Bank of America Corporation

Rajesh M Gopinathapai

David Pritchard

Jennifer Lynn Greenwald

Jennifer Walsh

Jennie Kathleen Egbert

David Patrick Harte

Christopher J Stott

Kimberly Jane Nowell-Berry

Mary Adelina Quigley

Tinku Thomas

Swapnil S Palkar

Matthew Peach

Satyajit Patki

Ruoping Shen

Systems, methods, and computer program products are provided for automatically assigning resource permission levels. The method includes assigning a user to a user group based on one or more job characteristics. The user group includes one or more users associated with a common job type. The method also includes determining a resource permission level for one or more resources based on the user group of the user. Each of the users in a user group receive the same resource permission level for at least one of the one or more resources. The method further includes allowing the user access to one or more resources on a user device associated with the user.

System and method for automatically assigning network and application permissions to a network device based on user attributes

A system for verifying a user's request to access a resource determines a set of entitlement attributes from the request. The set of entitlement requests indicates a type of permission to access a particular resource, including at least one of a write-access and a read-access to the particular resource. The system determines whether there is any rule that is violated by the set of entitlement attributes. In response to determining that there is at least one rule that is violated by the set of entitlement attributes, the system denies the request.

Information security system for detecting unauthorized access requests

Aspects of the disclosure relate to identifying entitlement rules based on a frequent pattern tree. A computing platform may retrieve entitlement data associated with a relational database, where the entitlement data is indicative of user entitlements to computing resources in an enterprise network. Then, the computing platform may generate, for the entitlement data, a frequent pattern tree. Then, the computing platform may compare a pair of branches and may detect a pattern associated with a pair of entitlements. Then, the computing platform may determine, based on the frequent pattern tree, a frequency of occurrence of the pattern. Then, the computing platform may identify, based on the frequency of occurrence, a rule associated with the pattern. Subsequently, the computing platform may trigger, via the computing device and based on the rule, an action related to one or more of the entitlements of the pair of entitlements.

Identifying entitlement rules based on a frequent pattern tree

Methods, apparatuses, and systems are described for provisioning access rights in a computing system. A data structure may be created that corresponds to the access rights of a computing system. The data structure may be traversed to identify candidate bundles of access rights that correspond to patterns of access rights in the computing system. The candidate bundles of access rights may be evaluated to select one or more bundles to define as one or more roles in the computing system. The defined roles may then be provisioned to the users of the computing system as a replacement for the individual access rights. Various constraints may be applied to reduce the number of candidate bundles of access rights to evaluate.

Role discovery for identity and access management in a computing system

Artificial intelligence ('AI') systems and methods are provided for bundling software permissions across an enterprise organization. An AI engine may be deployed to maximize wellness of a software bundle. Maximizing the wellness may include adding a software permission to the bundle. Maximizing the wellness may include associating additional members with the bundle. Maximizing the wellness may include removing a software permission from the bundle. Maximizing the wellness may include disassociating a member from the bundle. The AI engine may streamline allocation of software permissions in an enterprise organization that would otherwise be unmanageable by human role engineers. For example, the AI engine may be deployed in enterprise organizations that utilize over 4,000 different software application across over 750,000 members. Utilizing the AI engine to streamline software permissions may limit exposure of the organization to an increased risk of a cyberattack on its information systems.

Artificial intelligence software access bundling

An apparatus includes a memory and a hardware processor. The memory stores a first profile and a first hash. The processor receives a first message indicating that the user has entered a building and updates the first profile to produce a second profile. The processor generates a second hash, calculates a first deviation between the second hash and the first hash, and determines that the first deviation is below a threshold. The processor receives a second message indicating that the user has requested access to a software application and updates the second profile to produce a third profile. The processor also generates a third hash, calculates a second deviation between the third hash and the first hash, determines that the second deviation is above the threshold, and in response, flags the user for increased security monitoring and denies the user access to the software application.

Security tool for considering multiple security contexts

Embodiments of the present invention provide a system for assessing role defining parameters associated with access to resources in a network. The system is configured for extracting information associated with one or more resources, one or more users, and one or more authorizations, determining one or more metrics associated with one or more roles within an entity based on the extracted information, calculating a role defining parameter that defines a condition of the one or more roles based on the one or more metrics associated with the one or more roles, wherein the role defining parameter is associated with access to the one or more resources, determining if the parameter is below a predefined threshold, and performing one or more actions.

Growing community of inventors

Aurora, IL, United States of America

Rajesh M Gopinathapai