Christopher E Schultz

US Patent:

20220382888, Dec 1, 2022

Filed:

May 28, 2021

Appl. No.:

17/333425

Inventors:

- McLean VA, US
Gavin MCGREW - Henrico VA, US
Devon POWLEY - Reston VA, US
Christopher SCHULTZ - Henrico VA, US

Assignee:

Capital One Services, LLC - McLean VA

International Classification:

G06F 21/60

Abstract:

Disclosed herein are system, method, and computer program product embodiments for evaluating whether or not a role has an over-privileged access permission contained in a set of effective access permissions to a system resource defined in a first security policy and a second security policy. The method includes comparing a scope of a name for the system resource defined in the first security policy with a permissible scope of the name for the system resource defined by a security rule to obtain a first comparison result; and comparing a scope of a name for the role defined in the second security policy with a permissible scope of the name for the role defined by the security rule to obtain a second comparison result. The method further includes determining, based on the first comparison result and the second comparison result, whether or not the role has the over-privileged access permission.