System and method for data governance

• US 10,521,601 B2
• Filed: 03/30/2015
• Issued: 12/31/2019
• Est. Priority Date: 04/30/2014
• Status: Active Grant

• Current Assignee: SailPoint Technologies Israel Ltd. (SailPoint Technologies Holdings, Inc.)
• Original Assignee: SailPoint Technologies Israel Ltd. (SailPoint Technologies Holdings, Inc.)
• Inventors: Peretz, Roy, Goldberg, Maor, Leib, Eran, Wexler, Shlomi, Maichel, Itay, Chen, Aviad
• Primary Examiner(s): Shaw, Peter C
• Application Number:
  US14/672,241
• Publication Number:
  US 20150317485A1
• Time in Patent Office: 1,737 Days
• Field of Search: 726 28
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A system for determining information about a resource. The system includes a profiler to generate a targeted subset of users for at least one selected resource according to at least one of: a pre-defined goal and usage statistics of the resource with respect to the goal; an addresser to request from the subset of users information regarding the goal and a collector to collect and analyze the information and to update attributes of the resource according to the information.

Claims

1. A system implemented on a computing device having a memory and a processor, for determining information about a resource, said system comprising:

a compliance and usage profiler generating statistics of use of resources by users of said resources in an organization, each said resource having a set of use-related attributes;

a crowd profiler configured to generate a targeted subset of users in said organization in response to an administrator instruction to update a selected one of said use-related attributes of at least one selected resource of said organization, said selected attribute having associated statistics of use, said crowd profiler to analyze statistics of use of said at least one selected resource and to generate said targeted subset of users as those users in said organization whose statistics of use match said associated statistics of use;

an addresser configured to question each of said subset of users about a list of owners of selected resource, the addresser to further question each of the subset of users about any known malicious activity associated with the resource; and

a collector configured to collect and analyze information received from said subset of users and to update said selected attribute of said resource accordingly.

2. The system according to claim 1 and wherein said collector updates at least one of a user and a governance database.

3. A method, implemented on a computing device having a memory and a processor, for determining information about a resource, said method comprising:

generating statistics of use of resources by users of said resources in an organization, each said resource having a set of use-related attributes;

generating a targeted subset of users in said organization in response to an administrator instruction to update a selected one of said use-related attributes of at least one selected resource of said organization, said selected attribute having associated statistics of use;

analyzing statistics of use of said at least one selected resource;

generating said targeted subset of users as those users in said organization whose statistics of use match said associated statistics of use;

questioning each of said subset of users about a list of owners of selected resource and about any known malicious activity associated with the resource;

and collecting and analyzing information received from said subset of users and updating said selected attribute of said resource accordingly.

4. The method according to claim 3 and wherein said updating updates at least one of:

a user and a governance database.