Patent ID: 9747581
Date: 2017-08-29
CPC Classifications: G06Q,H04L

Claim:
1. A computer readable non-transitory article of manufacture tangibly embodying computer readable instructions which, when executed, cause a computer device to carry out the steps of a method comprising: receiving a request to create a business rule for controlling a transaction with a cloud computing environment for an organization; providing an instance of the cloud computing environment for provisioning the business rule by generating a partitioned graph representing the organization and the business rule, wherein the business rule includes one or more separation of duties requirements and wherein the partitioned graph representing the organization comprises: a plurality of nodes that each represent a resource of the organization; and a plurality of linkages that each connect two of the plurality of nodes, wherein each of the plurality of linkages includes a threshold confidence level, which is a minimum confidence level required such that request access between the plurality of nodes does not violate the one or more separation of duties requirements; determining a use context associated with the partitioned graph based on the one or more separation of duties requirements; responsive to a blocking action, determining one or more confidence levels associated with the blocking action related to the use context, wherein the blocking action is indicative that the use context violates one of the one or more separation of duties requirements, wherein determining includes comparing the one or more confidence levels associated with the blocking action to the threshold confidence level associated with one or more of the plurality of linkages that correspond to the use context; creating a context-dependent firewall based on the one or more confidence levels associated with the blocking action; monitoring one or more new blocking actions; determining one or more confidence levels associated with the one or more new blocking actions related to the use context, wherein the one or more new blocking actions are indicative that the use context violates one of the one or more separation of duties requirements, wherein determining includes comparing the one or more confidence levels associated with the one or more new blocking actions to the threshold confidence level associated with the one or more of the plurality of linkages that correspond to the use context; and responsive to the determination of one or more confidence levels associated with the one or more new blocking actions related to the use context, updating the context-dependent firewall.