Dynamic Community Generator for Entitlement Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional methods for monitoring and controlling access to resources within organizations are inefficient and resource-intensive, particularly in large organizations with numerous employees and complex entitlement combinations, leading to management challenges, security risks, and compliance issues due to legacy entitlements and poor monitoring of entitlement distribution.

Innovation Solution

A system dynamically determines communities within an organization based on entitlement distribution, using a processing device to compute correlation numbers and generate correlation matrices to identify appropriate entitlements, mark uncommon or normal entitlements, and automatically manage their distribution, thereby optimizing entitlement management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional manual techniques are used to monitor and control entitlement distribution, then access control can be maintained, but significant organizational resources are consumed and management becomes inefficient

Engineering Contradiction:
Improveaccess control reliabilityVSAvoidentitlement management efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system automatically monitors and controls entitlement distribution without requiring manual intervention. The processor autonomously determines communities based on entitlement data, identifies uncommon entitlements, and generates reports, allowing the system to serve itself rather than requiring continuous human resource investment.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent replaces manual mechanical review processes with an automated computer-based system. The processor uses algorithmic analysis of entitlement data to identify patterns and uncommon entitlements, substituting human administrative work with automated computational processes.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If comprehensive entitlement monitoring is implemented across all members, then security risks and compliance issues can be detected, but the complexity and resource requirements increase significantly

Engineering Contradiction:
Improvesecurity and compliance monitoringVSAvoidmonitoring system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts and focuses on identifying only the uncommon entitlements that deviate from community norms, rather than manually reviewing all entitlements. By isolating the exceptional cases through correlation analysis, the system reduces monitoring complexity while maintaining comprehensive security coverage.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary processing layer that analyzes entitlement data and generates community correlations. This intermediary system acts as a mediator between raw entitlement data and security decisions, simplifying the monitoring process by pre-processing and structuring the data before compliance checks.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If manual review of entitlement combinations is performed, then access control can be maintained, but the time and resources required become unsustainable for large organizations

Engineering Contradiction:
Improveentitlement control accuracyVSAvoidentitlement management time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary analysis by determining community correlations and identifying uncommon entitlements before formal access control decisions are made. This advance processing prepares the data structure and highlights potential issues, enabling faster and more accurate entitlement management.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent creates a computational model or copy of the entitlement distribution patterns through correlation matrices. By working with this replicated representation rather than raw individual entitlement data, the system can efficiently analyze and control access without processing every single entitlement combination manually.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS8881299B2Dynamic community generator
Publication Date: 2014.11.04 BANK OF AMERICA CORP
  • US8881299B2 patent drawing
  • US8881299B2 patent drawing
  • US8881299B2 patent drawing

AI summary

Embodiments of the invention are directed to systems, methods, and computer program products configured to determine communities within an organization dynamically based on the distribution of entitlements within the organization.