RPA Workflow Governance Using Pre-Deployment Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Robotic process automation (RPA) systems lack effective access control and governance mechanisms, leading to potential violations of laws and regulations such as GDPR and HIPAA, as well as unauthorized use of unapproved software libraries and overwhelming of legacy systems, which can result in significant financial and legal risks for organizations.
Innovation Solution
Implementing a computer program that analyzes RPA workflow activities against access control and governance policy rules, preventing the generation or publication of RPA robots until compliance is ensured, and enforcing policies at both design time and runtime through a code analyzer and conductor application, restricting access to unauthorized applications, URLs, packages, and activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If RPA workflows are allowed to execute without access control checks, then system productivity and automation speed are improved, but legal compliance and security are compromised
Solution Approach 1:
The patent implements access control policy checks during the RPA workflow design and publication phases, before the automation executes. The code analyzer evaluates workflows against governance policies upfront, preventing non-compliant automations from being deployed. This preliminary validation ensures legal compliance is established before productivity gains are realized, resolving the contradiction between speed and compliance.
2Reliability
If access control policy checks are implemented for RPA workflows, then legal compliance and security are improved, but system complexity and development time increase
Solution Approach 1:
The patent implements a self-service access control mechanism where the RPA workflow itself carries its access control credentials and permissions embedded within its metadata. During execution, the workflow automatically presents these credentials to the access control system without requiring external intervention or complex manual authorization processes. This self-service approach maintains strong compliance while reducing system complexity.
3Reliability
If RPA robots are prevented from accessing unauthorized applications and URLs, then security and compliance are improved, but adaptability and versatility of RPA workflows are reduced
Solution Approach 1:
The patent implements dynamic access control where permissions and restrictions are not fixed but can be adjusted based on the specific workflow context, user role, and execution environment. The access control system evaluates each RPA workflow against relevant governance policies and grants appropriate permissions dynamically. This dynamic approach allows secure access control while maintaining workflow flexibility and adaptability.
Data Source
AI summary
Robot access control and governance for robotic process automation (RPA) is disclosed. A code analyzer of an RPA designer application, such as a workflow analyzer, may read access control and governance policy rules for an RPA designer application and analyze activities of an RPA workflow of the RPA designer application against the access control and governance policy rules. When one or more analyzed activities of the RPA workflow violate the access control and governance policy rules, the code analyzer prevents generation of an RPA robot or publication of the RPA workflow until the RPA workflow satisfies the access control and governance policy rules. When the analyzed activities of the RPA workflow comply with all required access control and governance policy rules, the RPA designer application may generate an RPA robot implementing the RPA workflow or publish the RPA workflow.