Title:
SYSTEMS AND METHODS FOR DATA DRIVEN INFRASTRUCTURE ACCESS CONTROL
Document Type and Number:
WIPO Patent Application WO/2020/123962
Kind Code:
A3
Abstract:
In one embodiment, in an access gateway (150) comprising at least one computer processor, a method for real-time data protection may include: (1) receiving a user login comprising a user identifier; (2) retrieving, using an in-memory entitlements graph (118), a role definition for the user identifier, wherein the role definition comprises allowed actions, entitled assets (170-174), and a system account; (3) receiving a selection of a requested asset from the entitled assets (170-174) and a requested action from the allowed actions; (4) verifying the user's entitlement to access the requested asset and perform the requested action with the system account using the in-memory entitlement graph (118) based on the user identifier, the system account, the requested asset, and the requested action; and (5) authorizing the user's entitlement to access the requested asset and perform the requested action with the system account substantially at a time of requested access.
Inventors:
KURUP REJITH G (US)
HETTIARACHCHI KANISHKA (US)
BELINKIS VLADIMIR (US)
AHLUWALIA ISH K (US)
CHAN RICKY HEI WONG (US)
JOSEPH DENNIS (US)
HETTIARACHCHI KANISHKA (US)
BELINKIS VLADIMIR (US)
AHLUWALIA ISH K (US)
CHAN RICKY HEI WONG (US)
JOSEPH DENNIS (US)
Application Number:
PCT/US2019/066260
Publication Date:
September 24, 2020
Filing Date:
December 13, 2019
Export Citation:
Assignee:
JPMORGAN CHASE BANK NA (US)
International Classes:
H04L29/06; G06F21/62; H04L29/08
Foreign References:
| US20150263902A1 | 2015-09-17 | |||
| US20150026208A1 | 2015-01-22 |
Other References:
GUSTAFSSON M ET AL: "Using NFS to implement role-based access control", ENABLING TECHNOLOGIES: INFRASTRUCTURE FOR COLLABORATIVE ENTERPRISES, 1 997. PROCEEDINGS., SIXTH IEEE WORKSHOPS ON CAMBRIDGE, MA, USA 18-20 JUNE 1997, LOS ALAMITOS, CA, USA,IEEE COMPUT. SOC, US, 18 June 1997 (1997-06-18), pages 299 - 304, XP010253338, ISBN: 978-0-8186-7967-4, DOI: 10.1109/ENABL.1997.630829
Attorney, Agent or Firm:
KING, Robert A. (US)
Download PDF:
Previous Patent: METHODS AND COMPOSITIONS FOR SEQUENTIALLY DETECTING TARGETS
Next Patent: FAN ARRAY FAULT RESPONSE CONTROL SYSTEM
Next Patent: FAN ARRAY FAULT RESPONSE CONTROL SYSTEM