专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US11283838B2 Access requests at IAM system implementing IAM data model 有权
公开(公告)号：US11283838B2
公开(公告)日：2022-03-22
申请号：US16693578
申请日：2019-11-25
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： H04L29/00 , H04L29/06 , G06F16/176 , G06F21/62 , G06Q10/10 , G06F21/31
摘要： Systems and methods are provided for provisioning access rights to physical computing resources using an IAM system implementing an IAM data model. The IAM data model may identify logical and physical computing resources. An access request handler may receive an access request and identify a set of logical permissions based on the access request. The access request handler may derive a set of logical entitlements based on the set of logical permissions. An entitlement translator may translate the set of logical entitlements to a physical entitlement specification based on a set of physical permission specifications associated with the set of logical permissions. A physical permission specification may be obtained by mapping a logical permission to one or more physical permissions. An access control manager may then provision access rights to at least one physical computing resource indicated in the physical entitlement specification.

2. 发明授权

US09558334B2 Access requests at IAM system implementing IAM data model 有权
公开(公告)号：US09558334B2
公开(公告)日：2017-01-31
申请号：US14879488
申请日：2015-10-09
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： G06F17/30 , G06F21/31 , G06F21/62 , H04L29/06 , G06Q10/10
CPC分类号： H04L63/20 , G06F17/30165 , G06F21/31 , G06F21/6218 , G06F2221/2141 , G06Q10/10 , H04L63/0281 , H04L63/08 , H04L63/10 , H04L63/102 , H04L63/105
摘要： Systems and methods are provided for provisioning access rights to physical computing resources using an IAM system implementing an IAM data model. The IAM data model may identify logical and physical computing resources. An access request handler may receive an access request and identify a set of logical permissions based on the access request. The access request handler may derive a set of logical entitlements based on the set of logical permissions. An entitlement translator may translate the set of logical entitlements to a physical entitlement specification based on a set of physical permission specifications associated with the set of logical permissions. A physical permission specification may be obtained by mapping a logical permission to one or more physical permissions. An access control manager may then provision access rights to at least one physical computing resource indicated in the physical entitlement specification.

3. 发明授权

US09536070B2 Access requests at IAM system implementing IAM data model 有权
标题翻译： IAM系统实现IAM数据模型的访问请求
公开(公告)号：US09536070B2
公开(公告)日：2017-01-03
申请号：US15064013
申请日：2016-03-08
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： G06F17/30 , G06F21/31 , G06F21/62 , H04L29/06 , G06Q10/10
CPC分类号： H04L63/20 , G06F17/30165 , G06F21/31 , G06F21/6218 , G06F2221/2141 , G06Q10/10 , H04L63/0281 , H04L63/08 , H04L63/10 , H04L63/102 , H04L63/105
摘要： Systems and methods are provided for provisioning access rights to physical computing resources using an IAM system implementing an IAM data model. The IAM data model may identify logical and physical computing resources. An access request handler may receive an access request and identify a set of logical permissions based on the access request. The access request handler may derive a set of logical entitlements based on the set of logical permissions. An entitlement translator may translate the set of logical entitlements to a physical entitlement specification based on a set of physical permission specifications associated with the set of logical permissions. A physical permission specification may be obtained by mapping a logical permission to one or more physical permissions. An access control manager may then provision access rights to at least one physical computing resource indicated in the physical entitlement specification.
摘要翻译：提供了系统和方法，以使用实施IAM数据模型的IAM系统来提供对物理计算资源的访问权限。 IAM数据模型可以识别逻辑和物理计算资源。访问请求处理程序可以接收访问请求并且基于访问请求来识别一组逻辑许可。访问请求处理程序可以基于该组逻辑权限导出一组逻辑授权。授权翻译器可以基于与该组逻辑许可相关联的一组物理权限规范将该组逻辑授权转换为物理授权规范。可以通过将逻辑许可映射到一个或多个物理权限来获得物理许可规范。然后，访问控制管理器可以向物理授权规范中指示的至少一个物理计算资源提供访问权限。

4. 发明授权

US09189644B2 Access requests at IAM system implementing IAM data model 有权
标题翻译： IAM系统实现IAM数据模型的访问请求
公开(公告)号：US09189644B2
公开(公告)日：2015-11-17
申请号：US13945638
申请日：2013-07-18
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： G06F21/62 , G06F17/30 , H04L29/06
CPC分类号： H04L63/20 , G06F17/30165 , G06F21/31 , G06F21/6218 , G06F2221/2141 , G06Q10/10 , H04L63/0281 , H04L63/08 , H04L63/10 , H04L63/102 , H04L63/105
摘要： Systems and methods are provided for provisioning access rights to physical computing resources using an IAM system implementing an IAM data model. The IAM data model may identify logical and physical computing resources. An access request handler may receive an access request and identify a set of logical permissions based on the access request. The access request handler may derive a set of logical entitlements based on the set of logical permissions. An entitlement translator may translate the set of logical entitlements to a physical entitlement specification based on a set of physical permission specifications associated with the set of logical permissions. A physical permission specification may be obtained by mapping a logical permission to one or more physical permissions. An access control manager may then provision access rights to at least one physical computing resource indicated in the physical entitlement specification.
摘要翻译：提供了系统和方法，以使用实施IAM数据模型的IAM系统来提供对物理计算资源的访问权限。 IAM数据模型可以识别逻辑和物理计算资源。访问请求处理程序可以接收访问请求并且基于访问请求来识别一组逻辑许可。访问请求处理程序可以基于该组逻辑权限导出一组逻辑授权。授权翻译器可以基于与该组逻辑许可相关联的一组物理许可规范，将该组逻辑授权转换为物理授权规范。可以通过将逻辑许可映射到一个或多个物理权限来获得物理许可规范。然后，访问控制管理器可以向物理授权规范中指示的至少一个物理计算资源提供访问权限。

5. 发明授权

US09495380B2 Access reviews at IAM system implementing IAM data model 有权
标题翻译：访问IAM系统实现IAM数据模型的评估
公开(公告)号：US09495380B2
公开(公告)日：2016-11-15
申请号：US13945656
申请日：2013-07-18
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： G06F17/30 , H04L29/06
CPC分类号： G06F17/30165 , H04L63/10 , H04L63/102 , H04L63/1425
摘要： Systems and methods of conducting access reviews of access rights to logical computing resources are provided. An access reviewer may receive a selection indicating a user having access to one or more logical computing resources of a computer system. The access reviewer may identify a set of current logical computing resources that the user has access to and a set of current logical entitlements associated with the user. The access reviewer may generate an access review summary based on a comparison of the current logical computing resources to one or more of the current logical entitlements.
摘要翻译：提供了对逻辑计算资源的访问权限进行访问审查的系统和方法。访问审阅者可以接收指示具有访问计算机系统的一个或多个逻辑计算资源的用户的选择。访问审阅者可以标识用户有权访问的一组当前逻辑计算资源以及与用户相关联的一组当前逻辑授权。访问审阅者可以基于当前逻辑计算资源与当前逻辑授权中的一个或多个的比较来生成访问审查摘要。

6. 发明申请

US20160224770A1 Access Requests at IAM System Implementing IAM Data Model 有权
标题翻译： IAM系统实现IAM数据模型的访问请求
公开(公告)号：US20160224770A1
公开(公告)日：2016-08-04
申请号：US15063993
申请日：2016-03-08
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： G06F21/31
CPC分类号： H04L63/20 , G06F17/30165 , G06F21/31 , G06F21/6218 , G06F2221/2141 , G06Q10/10 , H04L63/0281 , H04L63/08 , H04L63/10 , H04L63/102 , H04L63/105
摘要： Systems and methods are provided for provisioning access rights to physical computing resources using an IAM system implementing an IAM data model. The IAM data model may identify logical and physical computing resources. An access request handler may receive an access request and identify a set of logical permissions based on the access request. The access request handler may derive a set of logical entitlements based on the set of logical permissions. An entitlement translator may translate the set of logical entitlements to a physical entitlement specification based on a set of physical permission specifications associated with the set of logical permissions. A physical permission specification may be obtained by mapping a logical permission to one or more physical permissions. An access control manager may then provision access rights to at least one physical computing resource indicated in the physical entitlement specification.
摘要翻译：提供了系统和方法，以使用实施IAM数据模型的IAM系统来提供对物理计算资源的访问权限。 IAM数据模型可以识别逻辑和物理计算资源。访问请求处理程序可以接收访问请求并且基于访问请求来识别一组逻辑许可。访问请求处理程序可以基于该组逻辑权限导出一组逻辑授权。授权翻译器可以基于与该组逻辑许可相关联的一组物理权限规范将该组逻辑授权转换为物理授权规范。可以通过将逻辑许可映射到一个或多个物理权限来获得物理许可规范。然后，访问控制管理器可以向物理授权规范中指示的至少一个物理计算资源提供访问权限。

7. 发明申请

US20140181914A1 Reconciling Access Rights at IAM System Implementing IAM Data Model 有权
标题翻译：协调IAM系统实现IAM数据模型的访问权限
公开(公告)号：US20140181914A1
公开(公告)日：2014-06-26
申请号：US13945679
申请日：2013-07-18
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： H04L29/06
CPC分类号： G06F17/30165 , G06F21/62 , H04L63/10 , H04L63/101
摘要： Systems and methods for reconciling access rights provisioned for physical computing resources of a computer system are provided. A reconciler may identify current physical computing resources accessible to a user account of the computer system and a physical entitlement specification associated with the user account. The reconciler may determine whether adjustment of access rights is needed based on a comparison of the current physical computing resources to the physical entitlement specification. Access rights to at least one physical computing resource may be adjusted in response to a determination that adjustment of access rights is needed.
摘要翻译：提供了用于协调为计算机系统的物理计算资源提供的访问权限的系统和方法。协调者可以识别计算机系统的用户帐户可访问的当前物理计算资源以及与用户帐户相关联的物理授权规范。协调者可以基于当前物理计算资源与物理权利规范的比较来确定是否需要对访问权限进行调整。可以响应于需要调整访问权限的确定来调整对至少一个物理计算资源的访问权限。

8. 发明申请

US20140181912A1 Access Reviews at IAM System Implementing IAM Data Model 有权
标题翻译：访问IAM系统实现IAM数据模型的评论
公开(公告)号：US20140181912A1
公开(公告)日：2014-06-26
申请号：US13945656
申请日：2013-07-18
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： H04L29/06
CPC分类号： G06F17/30165 , H04L63/10 , H04L63/102 , H04L63/1425
摘要： Systems and methods of conducting access reviews of access rights to logical computing resources are provided. An access reviewer may receive a selection indicating a user having access to one or more logical computing resources of a computer system. The access reviewer may identify a set of current logical computing resources that the user has access to and a set of current logical entitlements associated with the user. The access reviewer may generate an access review summary based on a comparison of the current logical computing resources to one or more of the current logical entitlements.
摘要翻译：提供了对逻辑计算资源的访问权限进行访问审查的系统和方法。访问审阅者可以接收指示具有访问计算机系统的一个或多个逻辑计算资源的用户的选择。访问审阅者可以标识用户有权访问的一组当前逻辑计算资源以及与用户相关联的一组当前逻辑授权。访问审阅者可以基于当前逻辑计算资源与当前逻辑授权中的一个或多个的比较来生成访问审查摘要。

9. 发明申请

US20170134435A1 Access Requests at IAM System Implementing IAM Data Model 审中-公开
公开(公告)号：US20170134435A1
公开(公告)日：2017-05-11
申请号：US15414747
申请日：2017-01-25
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： H04L29/06
CPC分类号： H04L63/20 , G06F16/176 , G06F21/31 , G06F21/6218 , G06F2221/2141 , G06Q10/10 , H04L63/0281 , H04L63/08 , H04L63/10 , H04L63/102 , H04L63/105
摘要： Systems and methods are provided for provisioning access rights to physical computing resources using an IAM system implementing an IAM data model. The IAM data model may identify logical and physical computing resources. An access request handler may receive an access request and identify a set of logical permissions based on the access request. The access request handler may derive a set of logical entitlements based on the set of logical permissions. An entitlement translator may translate the set of logical entitlements to a physical entitlement specification based on a set of physical permission specifications associated with the set of logical permissions. A physical permission specification may be obtained by mapping a logical permission to one or more physical permissions. An access control manager may then provision access rights to at least one physical computing resource indicated in the physical entitlement specification.

10. 发明授权

US09529989B2 Access requests at IAM system implementing IAM data model 有权
公开(公告)号：US09529989B2
公开(公告)日：2016-12-27
申请号：US15063993
申请日：2016-03-08
申请人： Bank of America Corporation
发明人： John Kling , Bryan Thompson , Ward Green
IPC分类号： G06F17/30 , G06F21/31 , G06F21/62 , H04L29/06 , G06Q10/10
CPC分类号： H04L63/20 , G06F17/30165 , G06F21/31 , G06F21/6218 , G06F2221/2141 , G06Q10/10 , H04L63/0281 , H04L63/08 , H04L63/10 , H04L63/102 , H04L63/105
摘要： Systems and methods are provided for provisioning access rights to physical computing resources using an IAM system implementing an IAM data model. The IAM data model may identify logical and physical computing resources. An access request handler may receive an access request and identify a set of logical permissions based on the access request. The access request handler may derive a set of logical entitlements based on the set of logical permissions. An entitlement translator may translate the set of logical entitlements to a physical entitlement specification based on a set of physical permission specifications associated with the set of logical permissions. A physical permission specification may be obtained by mapping a logical permission to one or more physical permissions. An access control manager may then provision access rights to at least one physical computing resource indicated in the physical entitlement specification.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式