at least one of role impact, similarity, and role drift. ### Claim 8 A computer program product for assessing and enhancing role defining parameters associated with access to resources in a network, the computer program product comprising a non-transitory computer-readable storage medium having computer executable instructions for causing a computer processor to perform the steps of: extracting information associated with one or more resources, one or more users, and one or more authorizations; determining one or more metrics associated with one or more roles within an entity based on the extracted information; calculating a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources; and in response to calculating the role defining parameter, determining if the parameter is below a predefined threshold. ### Claim 9 (depends on 8) The computer program product of claim 8, wherein the computer executable instructions cause the computer processor to: determine that the role defining parameter is below the predefined threshold; and in response to determining that the role defining parameter is below the predefined threshold, perform one or more actions to enhance the role defining parameter. ### Claim 10 (depends on 9) The computer program product of claim 9, wherein the computer executable instructions cause the computer processor to receive the one or more actions from at least one user. ### Claim 11 (depends on 8) The computer program product of claim 8, wherein the computer executable instructions cause the computer processor to determine that the role defining parameter is below the predefined threshold and display the role defining parameter and the one or more metrics on a graphical user interface of a user device associated with at least one user. ### Claim 12 (depends on 11) The computer program product of claim 11, wherein displaying the role defining parameter and the one or more metrics comprises generating one or more graphs to represent the one or more metrics and the role defining parameter and displaying the one or more graphs on the graphical user interface. ### Claim 13 (depends on 8) The computer program product of claim 8, wherein the computer executable instructions cause the computer processor to: identify real-time changes associated with the one or more resources, the one or more users, and the one or more authorizations; update the one or more metrics associated with the one or more roles; and re-calculate the role defining parameter associated with the one or more roles. ### Claim 14 (depends on 8) The computer program product of claim 8, wherein the one or more metrics comprise at least one of role impact, similarity, and role drift. ### Claim 15 A computer implemented method for assessing and enhancing role defining parameters associated with access to resources in a network, the method comprising: extracting information associated with one or more resources, one or more users, and one or more authorizations; determining one or more metrics associated with one or more roles within an entity based on the extracted information; calculating a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources; and in response to calculating the role defining parameter, determining if the parameter is below a predefined threshold. ### Claim 16 (depends on 15) The computer implemented method of claim 15, the method further comprises: determine that the role defining parameter is below the predefined threshold; and in response to determining that the role defining parameter is below the predefined threshold, perform one or more actions to enhance the role defining parameter. ### Claim 17 (depends on 16) The computer implemented method of claim 16, wherein the method further comprises receiving the one or more actions from at least one user. ### Claim 18 (depends on 15) The computer implemented method of claim 15, wherein the method further comprises determining that the role defining parameter is below the predefined threshold and display the role defining parameter and the one or more metrics on a graphical user interface of a user device associated with at least one user. ### Claim 19 (depends on 18) The computer implemented method of claim 18, wherein displaying the role defining parameter and the one or more metrics comprises generating one or more graphs to represent the one or more metrics and the role defining parameter and displaying the one or more graphs on the graphical user interface. ### Claim 20 (depends on 15) The computer implemented method of claim 15, wherein the method further comprises: identifying real-time changes associated with the one or more resources, the one or more users, and the one or more authorizations; updating the one or more metrics associated with the one or more roles; and re-calculating the role defining parameter associated with the one or more roles.