Computing resource inventory system

Patent metadata

Field	Value
Publication number	US-9529629-B2
Application number	US-201414267586-A
Country	US
Kind code	B2
Filing date	May 1, 2014
Priority date	Dec 20, 2012
Publication date	Dec 27, 2016
Grant date	Dec 27, 2016

Abstract

Systems and methods of managing computing resources of a computing system are described. A computing resource list and computing resource information may be stored at a data store. The computing resource list may identify a set of computing resources of a computing system, and the computing resource information may respectively describe the computing resources. The computing resource list may be updated in response to a new computing resource being added to the computing system or in response to an existing computing resource being removed from the computing system. Evaluation tasks for the computing resources may be performed, and a resource evaluation report may be generated during performance of at least one of the evaluation reports.

First claim

What is claimed is:

1. Non-transitory computer-readable media having instructions, that when executed by a processor of a computing device, cause the computing device to:
store, at a data store, a computing resource list that identifies a set of computing resources of a computing system and resource information that respectively describes individual computing resources in the set of computing resources;
update the computing resource list responsive to at least one of a new computing resource being added to the computing system and an existing computing resource being removed from the computing system;
perform one or more evaluation tasks for one of the computing resources in the set of computing resources;
generate a resource evaluation report during performance of one of the one or more evaluation tasks; and
wherein the one or more evaluation tasks include
a first evaluation task comprising determining whether one of the computing resources in the set of computing resources has provided a current access report for a current reporting period, and
a second evaluation task comprising determining whether a first total number of access rights identified in the current access report deviates from a second total number of access rights identified in a previous access report provided by that computing resource.

2. The non-transitory computer-readable media of claim 1 wherein:
the first evaluation task further comprises identifying the computing resource as either a reporting computing resource or a non-reporting computing resource in the resource evaluation report based on whether that computing resource provided an access report for the current reporting period; and
the access report identifies one or more access rights used to access that computing resource.

3. The non-transitory computer-readable media of claim 1 wherein:
the second evaluation task further comprises identifying the current access report as either a typical access report or an atypical access report in the resource evaluation report based on whether a difference between the first total number of access rights and the second total number of access rights exceeds a predetermined difference threshold.

4. The non-transitory computer-readable media of claim 1 wherein the instructions, when executed by the processor, further cause the computing device to:
provide an access rights history of the computing resource responsive to receipt of a request for the access rights history; and
wherein the access rights history identifies one or more access rights that include at least one of
i) an access right currently associated with the computing resource and a date that access right was provisioned,
ii) an access right previously associated with the computing resource and a date that access right was revoked, and
iii) combinations thereof.

5. A computing device comprising: one or more processors;
a data store that stores a computing resource list that identifies a set of computing resources of a computing system and resource information that respectively describes individual computing resources in the set of computing resources; and
memory storing instructions that, when executed by one of the one or more processors, cause the computing device to
update the computing resource list responsive to at least one of a new computing resource being added to the computing system and an existing computing resource being removed from the computing system;
perform one or more evaluation tasks for one of the computing resources in the set of computing resources;
generate a resource evaluation report during performance of one of the one or more evaluation tasks;

wherein the one or more evaluation tasks include
a first evaluation task comprising determining whether one of the computing resources in the set of computing resources has provided a current access report for a current reporting period, and
a second evaluation task comprising determining whether a first total number of access rights identified in the current access report deviates from a second total number of access rights identified in a previous access report provided by the computing resource.

6. The computing device of claim 5 , wherein:
the first evaluation task further comprises identifying the computing resource as either a reporting computing resource or a non-reporting computing resource in the resource evaluation report based on whether that computing resource provided an access report for the current reporting period; and
the access report identifies one or more access rights used to access that computing resource.

7. The computing device of claim 5 , wherein:
the second evaluation task further comprises identifying the current access report as either a typical access report or an atypical access report in the resource evaluation report based on whether a difference between the first total number of access rights and the second total number of access rights exceeds a predetermined difference threshold.

8. The computing device of claim 5 , wherein:
the instructions, when executed by one of the one or more processors, further cause the computing device to provide an access rights history of the computing resource responsive to receipt of a request for the access rights history; and
wherein the access rights history identifies one or more access rights that include at least one of
i) an access right currently associated with the computing resource and a date that access right was provisioned,
ii) an access right previously associated with the computing resource and a date that access right was revoked, and
iii) combinations thereof.

9. A computer-implemented method comprising:
storing, at a data store of a computing device, a computing resource list that identifies a set of computing resources of a computing system and resource information that respectively describes individual computing resources in the set of computing resources;
updating, by the computing device, the computing resource list responsive to at least one of a new computing resource being added to the computing system and an existing computing resource being removed from the computing system;
performing, by the computing device, one or more evaluation tasks for one of the computing resources in the set of computing resources; and
generating, by the computing device, a resource evaluation report during performance of one of the one or more evaluation tasks;
wherein the one or more evaluation tasks include
a first evaluation task comprising determining whether one of the computing resources in the set of computing resources has provided a current access report for a current reporting period, and
a second evaluation task comprising determining whether a first total number of access rights identified in the current access report deviates from a second total number of access rights identified in a previous access report provided by the computing resource.

10. The computer-implemented method of claim 9 , wherein:
the first evaluation task further comprises identifying the computing resource as either a reporting computing resource or a non-reporting computing resource in the resource evaluation report based on whether that computing resource provided an access report for the current reporting period; and
the access report identifies one or more access rights used to access that computing resource.

11. The computer-implemented method of claim 9 , wherein:
the second evaluation task further comprises identifying the current access report as either a typical access report or an atypical access report in the resource evaluation report based on whether a difference between the

Assignees

• Bank Of America

Inventors

• Moloian Armen
• Ritchey Ronald W

Classifications

• G06F17/30592

  Physics · mapped topic

• G06F11/3466

  Performance evaluation by tracing or monitoring · CPC title

• G06F9/50 Primary

  Allocation of resources, e.g. of the central processing unit [CPU] · CPC title

• G06F11/3051

  Monitoring arrangements for monitoring the configuration of the computing system or of the computing system component, e.g. monitoring the presence of processing resources, peripherals, I/O links, software programs (verification or detection of system hardware configuration G06F11/2247) · CPC title

• H04L43/06

  Generation of reports · CPC title