Enterprise Computer Permissioning via Scheduled Script Frameworks

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing and monitoring large numbers of computers in an enterprise environment is time-consuming and poses security risks due to the need for individual attention and password-based systems, particularly in granting access to remote resources.

Innovation Solution

A system and method that utilizes a framework script to execute sub-task scripts on computers, which are stored in directories corresponding to execution accounts, allowing automated management and permissioning without passwords, using a Task 1 framework process to schedule and run Task 2 sub-task scripts.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If individual attention and password-based systems are used to manage computers, then access control and security management can be implemented, but IT professionals spend large amounts of time and security risks increase

Engineering Contradiction:
ImprovesecurityVSAvoidIT professional time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system enables self-service automation where computers automatically discover sub-task scripts and execute them through framework scripts without requiring IT professional intervention. The job scheduler process automatically manages script execution, eliminating the need for manual password-based access and individual computer attention while maintaining security through automated permission management.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Framework scripts act as intermediaries between the job scheduler process and sub-task scripts. The framework script discovers, validates, and executes sub-task scripts automatically, serving as a mediator that eliminates direct human intervention while maintaining controlled access. This intermediary layer automates the permission management process without requiring password-based authentication.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If automated solutions are implemented to reduce IT professional time, then efficiency increases, but system complexity may increase

Engineering Contradiction:
ImproveIT management efficiencyVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system segments management tasks into distinct components: job scheduler process for automation management, framework scripts for coordination, and sub-task scripts for specific maintenance functions. This segmentation allows each component to have a specific, simple function while the overall system achieves high automation. The framework script segment handles discovery and execution coordination, while sub-task scripts handle specific tasks, reducing overall system complexity through functional decomposition.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Framework scripts serve multiple functions: they are executed by the job scheduler, discover sub-task scripts, validate permissions, and coordinate execution. This multi-functionality consolidates what would otherwise require multiple separate systems into a single versatile component, reducing system complexity while maintaining high automation capability. The framework script acts as a universal coordinator for all script-based maintenance tasks.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250377942A1System and method for network service enterprise computer group permissioning
Publication Date: 2025.12.11 MORGAN STANLEY SERVICES GROUP INC
  • US20250377942A1 patent drawing
  • US20250377942A1 patent drawing
  • US20250377942A1 patent drawing

AI summary

A system and method may manage a computer by executing, by a job scheduler on the computer, a framework script written in a scripting language which discovers installed sub-task scripts and executes discovered sub-task scripts. Sub-task scripts may be stored in directories corresponding to accounts in which a sub-task script is to be run. Sub-task scripts may perform maintenance or monitoring tasks. A system and method may assign resource access or permissions for a set of computers, by, for each computer of a set of computers, determining the organizational unit and sub-organizational unit of the computer; and for each computer of the set of computers assigning the computer to a security group, based on the organizational unit and sub-organizational unit of the computer. For each computer, the security group the computer is assigned to may be associated with permissions enforced for each computer in the group.