Patent ID: 11936653
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 9:
10. A computer system for access control, comprising:
one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising:
retrieving accesses granted to one or more subjects, wherein the accesses are granted according to one or more policies based on one or more attributes of the one or more subjects;
calculating a relevance indicator for each of the one or more attributes, wherein one or more relevance indicators are calculated based on a comparison of an access type granted to the one or more subjects and the one or more attributes of the one or more subjects;
creating one or more virtual groups by selecting at least one of the one or more attributes belonging to each of the one or more subjects with a same access type, wherein the at least one of the one or more attributes is selected based on the relevance indicator calculated for each of the one or more attributes;
assigning a label, using a linguistic engine, to each of the one or more virtual groups, wherein the linguistic engine searches a dictionary repository or interrogates one or more remote services based on each of the one or more attributes; and
displaying a review window to a reviewer, the review window being comprised of a list of a plurality of subjects, a corresponding assigned label, and a list of the access types granted to each of the plurality of subjects.