Patent ID: 11909772
Assignee: CAPITAL ONE SERVICES, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 8:
9. A method for providing least privilege access to a resource within a secured server, the method comprising:
receiving, at a transceiver associated with a rules module, an access request from a client requesting access to the resource in the secured server, the access request comprising a role or policy associated with the client and one or more actions associated with the resource;
normalizing, via a processor associated with the rules module, the role or policy to extract an identity of the secured server, an account associated with the client, and a list of actions or resources approved for the client;
fetching, via the processor, actions associated with the secured server from a database storing a plurality of actions for the secured server;
fetching, via the processor, accounts associated with a plurality of clients and associated actions and resources mapped to the plurality of clients from the database;
initializing, via the processor, a rules engine defining one or more rules usable by the rules module to determine whether the access request complies with a least privilege policy;
analyzing, via the processor, the role or policy and the access request with the rules engine to determine whether the access request complies with the least privilege policy; and
selectively granting, via the processor, access to the secured server and resource based on the analysis of the role or policy with the rules engine.