Prioritization of users during disaster recovery

• US 9,875,373 B2
• Filed: 09/28/2015
• Issued: 01/23/2018
• Est. Priority Date: 09/28/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Glading, Ian A.J., Mahajan, Sachin K., Moore, Jr., John E.
• Primary Examiner(s): Gergiso, Techane
• Application Number:
  US14/867,323
• Publication Number:
  US 20170091472A1
• Time in Patent Office: 848 Days
• CPC Class Codes: G06F 11/0751 Error or fault detection not based on redundancy power supply failures G06F1/30; network fault management H04L41/06
• CPC Class Codes: G06F 11/079 Root cause analysis, i.e. error or fault diagnosis in a hardware test environment G06F11/22; in a software test environment G06F11/36
• CPC Class Codes: G06F 11/0793 Remedial or corrective actions recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40
• CPC Class Codes: G06F 11/1446 Point-in-time backing up or restoration of persistent data
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

Two or more users of a system are determined. The system includes at least one resource. Contextual information for a user of the two or more users is determined. The user of the two or more users are assigned to a tier of a plurality of tiers based on the contextual information. A failure of a system is determined. Responsive to determining the system has a system failure, a user of the two or more users is granted access to the system based on the tier assigned to the user.

Claims

1. A method for the prioritization of users during disaster recovery, the method comprising:

determining, by one or more computer processors, two or more users of a system, wherein the system includes at least one resource;

determining, by one or more computer processors, contextual information for each user of the two or more users;

assigning, by one or more computer processors, each user of the two or more users to any tier of a plurality of tiers based on the contextual information associated with each user of the two or more users;

determining, by one or more computer processors, a failure of the system;

in response to determining the failure, receiving, by one or more computer processors, a request from a first user of the two or more users, wherein the request is for the first user to access the system; and

in response to receiving the request from the first user, granting, by one or more computer processors, access to the system for the first user based on the tier assigned to the user.

2. The method of claim 1, wherein the contextual information includes one or more of the following:

a name of a user, a role of the user, a pre-assigned tier of the user, a device the user is accessing the system, an internet protocol address (IP address) of the device of the user, a unique user identification associated with the user, a level of access of data that the user has to the system.

3. The method of claim 1, further comprising:

receiving, by one or more computer processors, an update to the at least one resource; and

responsive to receiving the update to the at least one resource, granting, by one or more processors, access to the user of the two or more users based on the assigned tiers and the updated at least one resource.

4. The method of claim 1, further comprising:

receiving, by one or more computer processors, an update to the contextual information; and

responsive to receiving the update to the contextual information, assigning, by one or more computer processors, the user of the two or more users to a tier of the plurality of tiers based on the updated contextual information.

5. The method of claim 4, wherein the user of the two or more users is one of the following:

a static user or a dynamic user.

6. The method of claim 5, wherein the contextual information of the dynamic user is updated in real-time.

7. The method of claim 5, wherein the contextual information of the static user is updated in a set time interval.

8. A computer program product for the prioritization of users during disaster recovery, the computer program product comprising:

one or more computer readable storage devices; and

program instructions stored on the one or more computer readable storage devices, the program instructions comprising;

program instructions to determine two or more users of a system, wherein the system includes at least one resource;

program instructions to determine contextual information for each user of the two or more users;

program instructions to assign each user of the two or more users to any tier of a plurality of tiers based on the contextual information associated with each user of the two or more users;

program instructions to determine a failure of the system;

in response to determining the failure, program instructions to receive a request from a first user of the two or more users, wherein the request is for the first user to access the system; and

in response to receiving the request from the first user, program instructions to grant access to the system for the first user based on the tier assigned to the user.

9. The computer program product of claim 8, wherein the contextual information includes one or more of the following:

a name of a user, a role of the user, a pre-assigned tier of the user, a device the user is accessing the system, an internet protocol address (IP address) of the device of the user, a unique user identification associated with the user, a level of access of data that the user has to the system.

10. The computer program product of claim 8, further comprising program instructions, stored on the one or more computer readable storage devices, to:

receive an update to the at least one resource; and

responsive to receiving the update to the at least one resource, grant access to two or more users based on the assigned tiers and the updated at least one resource.

11. The computer program product of claim 8, further comprising program instructions, stored on the one or more computer readable storage devices, to:

receive an update to the contextual information; and

responsive to receiving the update to the contextual information, assign the user of the two or more users to a tier of the plurality of tiers based on the updated contextual information.

12. The computer program product of claim 11, wherein the user of the two or more users is one of the following:

a static user or a dynamic user.

13. The computer program product of claim 12, wherein the contextual information of the dynamic user is updated in real-time.

14. The computer program product of claim 12, wherein the contextual information of the static user is updated in a set time interval.

15. A computer system for the prioritization of users during disaster recovery, the computer system comprising:

one or more computer processors;

one or more computer readable storage media; and

program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising;

program instructions to determine two or more users of a system, wherein the system includes at least one resource;

program instructions to determine contextual information for each user of the two or more users;

program instructions to assign each user of the two or more users to any tier of a plurality of tiers based on the contextual information associated with each user of the two or more users;

program instructions to determine a failure of the system;

in response to determining the failure, program instructions to receive a request from a first user of the two or more users, wherein the request is for the first user to access the system; and

in response to receiving the request from the first user, program instructions to grant access to the system for the first user based on the tier assigned to the user.

16. The computer system of claim 15, wherein the contextual information includes one or more of the following:

a name of a user, a role of the user, a pre-assigned tier of the user, a device the user is accessing the system, an internet protocol address (IP address) of the device of the user, a unique user identification associated with the user, a level of access of data that the user has to the system.

17. The computer system of claim 15, further comprising program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to:

receive an update to the at least one resource; and

responsive to receiving the update to the at least one resource, grant access to two or more users based on the assigned tiers and the updated at least one resource.

18. The computer system of claim 15, further comprising program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to:

receive an update to the contextual information; and

responsive to receiving the update to the contextual information, assign the user of the two or more users to a tier of the plurality of tiers based on the updated contextual information.

19. The computer system of claim 18, wherein the user of the two or more users is one of the following:

a static user or a dynamic user.

20. The computer system of claim 19, wherein the contextual information of the dynamic user is updated in real-time.