Mainframe User Permission Verification and Access Level Matching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional systems are inefficient and prone to errors when verifying user permissions and access levels during system changes or upgrades, as they require individual loading or checking of each access level, which is time-consuming and may lead to inaccuracies.

Innovation Solution

A system and method for verifying user permissions and access levels by receiving records with user identifiers and associated access levels, matching them across mainframe systems, flagging inconsistencies, and prompting administrators for corrections, while also checking password security by attempting login with default passwords and notifying users to change them if insecure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If individual loading or checking of each access level is performed, then verification accuracy is maintained, but verification time and system downtime increase significantly

Engineering Contradiction:
Improveverification accuracyVSAvoidverification time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent segments the verification process into two distinct phases: (1) batch loading of access level records to the new system during system downtime, and (2) automated verification of loaded records against source system records. This segmentation allows the time-consuming loading operation to occur in batches during maintenance windows, while the verification can be performed efficiently using automated record comparison, thus resolving the contradiction between maintaining verification accuracy and reducing verification time.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies preliminary action by loading all access level records to the new system in advance during system downtime before normal operations resume. This preliminary batch loading eliminates the need for time-consuming individual record verification during operational periods, as the system can then perform automated verification against source records without impacting user access or system productivity.

Inventive Principle:
Principle #10Preliminary action

2Manufacturing precision

If individual checking of each access level is performed, then data accuracy is ensured, but operational efficiency decreases

Engineering Contradiction:
Improvedata accuracyVSAvoidoperational efficiency
Core Design Contradiction:
Manufacturing precisionVSProductivity

Solution Approach 1:

The patent uses copying by creating duplicate access level records in the new system that mirror the source system records. These copied records can then be verified through automated comparison of key fields (user ID, access level, permissions) without requiring manual individual checking. This copying approach ensures data accuracy through systematic verification while maintaining operational efficiency by eliminating manual intervention for each record.

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The verification system performs self-service by automatically comparing loaded access level records against source system records using automated record matching algorithms. The system independently identifies discrepancies, flags inconsistent records, and generates verification reports without requiring manual individual checking, thereby ensuring data accuracy while preserving operational efficiency.

Inventive Principle:
Principle #25Self-service

3Reliability

If manual verification methods are used, then error detection is thorough, but human error and inconsistencies increase

Engineering Contradiction:
Improveerror detection capabilityVSAvoidverification errors
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent implements feedback by creating an automated verification loop that compares loaded access level records against source system records and immediately identifies discrepancies. The system provides feedback through flagged records and verification reports that highlight inconsistencies between the new and source systems. This automated feedback mechanism eliminates human error associated with manual verification while maintaining thorough error detection capability.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent replaces manual mechanical verification processes with automated computer-based record comparison systems. Instead of human operators manually checking each access level record, the system uses automated algorithms to compare records, identify mismatches, and flag inconsistencies. This substitution eliminates human error and inconsistencies while maintaining thorough error detection, thereby improving reliability and reducing verification errors.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS8484724B2User permissions in computing systems
Publication Date: 2013.07.09 BANK OF AMERICA CORP
  • US8484724B2 patent drawing
  • US8484724B2 patent drawing
  • US8484724B2 patent drawing

AI summary

A system and method of verifying accuracy of permission and access levels in a mainframe system are presented. The system and method may include receiving a plurality of records including a user identifier and an associated access level. The access level in the record may be matched (e.g., the access level on the stored record must be less than or equal to the access on the new system to “pass” the test) to the access level in a mainframe system. If the access levels match, the access level may be stored in the mainframe system. If the access levels do not match, the record may be flagged and correction of the inconsistency may be performed.