Patent ID: 11909772
Assignee: CAPITAL ONE SERVICES, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 17:
18. A system for providing least privilege access to a secured server, the system comprising:
one or more processors; and
memory in communication with the one or more processors and storing instructions that, when executed by the one or more processors, are configured to cause the system to:
receive an access request from a client requesting access to a resource in the secured server, the access request explicitly enumerating a role or policy associated with the client and one or more actions associated with the resource;
initialize a rules engine defining one or more rules usable by the system to determine whether the access request complies with a least privilege policy and configured to selectively permit access to the resource based on the role or policy and the one or more actions associated with the resource; and
approve or deny the one or more actions based at least in part on a comparison of the one or more actions and the one or more rules such that the instructions are configured to cause the system to:
provision the access request within the secured server such that the client can perform the one or more actions within the secured server when the access request complies with the least privilege policy; and
deny access to the resource, generate a report indicating to the client which rules of the one or more rules failed the least privilege policy, and transmit the report to the client when the access request does not comply with the least privilege policy.