Systems and methods for role harmonization, application, and monitoring
AssigneePathlock Inc.
InventorsDRIES HORIONS, SUMIT SANGHA
Life of this patent
Estimating the term…
Abstract
A system including: at least one processor, and at least one memory having stored thereon computer program code that, when executed by the at least one processor, instructs the at least one processor to: receive one or more separation of duty (SoD) rulesets; extract user authorizations corresponding to actions that potentially violate the one or more SoD rulesets; harmonize the extracted authorizations; and identify, from the harmonized extracted authorizations, SoD violations.
Claims21
A system comprising:
- at least one processor;
- and
- at least one memory having stored thereon computer program code that, when executed by the at least one processor, instructs the at least one processor to:
- receive one or more separation of duty (SoD) rulesets;
- extract user authorizations corresponding to actions that potentially violate the one or more SoD rulesets;
- harmonize the extracted authorizations;
- and
- identify, from the harmonized extracted authorizations, SoD violations.
A method comprising:
- receiving one or more separation of duty (SoD) rulesets;
- extracting user authorizations corresponding to actions that potentially violate the one or more SoD rulesets from a role database;
- identifying one or more partial SoD violations of the one or more SoD rulesets in the user authorizations;
- monitoring the role database to identify one or more new user authorizations;
- and
- determining whether the one or more new user authorizations create an SOD violation with the identified one or more partial SoD violations.
A non-transitory computer readable medium having stored thereon computer program code for executing a method comprising:
- receiving one or more separation of duty (SoD) rulesets;
- extracting user authorizations corresponding to actions that potentially violate the one or more SoD rulesets from a role database;
- identifying one or more potential SoD violations of the one or more SoD rulesets in the user authorizations;
- monitoring user actions corresponding to the one or more potential SoD violations;
- detecting a user action of a user corresponding to a first action in a first potential SoD violation corresponding to an SOD violation;
- and
- preempting the SoD violation corresponding to the first potential SoD violation.
Dependencies are inferred from the claim text.