Correlating a task with commands to perform a change ticket in an IT system

Patent metadata

Field	Value
Publication number	US-9665718-B2
Application number	US-201414211135-A
Country	US
Kind code	B2
Filing date	Mar 14, 2014
Priority date	Mar 14, 2014
Publication date	May 30, 2017
Grant date	May 30, 2017

Abstract

An approach is provided for controlling a task. A change ticket is received. A task to perform the change ticket is correlated with command(s) to perform the task, user(s) who are authorized to initiate execution of the command(s), and an authorized location to initiate the execution of the command(s). A request is made by a requestor to execute one of the command(s). It is determined whether (a) the requestor is currently located at the authorized location correlated with the task and (b) the requestor is one of the user(s) correlated with the task. Based in part on (a) and (b) being true, the requested command is executed. If (a) or (b) is false, then execution of the requested command is prevented.

First claim

What is claimed is:

1. A method of controlling a task, the method comprising the steps of:
a computer receiving a change ticket;
the computer correlating a task to perform the change ticket with one or more commands to perform the task, one or more users who are authorized to initiate execution of the one or more commands to perform the task for the change ticket, and an authorized location to initiate the execution of the one or more commands to perform the task; and subsequently,
the computer determining that a request has been made by a requestor to execute one of the one or more commands to perform the task for the change ticket, and in response, the computer determining if (a) the requestor is currently located at the authorized location correlated with the task, and (b) the requestor is one of the one or more users correlated with the task;
based in part on (a) and (b) being true, the computer executing the requested command;
if (a) or (b) is false, the computer preventing execution of the requested command;
the computer correlating the task to perform the change ticket with one or more first computer systems and with one or more second computer systems, each of the one or more users authorized to utilize a respective first computer system included in the one or more first computer systems to remotely log into a respective second computer system included in the one or more second computer systems to initiate the execution of the one or more commands by the respective second computer system;
the computer determining a first computer system was utilized by the requestor to make the request to execute the requested command;
the computer determining a second computer system was remotely logged into by the first computer system to receive the request to execute the requested command;
the computer determining if (c) the first computer system is one of the one or more first computer systems and (d) the second computer system is one of the one or more second computer systems;
based in part on (c) and (d) being true, the computer executing the requested command; and
if (c) or (d) is false, the computer preventing execution of the requested command.

2. The method of claim 1 , further comprising the steps of:
the computer determining the requestor is in the location by receiving a verification from one or more physical access control systems that the requestor has entered a physical structure at the location and has not exited the physical structure;
the computer determining the requestor is logged into the first computer system which is in the physical structure at the location;
the computer determining the requestor is remotely logged into the second computer system via the first computer system; and
the computer determining the requestor is one of the one or more users correlated with the task,
wherein the step of determining the requestor is logged into the first computer system is performed subsequent to the step of determining the requestor is in the location, wherein the step of determining the requestor is remotely logged into the second computer system is performed subsequent to the step of determining the requestor is logged into the first computer system, wherein the step of determining the requestor is one of the one or more users correlated with the task is performed subsequent to the step of determining the requestor is remotely logged into the second computer system, and
wherein the step of executing the requested command is based in part on the step of determining the requestor is logged into the first computer system being performed subsequent to the step of determining the requestor is in the location, the step of determining the requestor is remotely logged into the second computer system being performed subsequent to the step of determining the requestor is logged into the first computer system, and the step of determining the requestor is one of the one or more users correlated with the task being performed subsequent to the step of determining the requestor is remotely logged into the second computer system.

3. The method of claim 2 , further comprising the steps of:
the computer correlating the task to perform the change ticket with one or more time periods, each of the one or more users authorized to initiate the execution of the one or more commands during one of the one or more time periods; and
the computer determining a time the requestor made the request to execute the requested command is included in one of the one or more time periods,
wherein the step of determining the time is included in one of the one or more time periods is performed subsequent to the step of determining the requestor is one of the one or more users correlated with the task, and
wherein the step of executing the requested command is based in part on the step of determining the time is included in one of the one more time periods being performed subsequent to the step of determining the requestor is one of the one or more users correlated with the task.

4. The method of claim 2 , further comprising the steps of:
the computer determining the requestor has entered the physical structure at a first time;
the computer determining the requestor logged into the first computer system at a second time;
the computer determining the requestor remotely logged into the second computer system via the first computer system at a third time;
the computer determining a time the requestor made the request to execute the requested command;
the computer determining if (e) the second time is subsequent to the first time, (f) the third time is subsequent to the second time, and (g) the time the requestor made the request to execute the requested command is subsequent to the third time;
based in part on (e), (f) and (g) being true, the computer executing the requested command; and
if (e), (f) or (g) is false, the computer preventing execution of the requested command.

5. The method of claim 1 , further comprising the steps of:
the computer correlating the task with one or more time periods, each of the one or more users authorized to initiate the execution of the one or more commands during one of the one or more time periods;
the computer determining a time the requestor made the request to execute the requested command;
the computer determining if the time the requestor made the request to execute the requested command is included in one of the one or more time periods;
based in part on the time the requestor made the request to execute the requested command being included in one of the one or more time periods, the computer executing the requested command; and
if the time the requestor made the request to execute the requested command is not included in one of the one or more time periods, the computer preventing execution of the requested command.

6. The method of claim 1 , further comprising the steps of:
the computer correlating the task with one or more first computer systems, one or more second computer systems, and one or more time periods, each of the one or more users authorized to utilize a respective first computer system included in the one or more first computer systems to remotely log into a respective second computer system included in the one or more second computer systems to initiate the execution of the one or more commands by the respective second computer system during one of the one or more time periods;
the computer determining the requestor has entered a physical structure at the location at a first time;
the computer determining the requestor logged into a first computer system at a second time;
the computer determining the requestor remotely logged into a second computer system via the first computer system at a third time;
the computer determining a t

Assignees

• IBM

Inventors

• Anderson Eric M
• Hinton Heather M
• Radhakrishnan Rajesh

Classifications

• G06F2221/2111

  Location-sensitive, e.g. geographical location, GPS · CPC title

• G06F9/46

  Multiprogramming arrangements · CPC title

• G06F21/629

  to features or functions of an application · CPC title

• G06Q10/06

  Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling · CPC title

• G06F21/554

  involving event detection and direct action · CPC title