Robot access control and governance for robotic process automation

Patent metadata

Field	Value
Publication number	US-2022011734-A1
Application number	US-202016941484-A
Country	US
Kind code	A1
Filing date	Jul 28, 2020
Priority date	Jul 9, 2020
Publication date	Jan 13, 2022
Grant date	—

Abstract

Robot access control and governance for robotic process automation (RPA) is disclosed. A code analyzer of an RPA designer application, such as a workflow analyzer, may read access control and governance policy rules for an RPA designer application and analyze activities of an RPA workflow of the RPA designer application against the access control and governance policy rules. When one or more analyzed activities of the RPA workflow violate the access control and governance policy rules, the code analyzer prevents generation of an RPA robot or publication of the RPA workflow until the RPA workflow satisfies the access control and governance policy rules. When the analyzed activities of the RPA workflow comply with all required access control and governance policy rules, the RPA designer application may generate an RPA robot implementing the RPA workflow or publish the RPA workflow.

First claim

1 . A computer-implemented method for performing runtime robot access control and governance for robotic process automation (RPA), comprising:
checking one or more actions to be performed by an RPA robot, information requested by the RPA robot, or both, against access control and governance rules; when the RPA robot, based on the access control and governance rules, is permitted to perform the one or more actions, receive the requested information, or both:
authorizing the one or more actions and/or provide the RPA robot with the requested information; and
when the RPA robot, based on the access control and governance rules, is not permitted to perform the one or more actions, receive the requested information, or both:
preventing the RPA robot from taking the one or more actions and/or obtaining the requested information.

2 . The computer-implemented method of claim 1 , wherein when the RPA robot is not permitted to perform the one or more actions, receive the requested information, or both, the method further comprises:
sending a notification to the RPA robot or a client-side application indicating that the one or more actions and/or the access to the information are not permitted.

3 . The computer-implemented method of claim 1 , wherein when the RPA robot is not permitted to perform the one or more actions, receive the requested information, or both, the method further comprises:
automatically ending execution of the RPA robot.

4 . The computer-implemented method of claim 1 , wherein the method is performed by a client-side validation application.

5 . The computer-implemented method of claim 1 , wherein the method is performed by a server-side validation application.

6 . The computer-implemented method of claim 1 , further comprising:
automatically sending the access control and governance rules to a computing system associated with the RPA robot when the computing system connects to a server-side conductor application.

7 . The computer-implemented method of claim 1 , wherein at least one of the one or more actions is permitted for a human user but not by the RPA robot.

8 . The computer-implemented method of claim 1 , further comprising:
verifying that the RPA robot pauses for at least a period of time for one or more legacy systems to perform one or more operations; and when the RPA robot does not pause for at least the period of time:
delaying the obtaining of the information requested by the RPA robot or accepting of new information requests from the RPA robot until the period of time expires.

9 . The computer-implemented method of claim 1 , wherein the runtime enforcement of the access control and governance rules is performed in addition to design time enforcement of the access control and governance rules.

10 . The computer-implemented method of claim 1 , wherein the RPA robot comprises automatically inserted code that forces the RPA robot to obtain the access control and governance rules and/or to operate in compliance with the access control and governance rules.

11 . The computer-implemented method of claim 1 , wherein the access control and governance rules comprise one or more application and/or universal resource locator (URL) restrictions, one or more package restrictions, one or more activity restrictions, one or more activity property requirements, or a combination thereof.

12 . A computer program for performing runtime robot access control and governance for robotic process automation (RPA) embodied on a non-transitory computer-readable medium, the computer program configured to cause at least one processor to:
check one or more actions to be performed by an RPA robot, information requested by the RPA robot, or both, against access control and governance rules; and when the RPA robot, based on the access control and governance rules, is not permitted to perform the one or more actions, receive the requested information, or both:
prevent the RPA robot from taking the one or more actions and/or obtaining the requested information.

13 . The computer program of claim 12 , wherein when the RPA robot, based on the access control and governance rules, is permitted to perform the one or more actions, receive the requested information, or both, the computer program is further configured to cause the at least one processor to:
authorize the one or more actions and/or provide the RPA robot with the requested information.

14 . The computer program of claim 12 , wherein when the RPA robot is not permitted to perform the one or more actions, receive the requested information, or both, the computer program is further configured to cause the at least one processor to:
send a notification to the RPA robot or a client-side application indicating that the one or more actions and/or the access to the information are not permitted.

15 . The computer program of claim 12 , wherein when the RPA robot is not permitted to perform the one or more actions, receive the requested information, or both, the computer program is further configured to cause the at least one processor to:
automatically end execution of the RPA robot.

16 . The computer program of claim 12 , wherein the computer program is further configured to cause the at least one processor to:
automatically send the access control and governance rules to a computing system associated with the RPA robot when the computing system connects to a server-side conductor application.

17 . The computer program of claim 12 , wherein at least one of the one or more actions is permitted for a human user but not by the RPA robot.

18 . The computer program of claim 12 , wherein the computer program is further configured to cause the at least one processor to:
verify that the RPA robot pauses for at least a period of time for one or more legacy systems to perform one or more operations; and when the RPA robot does not pause for at least the period of time:
delay the obtaining of the information requested by the RPA robot or accepting of new information requests from the RPA robot until the period of time expires.

19 . The computer program of claim 12 , wherein the computer program is configured to perform runtime enforcement of the access control and governance rules in addition to design time enforcement of the access control and governance rules.

20 . The computer program of claim 12 , wherein the RPA robot comprises automatically inserted code that forces the RPA robot to obtain the access control and governance rules and/or to operate in compliance with the access control and governance rules.

21 . The computer program of claim 12 , wherein the access control and governance rules comprise one or more application and/or universal resource locator (URL) restrictions, one or more package restrictions, one or more activity restrictions, one or more activity property requirements, or a combination thereof.

22 . A computer program for performing runtime robot access control and governance for robotic process automation (RPA) embodied on a non-transitory computer-readable medium, the computer program configured to cause at least one processor to:
check one or more actions to be performed by an RPA robot, information requested by the RPA robot, or both, against access control and governance rules; and when the RPA robot, based on the access control and governance rules, is not permitted to perform the one or more actions, receive the requested information, or both:
prevent the RPA r

Assignees

• Uipath Inc

Inventors

• Hall Andrew

Classifications

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G05B19/0426 Primary

  Programming the control sequence · CPC title

• G05B2219/39059

  Sensor adaptation for robots by software · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title