Integrated robotics and access management for target systems

Patent metadata

Field	Value
Publication number	US-10521582-B2
Application number	US-201715788470-A
Country	US
Kind code	B2
Filing date	Oct 19, 2017
Priority date	Jan 13, 2017
Publication date	Dec 31, 2019
Grant date	Dec 31, 2019

Abstract

An access management robot facilitation system facilitates a robot to execute access management tasks on a target system.

First claim

What is claimed is:

1. An access management system comprising:
a central directory data storage storing electronic identities of individuals and credentials of the individuals; and
a robotic process automation (RPA) system comprising one or more processors that execute machine-readable instructions stored in a non-transitory computer readable medium, the machine-readable instructions comprising instructions that cause the processors to:
access processes that include steps for a plurality of access management tasks for a plurality of target systems, inputs and outputs determined for the steps of the access management tasks;
generate a plurality of robots using robot generation software, the plurality of robots to execute the plurality of access management tasks on the plurality of target systems, the plurality of robots being generated based on the processes for the plurality of access management tasks, the inputs and the outputs determined for steps of the processes;
receive steps associated with manual execution of the access management tasks on the plurality of target systems, wherein each of the plurality of robots is trained to execute one of the plurality of access management tasks on one of the plurality of target systems;
train the plurality of robots, such that the plurality of robots execute the access management tasks based on the steps associated with the manual execution of the access management tasks on the plurality of target systems;
obtain an access management instruction from a robot instruction queue, the access management instruction including information regarding one of the plurality of access management tasks to be executed on one of the plurality of target systems;
identify at least one robot of the plurality of robots trained to execute the access management instruction on the target system; and
execute the access management task on the target system via the at least one identified robot by:
entering a universal resource locator (URL) of a login page of the target system of the plurality of target systems in a browser;
searching for text boxes with particular names in code of the login page; and
entering a login ID and password of a user authorized to execute the access management task on the target system in corresponding text boxes.

2. The access management system of claim 1 , wherein the plurality of access management tasks comprise creating, deleting and modifying user accounts on the plurality of target systems.

3. The access management system of claim 1 , wherein the machine-readable instructions executed by the processors of the RPA system further comprise instructions that cause the processors to:
mark the access management instruction in the robot instruction queue as pending prior to the execution of the access management task on the target system.

4. The access management system of claim 3 , wherein the machine-readable instructions executed by the processors of the RPA system further comprise instructions that cause the processors to:
update a status of the access management instruction in the robot instruction queue based on the execution of the access management task on the target system.

5. The access management system of claim 1 , wherein the machine-readable instructions to train the plurality of robots to execute the plurality of access management tasks on the plurality of target systems further comprise instructions that cause the processors of the RPA system to:
program the at least one identified robot to execute the access management instruction on the target system.

6. The access management system of claim 1 , further comprising an expert system that further includes non-transitory data storage medium and one or more processors, the non-transitory data storage medium of the expert system storing and the processors of the expert system executing:
a rule-based inference engine that makes decisions regarding management of the robot instruction queue based on rules stored in a knowledge base.

7. The access management system of claim 6 , wherein the non-transitory data storage medium of the expert system storing instructions that cause the inference engine to further:
determine the rules from the knowledge base that are satisfied by facts obtained from an access management request; and
execute the rules based on priorities associated with the rules.

8. The access management system of claim 6 , wherein the non-transitory data storage medium of the expert system storing further instructions that cause the inference engine to further:
determine if an access management request providing information for the access management instruction is a composite request.

9. The access management system of claim 8 , wherein upon the determination that the access management request is a composite request, the non-transitory data storage medium of the expert system storing further instructions that cause the inference engine to further:
create access management instructions including the access management instruction in the robot instruction queue corresponding to the composite request, the access management instructions are created for a series tasks to be executed by the identified robot on the target system.

10. The access management system of claim 6 , the non-transitory data storage medium of the expert system storing further instructions that cause the inference engine to further:
determine whether a remedial operation can be performed to execute failed access management instructions.

11. The access management system of claim 10 , wherein the instructions to determine that the remedial operation can be performed comprising further instructions that cause the inference engine to further:
learn a cause for the failure from particular failure messages; and
generate an alert to fix the cause for the failure.

12. The access management system of claim 1 , wherein the machine readable instructions to access the processes that include the steps for the plurality of access management tasks further comprise instructions that cause the processors to:
access information regarding the processes created in an editor as flowcharts which include attributes for steps of the flowcharts.

13. A method of providing automatic access to a plurality of target systems comprising:
receiving a request to perform an access management task from a plurality of access management tasks on a target system of the plurality of target systems;
determining that the request is approved;
generating an access management request to perform the access management task based on the received request in response to determining that the received request is approved;
extracting information required for generating an access management instruction from the access management request;
generating the access management instruction in a robot instruction queue based on the extracted information;
determining that the access management instruction is missing required information;
obtaining the required information from a central directory data storage including electronic identities of individuals and credentials of the individuals;
inserting the obtained information in the access management instruction;
monitoring the robot instruction queue for new access management instructions;
obtaining the access management instruction from the robot instruction queue;
generating a plurality of robots for execution of the plurality of access management tasks on the plurality of target systems, the plurality of robots being generated using robot generation software and the plurality of robots are based on processes for the plurality of access manag

Assignees

• Accenture Global Solutions Ltd

Inventors

• Shukla Sanjeev
• Tandon Gaurav
• Thexton Rexall E
• Joshi Neha
• Parker David Michael
• Ramesh Avinash
• Dasari Krishna M
• Ramakrishnan Parvathy

Classifications

• G05B2219/39371

  Host and robot controller · CPC title

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title

• B25J9/1674

  characterised by safety, monitoring, diagnostic · CPC title

• G06F2221/2117

  User registration · CPC title

• G06F2221/031

  Protect user input by software means · CPC title