Automated system identification, authentication, and provisioning

• US 10,333,918 B2
• Filed: 02/22/2017
• Issued: 06/25/2019
• Est. Priority Date: 02/22/2017
• Status: Active Grant

• Current Assignee: Accenture Global Solutions Limited (Accenture PLC)
• Original Assignee: Accenture Global Solutions Limited (Accenture PLC)
• Inventors: Kruse, Vincent
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Ahmed, Mahabub S
• Application Number:
  US15/439,344
• Publication Number:
  US 20180241751A1
• Time in Patent Office: 853 Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A device may authenticate a user for access to a plurality of target systems. The device may provide information identifying the plurality of target systems. The device may receive information associated with a request for access to one or more target systems of the plurality of target systems. The device may determine whether the request for access complies with one or more policies associated with the one or more target systems. The device may deny the request for access. Denying the request for access may include foregoing providing access to the one or more target systems. The device may receive information associated with an escalation of the request for access based on denying the request for access. The device may provide access to the one or more target systems based on the information associated with the escalation of the request for access.

Claims

1. A device, comprising:

one or more memories; and

one or more processors, communicatively coupled to the one or more memories, to;

authenticate a user for access to a plurality of target systems;

generate relevance scores for the plurality of target systems, each relevance score indicating relevance of a respective target system to the user,

each relevance score being generated by processing, using a first machine learning technique, information associated with the user and at least one of;

information associated with the plurality of target systems, or

information associated with a plurality of other users;

generate, based on the relevance scores, a first recommendation specifying one or more recommended target systems of the plurality of target systems;

provide, based on the first recommendation, information identifying the one or more recommended target systems of the plurality of target systems,

the information identifying the one or more recommended target systems including information that causes presentation of data representing the one or more recommended target systems based on one or more corresponding relevance scores of the relevance scores;

receive information associated with a request for access to a particular target system of the one or more recommended target systems;

determine whether the request for access complies with one or more policies associated with the particular target system;

deny the request for access,

where denying the request for access includes foregoing providing access to the particular target system based on determining that the request for access does not comply with the one or more policies;

receive information associated with an escalation of the request for access based on denying the request for access;

generate, using a second machine learning technique and based on the information associated with the escalation of the request for access, an escalation score for the escalation of the request for access; and

provide access to the particular target system based on the escalation score for the escalation of the request for access.

2. The device of claim 1, where the one or more processors, when receiving information associated with the escalation, are to:

receive information regarding a reason to grant the request for access; and

where the one or more processors, when generating the escalation score for the escalation of the request for access, are to;

generate the escalation score for the escalation of the request for access based on the reason to grant the request for access.

3. The device of claim 1, where the one or more processors are further to:

generate a recommendation to grant the request for access or to deny the request for access based on the escalation score for the escalation of the request for access; and

provide information regarding the recommendation to grant the request for access or to deny the request for access.

4. The device of claim 1, where the one or more processors are further to:

escalate the request for access based on denying the request for access.

5. The device of claim 1, where the one or more processors are further to:

automatically escalate the request for access based on information associated with at least one of;

the user,

the one or more target systems, or

a plurality of users.

6. The device of claim 1, where the one or more processors are further to:

create or modify a user profile that is associated with the particular target system and to provision access to the particular target system based on the user profile; and

where the one or more processors, when providing the access, are to;

provide the access based on provisioning the access.

7. The device of claim 1, where the one or more processors are further to:

receive information associated with the plurality of target systems;

perform indexing to index the plurality of target systems based on the information associated with the plurality of target systems; and

where the one or more processors, when providing information identifying the one or more recommended target systems, are to;

provide information identifying the one or more recommended target systems based on indexing the plurality of target systems.

20. The device of claim 1, wherein the one or more processors are further to:

identify a reason for the request for access by performing a natural language processing technique on the escalation information; and

wherein the one or more processors, when generating the escalation score, are further to;

generating the escalation score based on the reason.

8. A method, comprising:

authenticating, by a device, a user for access to a plurality of web applications;

generating, by the device, relevance scores for the plurality of web applications, each relevance score indicating relevance of a respective web application to the user,

each relevance score being generated by processing, using a first machine learning technique, information associated with the user and at least one of;

information associated with the plurality of web applications, or

information associated with a plurality of other users;

generating, by the device and based on the relevance scores, a first recommendation specifying one or more recommended web applications of the plurality of web applications;

providing, by the device and based on the first recommendation, information identifying the one or more recommended web applications of the plurality of web applications,

the information identifying the one or more recommended web applications including information that causes presentation of data representing the one or more recommended web applications based on one or more corresponding relevance scores, of the relevance scores;

receiving, by the device, information associated with a request for access to a particular web application of the one or more recommended web applications;

determining, by the device, whether the request for access complies with one or more policies associated with the particular web application;

denying, by the device, the request for access based on determining that the request for access does not comply with the one or more policies;

receiving, by the device, escalation information associated with escalating the request for access based on denying the request for access;

generating, by the device and using a second machine learning technique and based on the escalation information, an escalation score for the escalation information; and

selectively providing, by the device, access to the particular web application based on the escalation score.

9. The method of claim 8, where selectively providing access to the particular web application comprises:

providing a link to the particular web application, the link providing access the particular web application.

10. The method of claim 8, further comprising:

escalating the request for access based on denying the request for access; and

where receiving escalation information comprises;

receiving a reference to data associated with the particular web application or the one or more policies.

11. The method of claim 8,

where providing the information identifying the one or more recommended web applications comprises:

providing information identifying a particular recommendation for the particular web application.

12. The method of claim 8, further comprising:

receiving information associated with authenticating the user for access to the plurality of web applications; and

where generating the first recommendation comprises;

generating the first recommendation based on the information associated with authenticating the user for access to the plurality of web applications.

13. The method of claim 8, further comprising:

performing natural language processing on the escalation information; and

where generating the escalation score further comprises;

generating the escalation score based on a result of performing the natural language processing.

14. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors, cause the one or more processors to;

authenticate a user for access to a plurality of applications;

generate, for a user, relevance scores for a plurality of applications, each relevance score indicating relevance of a respective application to the user,

each relevance score being generated by processing, using a first machine learning technique, information associated with the user and at least one of;

information associated with the plurality of applications, or

information associated with a plurality of other users;

generate, based on the relevance scores, a first recommendation specifying one or more recommended applications of the plurality of applications;

provide, to the user and based on the first recommendation, information identifying the one or more recommended applications of the plurality of applications;

receive a request for access to a particular application of the one or more recommended applications;

generate, using a second machine learning technique and based on information associated with the request for access and based on information associated with the user, an escalation score;

determine, based on the escalation score and one or more policies associated with the particular application, to escalate the request for access;

receive escalation information associated with the request for access;

provision access to the particular application based on the escalation information; and

provide access to the particular application based on provisioning access.

15. The non-transitory computer-readable medium of claim 14, where the one or more instructions, that cause the one or more processors to provision access to the particular application based on the escalation information, cause the one or more processors to:

provision access to the particular application based on performing an application programming interface (API) call associated with a function of the particular application.

16. The non-transitory computer-readable medium of claim 14, where the one or more instructions, that cause the one or more processors to provision access to the particular application based on the escalation information, cause the one or more processors to:

provision access to the particular application using information associated with a user profile.

17. The non-transitory computer-readable medium of claim 14, where the request for access is a first request for access, the particular application is a first application, and the one or more policies are a first policy, and

where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:

receive a second request for access to a second application of the one or more recommended applications;

generate, using the second machine learning technique and based on second escalation information associated with the second request for access and based on the information associated with the user, a second escalation score; and

deny the second request for access based on the second escalation score and one or more second policies associated with the second application.

18. The non-transitory computer-readable medium of claim 17, where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:

provide information associated with denying the second request for access to a party associated with an ability to grant access to the second application.

19. The non-transitory computer-readable medium of claim 17, where the escalation information is received from a first client device, and the second escalation information is received from a second client device,

the second client device being different from the first client device.