Systems and methods for processing requests for access

Patent metadata

Field	Value
Publication number	US-12282569-B2
Application number	US-202418648813-A
Country	US
Kind code	B2
Filing date	Apr 29, 2024
Priority date	Dec 3, 2020
Publication date	Apr 22, 2025
Grant date	Apr 22, 2025

Abstract

The disclosed methods may receive a first request for access to a first system memory from a new user and a first justification, the first request includes first role information and first current access information of the new user, determine whether the first request is within a request cluster based on first role history information and current access history information. When the first request is within the request cluster, generate a matrix from the first role information and the first current access information, and determine using a first neural network, whether to grant the first request based on the matrix. When the first request is granted by the first neural network, determine, using a second neural network, whether the first justification is similar to first justification history information. When the first justification is similar to the first justification history information, grant the new user access to the first system memory.

First claim

What is claimed is:

1. A method comprising:
receiving, by one or more processors, a first request for access to a first system from a new user and a first justification for access to the first system, the first request comprising first role information of the new user and first current access information of the new user;
determining, by the one or more processors, whether the first request is within a request cluster of one or more request clusters based on first role history information and first current access history information of users that have access to the first system;
when the first request is within the request cluster of the one or more request clusters:
transmitting, by the one or more processors, the first request and the first justification to a first user;
in response to receiving an indication of grant from the first user:
determining, using a first neural network, whether to grant the first request based on the first role information of the new user and the first current access information of the new user of the first request;
when the first request is granted by the first neural network, determining, using a second neural network and the one or more processors, whether the first justification is similar to first justification history information of the users that have access to the first system;
when the first justification is similar to the first justification history information of the users that have access to the first system, transmitting, using the one or more processors, the first request and the first justification to a final user; and
in response to receiving a final indication of grant from the final user, granting the new user access to the first system.

2. The method of claim 1 , further comprising:
retrieving, by the one or more processors, the first role history information, the first current access history information, and the first justification history information of users that have access to the first system;
generating, by the one or more processors, the one or more request clusters; and
when the first request is not within the request cluster of the one or more request clusters, proceeding with a manual process.

3. The method of claim 2 , further comprising:
in response to receiving a denial of access from the first user, generating and transmitting, using the one or more processors, a denial notification to the new user indicating that the first request for access to the first system was denied.

4. The method of claim 3 , further comprising:
when the first request is denied by the first neural network, generating and transmitting, using the one or more processors, the denial notification to the new user indicating that the first request for access to the first system was denied.

5. The method of claim 4 , further comprising:
when the first justification is not similar to the first justification history information of the users that have access to the first system, generating and transmitting, using the one or more processors, the denial notification to the new user indicating that the first request for access to the first system was denied.

6. The method of claim 5 , wherein the first justification comprises a first phrase and the first justification history information comprises a plurality of second phrases.

7. The method of claim 6 , further comprising:
when the first justification is not similar to the first justification history information of the users that have access to the first system, determining that a first process comprises one or more additional stages.

8. The method of claim 7 , further comprising:
generating, using the one or more processors, a username and a temporary password for the new user and transmit, using the one or more processors, the username and the temporary password to the new user.

9. The method of claim 8 , wherein the first neural network is a convolutional neural network.

10. The method of claim 8 , wherein the second neural network comprises long short-term memory (LSTM) or a transformer.

11. The method of claim 1 , wherein determining whether the first request is within a request cluster of the one or more request clusters is completed using k-means, density based spatial clustering of applications with noise (DBSCAN), expectation-maximization (EM), gaussian mixture modeling (GMM) algorithms, or combinations thereof.

12. A method comprising:
receiving, by one or more processors in communication with a memory, a first request for access to a first system from a new user and a first justification for access for the first system, the first request comprises first role information of the new user and first current access information of the new user;
determining, by the one or more processors, whether the first request is within a request cluster of one or more request clusters based on first role history information and first current access history information of users that have access to the first system;
when the first request is within the request cluster of the one or more request clusters:
transmitting, using the one or more processors, the first request and the first justification to a first user in a first stage of a first process;
in response to receiving an indication of grant from the first user:
generating, using the one or more processors, a matrix from the first role information of the new user and the first current access information of the new user of the first request;
determining, using one or more neural networks and the one or more processors, whether to grant the first request based on the matrix and by determining whether the first justification is similar to first justification history information of the users that have access to the first system;
when the first request is granted by the one or more neural networks and the one or more processors, transmitting, using the one or more processors, the first request and the first justification to a final user; and
in response to receiving a final indication of grant from the final user, granting the new user access to the first system.

13. The method of claim 12 , further comprising:
when the first request is not within the request cluster of the one or more request clusters, proceed with a manual process; and
in response to receiving a denial of access from the first user, generating and transmitting, using the one or more processors, a denial notification to the new user indicating that the first request for access to the first system was denied; and
when the first request is denied by the one or more neural networks, generating and transmitting, using the one or more processors, the denial notification to the new user indicating that the first request for access to the first system was denied; and
when the first justification is not similar to the first justification history information of the users that have access to the first system, transmitting, using the one or more processors, the denial notification to the new user indicating that the first request for access to the first system was denied.

14. The method of claim 13 , wherein:
determining, using the one or more neural networks and the one or more processors, whether to grant the first request, repeats automatically using grant data associated with a different user from previous users until the first process does not comprise one or more additional stages.

15. The method of claim 14 , further comprising:
generating, using the one or more processors, a username and a temporary password for the new user and transmitting, using the one or more processors, the username and th

Assignees

• Capital One Services Llc

Inventors

• Walters Austin
• Goodsitt Jeremy Edward
• Abad Fardin Abdi Taghi
• Pham Vincent

Classifications

• G06N3/09

  Supervised learning · CPC title

• G06N3/0442

  characterised by memory or gating, e.g. long short-term memory [LSTM] or gated recurrent units [GRU] · CPC title

• G06N3/0464

  Convolutional networks [CNN, ConvNet] · CPC title

• G06N3/045

  Combinations of networks · CPC title

• G06F21/45 Primary

  Structures or tools for the administration of authentication · CPC title