Patent ID: 11961022
Assignee: SNOWFLAKE ITM, INC.
Field: IT methods for management (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 3:
4. A specific method for improving the security and control of a computing system internally and with outside computing, storage and network systems by a practical application of the computing system automatically and dynamically without human intervention determining whether a first computing system element is authorized to perform an action it attempts involving at least a second computing system element, the method comprising:
requesting, by the first computing system element, an action that involves the second computing system element;
receiving, by a computing system processor, the request to perform an action by the first computing system element that involves at least the second computing system element;
identifying, by a computing system processor, the action requested by the first computing system element involving at least the second computing system element;
identifying, by a computing system processor, at least one rule for the identified requested action that uses at least the value of at least one attribute of at least the second computing system element to automatically and dynamically without human intervention determine if the first computing system element is authorized to perform the requested action;
analyzing the identified at least one rule for the identified requested action automatically and dynamically without human intervention, by a computing system processor, to identify the at least one attribute of at least the second computing system element used by the identified at least one rule to determine if the first computing system element is authorized to perform the requested action;
dynamically collecting, by a computing system processor without human intervention, the current value of the identified at least one attribute of at least the second computing system element that is used by the identified at least one rule for the identified requested action to determine if the first computing system element is authorized to perform the requested action;
dynamically and automatically determining in real time if the first computing system element is authorized to perform the requested action according to the identified at least one rule, by a computing system processor, without human intervention, analyzing the identified at least one rule for the identified requested action with at least the dynamically collected current value of the at least one attribute of the at least the second computing system element; and
completing, by the computing system, the requested action if a computing system processor automatically and dynamically without human intervention determines, by analyzing at least the one rule, that the first computing system element is authorized to perform the requested action.