Reconciliation of Access Rights in a Computing System

• US 20160224772A1
• Filed: 04/11/2016
• Published: 08/04/2016
• Est. Priority Date: 12/20/2012
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Moloian, Armen, Ritchey, Ronald W.
• Granted Patent: US 9,830,455 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Systems and methods are provide for reconciling access rights of a computing system are described. Access right information that respectively corresponds to access rights of a computing system may be obtained and evaluated. Reconciliation tasks may be performed using the access right information, and a reconciliation report may be generated during performance of at least one of the reconciliation tasks. The reconciliation report may indicate that one or more of the access rights should either be provisioned or revoked at the computing system.

Claims

1. A system for reconciling access rights of a computing system comprising:

at least one processor; and

memory storing instructions that, when executed by the at least one processor, cause the system to

obtain access right information respectively corresponding to one or more access rights of a computing system;

perform one or more reconciliation tasks using the access right information, and

generate a reconciliation report during performance of one of the reconciliation tasks;

wherein the reconciliation report indicates that one or more of the access rights should either be provisioned or revoked at the computing system; and

wherein the one or more reconciliation tasks include a first reconciliation task associated with instructions stored at the memory that, when executed by the at least one processor, cause the system to

obtain an access report that identifies a plurality of users that are each associated with one of the access rights,

obtain attribute information corresponding to one or more attributes of the plurality of users,

select one of the users of the plurality of users,

generate the reconciliation report based on a comparison between attribute information associated with the user selected and attribute information respectively associated with one or more other users of the plurality of users.