COMPUTING RESOURCE INVENTORY SYSTEM

• US 20140289402A1
• Filed: 05/01/2014
• Published: 09/25/2014
• Est. Priority Date: 12/20/2012
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Moloian, Armen, Ritchey, Ronald W.
• Granted Patent: US 9,529,629 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06F 11/3051 Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs verification or detection of system hardware configuration G06F11/2247
• CPC Class Codes: G06F 11/3466 Performance evaluation by tracing or monitoring
• CPC Class Codes: G06F 16/283 Multi-dimensional databases or data warehouses, e.g. MOLAP or ROLAP
• CPC Class Codes: G06F 9/50 Allocation of resources, e.g. of the central processing unit [CPU]
• CPC Class Codes: H04L 43/06 Generation of reports

Abstract

Systems and methods of managing computing resources of a computing system are described. A computing resource list and computing resource information may be stored at a data store. The computing resource list may identify a set of computing resources of a computing system, and the computing resource information may respectively describe the computing resources. The computing resource list may be updated in response to a new computing resource being added to the computing system or in response to an existing computing resource being removed from the computing system. Evaluation tasks for the computing resources may be performed, and a resource evaluation report may be generated during performance of at least one of the evaluation reports.

Claims

1. A system for managing computing resources of a computing system comprising:

at least one processor;

a data store that stores a computing resource list that identifies a set of computing resources of a computing system and that stores computing resource information that respectively describes individual computing resources in the set of computing resources;

memory storing instructions that, when executed by the at least one processor, cause the system to

update the computing resource list responsive to at least one of a new computing resource being added to the computing system and an existing computing resource being removed from the computing system,

perform one or more evaluation tasks for one of the computing resources, and

generate a resource evaluation report during performance of one of the evaluation tasks.

2. The system of claim 1 wherein:

the computing resource list comprehensively identifies each computing resource of the computing system.

3. The system of claim 2 wherein:

the one or more evaluation tasks include a resource evaluation task associated with instructions stored at the memory that, when executed by the at least one processor, cause the system to

identify the computing resource as either a reporting computing resource or a non-reporting computing resource in the resource evaluation report based on whether that computing resource provided an access report for a reporting period, and

wherein the access report identifies one or more access rights used to access that computing resource.

4. The system of claim 3 wherein:

the resource evaluation report respectively identifies each of the computing resources as either a reporting computing resource or a non-reporting computing resource in the resource evaluation report based on whether each of the computing resources has provided a respective access report for the reporting period.

5. The system of claim 2 wherein:

the one or more evaluation tasks include a resource evaluation task associated with instructions stored at the memory that, when executed by the at least one processor, cause the system to

select a first access report provided by the computing resource for a first reporting period,

select a second access report provided by the computing resource for a second reporting period that occurred after the first reporting period, and

generate the resource evaluation report based on a comparison between first information associated with the first access report and second information associated with the second access report.

6. The system of claim 5 wherein:

the first information includes a first total number of access rights reported in the first access report;

the second information includes a second total number of access rights reported in the second access report; and

generating the resource evaluation report includes identifying the second access report as either a typical access report or an atypical access report in the resource evaluation report based on whether a difference between the first total number of access rights reported and the second total number of access rights reported exceeds a predetermined difference threshold.

7. The system of claim 2 wherein:

the instructions, when executed by the at least one processor, further cause the system to

provide an access rights history of the computing resource responsive to receipt of a request for the access rights history; and

the access rights history identifies one or more access rights that include at least one of

i) an access right currently associated with the computing resource and a date that access right was provisioned,

ii) an access right previously associated with the computing resource and a date that access right was revoked, and

iii) combinations thereof.

8. The system of claim 7 wherein:

the access rights identified in the access rights history include at least one of a permission associated with the computing resource, an entitlement associated with the computing resource, a role associated with the computing resource, a task associated with the computing resource, and combinations thereof.

9. A computer-implemented method of managing computing resources of a computing system comprising:

storing, at a data store, a computing resource list that identifies a set of computing resources of a computing system and resource information that respectively describes individual computing resources in the set of computing resources;

updating the computing resource list responsive to at least one of a new computing resource being added to the computing system and an existing computing resource being removed from the computing resource;

performing one or more evaluation tasks for one of the computing resources; and

generating a resource evaluation report during performance of one of the evaluation tasks.

10. The computer-implemented method of claim 9 wherein:

the computing resource list comprehensively identifies each computing resource of the computing system.

11. The computer-implemented method of claim 10 wherein the one or more evaluation tasks include a resource evaluation task comprising:

identifying the computing resource as either a reporting computing resource or a non-reporting computing resource in the resource evaluation report based on whether that computing resource provided an access report for a reporting period; and

wherein the access report identifies one or more access rights used to access that computing resource.

12. The computer-implemented method of claim 11 wherein:

the resource report respectively identifies each of the computing resources as either a reporting resource or a non-reporting resource in the resource evaluation report based on whether each of the computing resources have provided a respective access report for the reporting period.

13. The computer-implemented method of claim 10 wherein the one or more evaluation tasks include a resource evaluation task comprising:

selecting a first access report provided by the computing resource for a first reporting period;

selecting a second access report provided by the computing resource for a second reporting period that occurred after the first reporting period; and

generating the resource evaluation report based on a comparison between first information associated with the first access report and second information associated with the second access report.

14. The computer-implemented method of claim 13 wherein:

the first information includes a first total number of access rights reported in the first access report;

the second information includes a second total number of access rights reported in the second access report; and

generating the resource evaluation report includes identifying the second access report as either a typical access report or an atypical access report in the resource evaluation report based on whether a difference between the first total number of access rights reported and the second total number of access rights reported exceeds a predetermined difference threshold.

15. The system of claim 10 further comprising:

providing an access rights history of the computing resource responsive to receipt of a request for the access rights history; and

wherein the access rights history identifies one or more access rights that include at least one of

i) an access right currently associated with the computing resource and a date that access right was provisioned,

ii) an access right previously associated with the computing resource and a date that access right was revoked, and

iii) combinations thereof.

16. The system of claim 15 wherein:

the access rights identified in the access rights history include at least one of a permission associated with the computing resource, an entitlement associated with the computing resource, a role associated with the computing resource, a task associated with the computing resource, and combinations thereof.

17. Non-transitory computer-readable media having instructions, that when executed by a processor of a computing device, cause the computing device to:

store, at a data store, a computing resource list that identifies a set of computing resources of a computing system and resource information that respectively describes individual computing resources in the set of computing resources;

update the computing resource list responsive to at least one of a new computing resource being added to the computing system and an existing computing resource being removed from the computing resource;

perform one or more evaluation tasks for one of the computing resources;

generate a resource evaluation report during performance of one of the evaluation tasks; and

wherein the one or more evaluation tasks include

a first evaluation task comprising determining whether the computing resource has provided a current access report for a current reporting period, and

a second evaluation task comprising determining whether a first total number of access rights identified in the current access report deviates from a second total number of access rights identified in a previous access report provided by the computing resource.

18. The non-transitory computer-readable media of claim 17 wherein:

the first evaluation task further comprises identifying the computing resource as either a reporting computing resource or a non-reporting computing resource in the resource evaluation report based on whether that computing resource provided an access report for the current reporting period; and

the access report identifies one or more access rights used to access that computing resource.

19. The non-transitory computer-readable media of claim 17 wherein:

the second evaluation task further comprises identifying the current access report as either a typical access report or an atypical access report in the resource evaluation report based on whether a difference between the first total number of access rights and the second total number of access rights exceeds a predetermined difference threshold.

20. The non-transitory computer-readable media of claim 17 wherein the instructions, when executed by the processor, further cause the computing device to:

provide an access rights history of the computing resource responsive to receipt of a request for the access rights history; and

wherein the access rights history identifies one or more access rights that include at least one of

i) an access right currently associated with the computing resource and a date that access right was provisioned,

ii) an access right previously associated with the computing resource and a date that access right was revoked, and

iii) combinations thereof.