Automatic policy generation based on role entitlements and identity attributes

US8533168B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• David G. Kuehr-McLaren · Apex, US
• Pratik Gupta · Cary, US
• Govindaraj Sampathkumar · Cary, US
• Vincent C. Williams · Mission Viejo, US
• Sharon L. Cutcher · Austin, US
• Sumit Taank · Austin, US
• Brian A. Stube · Cambridge, US
• Hari Shankar · Cary, US

Key dates

• Filing date: Jul 20, 2007
• Grant date: Sep 10, 2013
• Expiry date: Jun 25, 2031

Classification

• Technology area (CPC Y): Emerging Cross-Sectional Technologies
• CPC primary: Y10S707/99939
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.