Facilitating Separation-of-Duties When Provisioning Access Rights in a Computing System

Patent metadata

Field	Value
Publication number	US-2016226919-A1
Application number	US-201615095588-A
Country	US
Kind code	A1
Filing date	Apr 11, 2016
Priority date	Dec 20, 2012
Publication date	Aug 4, 2016
Grant date	—

Abstract

Systems and methods for managing risk management rules are provided. A risk management rule may be configured at a rule configuration interface are described. The rule configuration interface may include a list of access rights available for selection. Based on input received, one of the access rights may be identified as a base access right and one of the access rights may be identified as a conflicting access right for the risk management rule. The access rights provisioned at the computing system may be monitored to determine whether a user is provisioned with both the base access right and the conflicting access right. If so, a violation review may be created and presented at a violation review interface at which a decision for the violation review is receivable. An exception to the risk management rule may also be configured at an exception configuration interface.

First claim

What is claimed is:

1 . A system for managing risk management rules comprising:
at least one processor; a rule configuration interface at which a risk management rule is configurable in response to input received at the rule configuration interface wherein the rule configuration interface comprises a list of access rights available for selection; and memory storing instructions that, when executed by the at least one processor, cause the system to
identify a first access right as a base access right for the risk management rule based on the input received at the rule configuration interface,
identify a second access right as a conflicting access right for the risk management rule based on the input received at the rule configuration interface, and
monitor access rights provisioned at a computing system to determine whether a user is provisioned with both the base access right and the conflicting access right.

Assignees

• Bank Of America

Inventors

• Moloian Armen
• Ritchey Ronald W

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title

• G06F16/283 Primary

  Multi-dimensional databases or data warehouses, e.g. MOLAP or ROLAP · CPC title