Network managed rules for machine access

Patent metadata

Field	Value
Publication number	US-11055946-B2
Application number	US-201916582935-A
Country	US
Kind code	B2
Filing date	Sep 25, 2019
Priority date	Sep 25, 2019
Publication date	Jul 6, 2021
Grant date	Jul 6, 2021

Abstract

Provided are techniques for network managed rules for machine access. A request to access a machine is received from an operator. One or more machine access rules are identified for a machine and an operator who will operate the machine for a company in a location, where each of the one or more machine access rules includes variable criteria. Data for the variable criteria of the one or more machine access rules is obtained from one or more of: a machine profile of the machine, an operator profile of the operator, a company profile of the company, and environmental data for the location. The data is applied to the variable criteria of the one or more machine access rules to determine whether to provide the operator with access to the machine at the location. An indication of whether the operator has access to the machine at the location is determined.

First claim

What is claimed is:

1. A computer-implemented method, comprising operations for:
receiving, from an operator, a request to access a machine;
identifying one or more machine access rules for the machine and the operator who will operate the machine for a company in a location, wherein each of the one or more machine access rules includes variable criteria;
obtaining data for the variable criteria of the one or more machine access rules from: a machine profile of the machine that indicates a condition of the machine, an operator profile of the operator that indicates permissions and experience of the operator, a company profile of the company that indicates requirements of the company, and environmental data for the location that indicates weather;
applying the data to the variable criteria of the one or more machine access rules to determine whether to provide the operator with access to the machine at the location; and
providing an indication of whether the operator has access to the machine at the location.

2. The computer-implemented method of claim 1 , wherein a computing device of a cloud infrastructure includes a machine access system and global machine access rules, and wherein the machine access system identifies the one or more machine access rules from the global machine access rules that include the variable criteria, obtains the data for the variable criteria, and applies the data to the variable criteria of the one or more machine access rules to make the determination of whether to provide the operator with access to the machine at the location.

3. The computer-implemented method of claim 1 , wherein the machine includes a machine access client and local access rules, and wherein the machine access client identifies the one or more machine access rules from the local access rules that include the variable criteria, obtains the data for the variable criteria, and applies the data to the variable criteria of the one or more machine access rules to make the determination of whether to provide the operator with access to the machine at the location.

4. The computer-implemented method of claim 1 , wherein the indication indicates that the operator is one of: denied access to the machine, granted full access to the machine, and granted partial access to the machine to perform a subset of functions available on the machine.

5. The computer-implemented method of claim 1 , wherein applying the data to the variable criteria of the one or more machine access rules is performed by a machine learning model.

6. The computer-implemented method of claim 1 , wherein a Software as a Service (SaaS) is configured to perform the operations of the computer-implemented method.

7. A computer program product, the computer program product comprising a computer readable storage medium having program code embodied therewith, the program code executable by at least one processor to perform operations for:
receiving, from an operator, a request to access a machine;
identifying one or more machine access rules for the machine and the operator who will operate the machine for a company in a location, wherein each of the one or more machine access rules includes variable criteria;
obtaining data for the variable criteria of the one or more machine access rules from: a machine profile of the machine that indicates a condition of the machine, an operator profile of the operator that indicates permissions and experience of the operator, a company profile of the company that indicates requirements of the company, and environmental data for the location that indicates weather;
applying the data to the variable criteria of the one or more machine access rules to determine whether to provide the operator with access to the machine at the location; and
providing an indication of whether the operator has access to the machine at the location.

8. The computer program product of claim 7 , wherein a computing device of a cloud infrastructure includes a machine access system and global machine access rules, and wherein the machine access system identifies the one or more machine access rules from the global machine access rules that include the variable criteria, obtains the data for the variable criteria, and applies the data to the variable criteria of the one or more machine access rules to make the determination of whether to provide the operator with access to the machine at the location.

9. The computer program product of claim 7 , wherein the machine includes a machine access client and local access rules, and wherein the machine access client identifies the one or more machine access rules from the local access rules that include the variable criteria, obtains the data for the variable criteria, and applies the data to the variable criteria of the one or more machine access rules to make the determination of whether to provide the operator with access to the machine at the location.

10. The computer program product of claim 7 , wherein the indication indicates that the operator is one of: denied access to the machine, granted full access to the machine, and granted partial access to the machine to perform a subset of functions available on the machine.

11. The computer program product of claim 7 , wherein applying the data to the variable criteria of the one or more machine access rules is performed by a machine learning model.

12. The computer program product of claim 7 , wherein a Software as a Service (SaaS) is configured to perform the operations of the computer program product.

13. A computer system, comprising:
one or more processors, one or more computer-readable memories and one or more computer-readable, tangible storage devices; and
program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to perform operations comprising:
receiving, from an operator, a request to access a machine;
identifying one or more machine access rules for the machine and the operator who will operate the machine for a company in a location, wherein each of the one or more machine access rules includes variable criteria;
obtaining data for the variable criteria of the one or more machine access rules from: a machine profile of the machine that indicates a condition of the machine, an operator profile of the operator that indicates permissions and experience of the operator, a company profile of the company that indicates requirements of the company, and environmental data for the location that indicates weather;
applying the data to the variable criteria of the one or more machine access rules to determine whether to provide the operator with access to the machine at the location; and
providing an indication of whether the operator has access to the machine at the location.

14. The computer system of claim 13 , wherein a computing device of a cloud infrastructure includes a machine access system and global machine access rules, and wherein the machine access system identifies the one or more machine access rules from the global machine access rules that include the variable criteria, obtains the data for the variable criteria, and applies the data to the variable criteria of the one or more machine access rules to make the determination of whether to provide the operator with access to the machine at the location.

15. The computer system of claim 13 , wherein the machine includes a machine access client and local access rules, and wherein the machine access client identifies the one

Assignees

• IBM

Inventors

• Ramos Igor S
• Lavery Andrew J
• Marin Jr Leucir
• Altaf Faheem

Classifications

• G06N3/084

  Backpropagation, e.g. using gradient descent · CPC title

• G07C9/38 Primary

  with central registration · CPC title

• G06N20/00

  Machine learning · CPC title

• G06Q30/0645

  Rental transactions; Leasing transactions · CPC title

• G06Q50/08

  Construction · CPC title