AUTOMATIC RESOURCE OWNERSHIP ASSIGNMENT SYSTEMS AND METHODS

• US 20110184989A1
• Filed: 01/27/2011
• Published: 07/28/2011
• Est. Priority Date: 09/09/2009
• Status: Active Grant

• Current Assignee: Varonis Systems, Inc.
• Original Assignee: Varonis Systems, Inc.
• Inventors: FAITELSON, Yakov, KORKUS, Ohad, KRETZER-KATZIR, Ophir
• Granted Patent: US 8,805,884 B2
• Time in Patent Office: Days
• US Class Current: 707/784
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 16/245 Query processing
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

An automatic resource ownership assignment system, the system including resource ownership indicators definition functionality operative to allow an operator of the system to define resource ownership indicators, automatic resource ownership recommendation functionality operative to provide, to at least one user of the system, a recommendation to assign ownership of at least one resource to a potential owner, based on the resource ownership indicators, and automatic resource ownership assignment functionality which, responsive to predetermined at least partial approval of the at least one recommendation by the at least one user and approval of said at least one recommendation by the potential owner, is operative to automatically assign ownership of the at least one resource to the potential owner.

Claims

1. An automatic resource ownership assignment system, said system comprising:

resource ownership indicators definition functionality operative to allow an operator of said system to define resource ownership indicators;

automatic resource ownership recommendation functionality operative to provide, to at least one user of said system, a recommendation to assign ownership of at least one resource to a potential owner, based on said resource ownership indicators; and

automatic resource ownership assignment functionality which, responsive to predetermined at least partial approval of said at least one recommendation by said at least one user and approval of said at least one recommendation by said potential owner, is operative to automatically assign ownership of said at least one resource to said potential owner.

2. An automatic resource ownership assignment system according to claim 1 and wherein said ownership of at least one resource comprises responsibility for managing access permissions to said resource.

3. An automatic folder ownership assignment system, said system comprising:

folder ownership indicators definition functionality operative to allow an administrator of said system to define folder ownership indicators;

automatic folder ownership recommendation functionality operative to provide, to at least one user of said system, a recommendation to assign ownership of at least one folder to a potential owner, based on said folder ownership indicators; and

automatic folder ownership assignment functionality which, responsive to predetermined at least partial approval of said at least one recommendation by said at least one user and approval of said at least one recommendation by said potential owner, is operative to assign ownership of said at least one folder to said potential owner.

4. An automatic folder ownership assignment system according to claim 3 and wherein said ownership of at least one folder comprises responsibility for managing access permissions to said folder.

5. An automatic folder ownership assignment system according to claim 4 and wherein said access permissions comprise at least one of:

read permissions to at least one file within said folder;

write permissions to at least one file within said folder;

permissions to create at least one file in said folder; and

permissions to delete at least one file in said folder.

6. An automatic folder ownership assignment system according to claim 4 and wherein said managing access permissions to said folder is achieved by at least one of manually setting user access permissions to said folder, and configuring automatic rules for setting user access permissions to said folder.

7. An automatic folder ownership assignment system according to claim 3 and wherein said system resides on a computer server.

8. An automatic folder ownership assignment system according to claim 7 and wherein said computer server is connected to an enterprise level network.

9. An automatic folder ownership assignment system according to claim 8 and wherein said system includes a database.

10. An automatic folder ownership assignment system according to claim 9 and wherein said database comprises access permissions information for at least some of the folders in said network.

11. An automatic folder ownership assignment system according to claim 9 and wherein said database comprises actual access history information for at least some of the folders in said network.

12. An automatic folder ownership assignment system according to claim 9 and wherein said database comprises metadata relating to at least some of the folders in said network.

13. An automatic folder ownership assignment system according to claim 9 and wherein said metadata comprises at least one of creation date and size.

14. An automatic folder ownership assignment system according to claim 10 and wherein said database also comprises folder ownership information for all folders in said network.

15. An automatic folder ownership assignment system according to claim 11 and wherein said folder ownership indicators include at least one of actual access to said at least one folder, access permissions to said at least one folder and the identity of a creator of said at least one folder.

16. An automatic folder ownership assignment system according to claim 12 and wherein said automatic folder ownership assignment functionality, responsive to rejection of said at least one recommendation by said at least one user or by said potential owner, and responsive to receiving an alternative recommendation from said at least one user or from said potential owner to assign ownership of said at least one folder to an alternative owner, is operative to automatically assign ownership of said at least one folder to said alternative owner.

19. A method for automatic resource ownership assignment according to claim 15 and wherein said ownership of at least one resource comprises responsibility for managing access permissions to said resource.

17. An automatic library ownership assignment system, said system comprising:

library ownership indicators definition functionality operative to allow an operator of said system to define library ownership indicators;

automatic library ownership recommendation functionality operative to provide, to at least one user of a library, a recommendation to assign ownership of said library to a potential owner, based on said library ownership indicators; and

automatic library ownership assignment functionality which, responsive to predetermined at least partial approval of said at least one recommendation by said at least one user and approval of said at least one recommendation by said potential owner, is operative to automatically assign ownership of said library to said potential owner.

21. A method for automatic folder ownership assignment according to claim 17 and wherein said ownership of at least one folder comprises responsibility for managing access permissions to said folder.

25. A method for automatic folder ownership assignment according to claim 21 and wherein responsive to rejection of said at least one recommendation by said at least one individual or by said potential owner, and responsive to receiving an alternative recommendation from said at least one individual or from said potential owner to assign ownership of said at least one folder to an alternative owner, said method also includes automatically assigning ownership of said at least one folder to said alternative owner.

18. A method for automatic resource ownership assignment, said method comprising:

defining resource ownership indicators;

automatically providing, to at least one individual, a recommendation to assign ownership of at least one resource to a potential owner, based on said resource ownership indicators; and

responsive to predetermined at least partial approval of said at least one recommendation by said at least one individual and approval of said at least one recommendation by said potential owner, to automatically assign ownership of said at least one resource to said potential owner.

22. A method for automatic folder ownership assignment according to claim 18 and wherein said access permissions comprise at least one of:

read permissions to at least one file within said folder;

write permissions to at least one file within said folder;

permissions to create at least one file in said folder; and

permissions to delete at least one file in said folder.

23. A method for automatic folder ownership assignment according to claim 18 and wherein said managing access permissions to said folder is achieved by at least one of manually setting user access permissions to said folder, and configuring automatic rules for setting user access permissions to said folder.

20. A method for automatic folder ownership assignment, said method comprising:

defining folder ownership indicators;

automatically providing, to at least one individual, a recommendation to assign ownership of at least one folder to a potential owner, based on said folder ownership indicators; and

responsive to predetermined at least partial approval of said at least one recommendation by said at least one individual and approval of said at least one recommendation by said potential owner, to automatically assign ownership of said at least one folder to said potential owner.

24. A method for automatic folder ownership assignment according to claim 20 and wherein said folder ownership indicators include at least one of actual access to said at least one folder, access permissions to said at least one folder and the identity of a creator of said at least one folder.

26. A method for automatic library ownership assignment, said method comprising:

defining library ownership indicators;

automatically providing, to at least one user of a library, a recommendation to assign ownership of said library to a potential owner, based on said library ownership indicators; and

responsive to predetermined at least partial approval of said at least one recommendation by said at least one user and approval of said at least one recommendation by said potential owner, to automatically assign ownership of said library to said potential owner.