Reconciliation of Access Rights in a Computing System

• US 20160226880A1
• Filed: 04/11/2016
• Published: 08/04/2016
• Est. Priority Date: 12/20/2012
• Status: Active Grant

• Current Assignee: Bank of America Corp.
• Original Assignee: Bank of America Corp.
• Inventors: Moloian, Armen, Ritchey, Ronald W.
• Granted Patent: US 9,916,450 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Systems and methods are provide for reconciling access rights of a computing system are described. Access right information that respectively corresponds to access rights of a computing system may be obtained and evaluated. Reconciliation tasks may be performed using the access right information, and a reconciliation report may be generated during performance of at least one of the reconciliation tasks. The reconciliation report may indicate that one or more of the access rights should either be provisioned or revoked at the computing system.

Claims

1. A system for reconciling access rights of a computing system comprising:

at least one processor; and

memory storing instructions that, when executed by the at least one processor, cause the system to

obtain access right information respectively corresponding to one or more access rights of a computing system;

perform one or more reconciliation tasks using the access right information, and

generate a reconciliation report during performance of one of the reconciliation tasks;

wherein the reconciliation report indicates that one or more of the access rights should either be provisioned or revoked at the computing system; and

wherein the one or more reconciliation tasks include a first reconciliation task associated with instructions stored at the memory that, when executed by the at least one processor, cause the system to

obtain a second access rights history that identifies a set of provisioned access rights associated with a user,

obtain an access right grant list that identifies a set of approved access grant requests associated with the user, and

generate the reconciliation report based on a comparison between at least one of the provisioned access rights and at least one of the approved access grant request.