Abstract:
A method to authenticate an identity of a responder. The method includes receiving a request and determining, by one or more computer processors, a reviewer for the request. A custom key is generated for the reviewer and the request, and at least one URL is generated that contains the custom key. At least one URL is sent, along with the request, to the reviewer. Upon receiving a response to the request that includes a selection of one URL, it is determined whether the response was received from the determined reviewer for the request.

Description:
FIELD OF THE INVENTION 
       [0001]    The present invention relates generally to the field of change management, and more particularly to authenticating a response to a change request. 
       BACKGROUND 
       [0002]    Change management is a project management process where changes to a project are formally introduced and approved or rejected. The objective of change management is to ensure that standardized methods and procedures are used for efficient and prompt handling of all changes to control IT infrastructure, in order to minimize the number and impact of any related incidents upon service. Change management can ensure standardized methods, processes and procedures which are used for all changes, facilitate efficient and prompt handling of all changes, and maintain the proper balance between the need for change and the potential detrimental impact of changes. 
         [0003]    A change is an event that is approved by management, implemented with a minimized and accepted risk to existing IT infrastructure, and provides increased value to the business from the use of the new or enhanced IT systems. A change request is a document containing a call for a change. Change requests typically originate from one of five sources: problem reports that identify bugs that must be fixed, system enhancement requests from users, events in the development of other systems, changes in underlying structure and/or standards, and demands from senior management. An important attribute of change requests is the “approve or reject” decision. Any proposed change must be approved in the change management process before any change can be carried out. 
       SUMMARY 
       [0004]    Embodiments of the present invention provide a method, computer system, and computer program product to authenticate an identity of a responder. The method includes receiving a request for a change to a project and determining, by one or more computer processors, a reviewer for the request. The method includes generating a custom key for the reviewer and the request, and generating at least one Uniform Resource Locator (URL) containing the custom key. The method includes sending the at least one URL and the request to the reviewer. The method includes receiving a response to the request that includes a selection of one of the at least one URLs. The method further includes determining, by one or more computer processors, the response was received from the reviewer determined for the request. 
     
    
     
       BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS 
         [0005]      FIG. 1  is a functional block diagram illustrating a change management environment, in accordance with an embodiment of the present invention. 
           [0006]      FIG. 2  is a flowchart depicting operational steps of the change request program of  FIG. 1 , in accordance with an embodiment of the present invention. 
           [0007]      FIG. 3  depicts a block diagram of components of the server computer of  FIG. 1 , in accordance with an embodiment of the present invention. 
       
    
    
     DETAILED DESCRIPTION 
       [0008]    As will be appreciated by one skilled in the art, aspects of the present invention may be embodied as a system, method or computer program product. Accordingly, aspects of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment (including firmware, resident software, micro-code, etc.) or an embodiment combining software and hardware aspects that may all generally be referred to herein as a “circuit,” “module” or “system.” Furthermore, aspects of the present invention may take the form of a computer program product embodied in one or more computer-readable medium(s) having computer readable program code/instructions embodied thereon. 
         [0009]    Any combination of computer-readable media may be utilized. Computer-readable media may be a computer-readable signal medium or a computer-readable storage medium. A computer-readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of a computer-readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer-readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. 
         [0010]    A computer-readable signal medium may include a propagated data signal with computer-readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer-readable signal medium may be any computer-readable medium that is not a computer-readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. 
         [0011]    Program code embodied on a computer-readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing. 
         [0012]    Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java®, Smalltalk, C++ or the like and conventional procedural programming languages, such as the “C” programming language or similar programming languages. The program code may execute entirely on a user&#39;s computer, partly on the user&#39;s computer, as a stand-alone software package, partly on the user&#39;s computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user&#39;s computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider). 
         [0013]    Aspects of the present invention are described below with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. 
         [0014]    These computer program instructions may also be stored in a computer-readable medium that can direct a computer, other programmable data processing apparatus, or other devices to function in a particular manner, such that the instructions stored in the computer-readable medium produce an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks. 
         [0015]    The computer program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer-implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks. 
         [0016]    Embodiments of the present invention will now be described in detail with reference to the accompanying drawings.  FIG. 1  is a functional block diagram illustrating a change management environment, generally designated  100 , in accordance with an embodiment of the present invention. 
         [0017]    Change management environment  100  includes server computer  110 , user computer  120  and reviewer computer  130 , all interconnected over network  140 . 
         [0018]    Server computer  110  may be a laptop computer, tablet computer, netbook computer, personal computer (PC), a desktop computer, a personal digital assistant (PDA), a smart phone, or any programmable electronic device capable of communicating with user computer  120  and reviewer computer  130  via network  140 . Server computer  110  includes change request program  112  for identifying and authenticating change request reviewers and verifying that change request selections are made by the identified change request reviewers. 
         [0019]    User computer  120  and reviewer computer  130  may be laptop computers, tablet computers, netbook computers, personal computers (PC), desktop computers, personal digital assistants (PDA), smart phones or any programmable devices capable of communication with each other and with server computer  110  via network  140 . User computer  120  includes user interface (UI)  122  and reviewer computer  130  includes UI  132 . UI  122  and UI  132  each provide an interface that can display text and user options to an operator of user computer  120  and reviewer computer  130 , respectively. UI  122  and UI  132  may each be, for example, a web user interface (WUI) or a graphical user interface (GUI). 
         [0020]    Network  140  can be, for example, a local area network (LAN), a wide area network (WAN) such as the Internet, or a combination of the two, and can include wired, wireless, or fiber optic connections. In general, network  140  can be any combination of connections and protocols that will support communications between server computer  110 , user computer  120  and reviewer computer  130 . 
         [0021]    Change request program  112  identifies change request reviewers for change requests received from a user of user computer  120  and generates one time use custom approval keys that are unique for the identified reviewer and the received change request. Change request reviewers may be management, executives, or any other person within change management environment  100  with pre-authorization for change request review. Change request program  112  generates approval and rejection Uniform Resource Locators (URLs) that include the custom approval key for the identified reviewer and change request. The generated URLs are sent to the identified reviewers&#39; pre-authorized computing device, for example, reviewer computer  130 . Upon receiving a response selecting either the approval or the rejection URL, change request program  112  determines whether the approval key included in the selected URL exists and matches the identified reviewer for the received change request. Change request program  112  determines whether the URL selection was received from one of the identified reviewers pre-authorized computing devices. 
         [0022]      FIG. 2  is a flowchart depicting operational steps of the change request program of  FIG. 1  for identifying and authenticating change request reviewers and verifying that change request selections are made by the identified change request reviewers, in accordance with an embodiment of the present invention. 
         [0023]    Change request program  112  receives a change request (step  202 ). Change requests are sent by a user of user computer  120  and may include details such as requester identification, change type, and change description. Each change request includes an option for a reviewer to approve or reject the requested change. 
         [0024]    Change request program  112  identifies reviewers for the received change request (step  204 ), based on the details of the change request, for example, the type of change or the department to which the change request may apply. Identified reviewers are pre-authorized to review change requests and may be an individual or a team. 
         [0025]    Change request program  112  generates approval keys for the identified reviewers (step  206 ). In the case of a team, an approval key is generated for each reviewer. The generated approval keys are customized for each identified reviewer so the approval key may be matched to the identified reviewer for the received change request in order to verify change request selections. Generated approval keys may be, for example, a series of numbers and letters unique to the identified reviewer. 
         [0026]    Change request program  112  generates approval and rejection Uniform Resource Locators (URLs) embedded with both change request numbers and approval keys (step  208 ). The URLs are distinct for each reviewer and change request. When the identified reviewers include a team, distinct URLs are generated for each reviewer on the team that include each reviewer&#39;s custom approval key. 
         [0027]    Change request program  112  sends the approval and rejection URLs, via network  140 , to each identified reviewer with the details of the received change request (step  210 ). The details, for example, change type and description, provide the reviewer with information necessary to decide whether to approve or reject the requested change. In a preferred embodiment of the present invention, the approval and rejection URLs and the change request details are sent to the identified reviewers in an email message. 
         [0028]    Change request program  112  receives a URL selection (step  212 ). The selection may be either an approval of the change or a rejection of the change request, based on which of the sent URLs is chosen. In an embodiment of the present invention, for example, if an approval URL is selected, the relevant data included in the URL, e.g. the generated approval key and the change request number, is processed by and transmitted to a server computer, for example, server computer  110 . 
         [0029]    Change request program  112  determines whether the approval key in the selected URL matches the identified reviewer (decision block  214 ). If the approval key in the selected URL does not match the identified reviewer (decision block  214 , no branch), the selection is denied (step  218 ). If the approval key in the selected URL does correspond to the identified reviewer (decision block  214 , yes branch), change request program  112  requests an authentication file (step  216 ). Each reviewer&#39;s computing device in change management environment  100 , for example, reviewer computer  130 , is pre-authorized and known to be used by a specific reviewer. The authentication file for verification of an authorized device may be, for example, an encrypted browser cookie. When a reviewer logs in to a computing device within change management environment  100 , an encrypted file can be created and stored on the device, which allows the computing device to be associated with and pre-authorized for that reviewer. A reviewer may have more than one computing device pre-authorized within change management environment  100 . 
         [0030]    Change request program  112  determines whether the authentication file received from a computing device is associated with the identified reviewer (decision block  220 ). If the authentication file does not match one of the identified reviewer&#39;s computing devices (decision block  220 , no branch), the selection is denied (step  218 ). Denial may occur, for example, if the identified reviewer has opened a message with the sent URL on another person&#39;s computing device. 
         [0031]    If the authentication file received does match one of the identified reviewer&#39;s computing devices (decision block  220 , yes branch), the approval key in the selected URL is removed from the change management system (step  222 ). Approval keys are removed to ensure that the URL sent to an identified reviewer cannot be manipulated for future change requests and used again. When a URL selection received from a reviewer on a team is authenticated, the remaining approval keys generated for that team are removed. Only one reviewer on a team may approve or reject a change. Change request program  112  records the change as either approved or rejected (step  224 ). 
         [0032]      FIG. 3  depicts a block diagram of components of server computer  110 , in accordance with an illustrative embodiment of the present invention. It should be appreciated that  FIG. 3  provides only an illustration of one implementation and does not imply any limitations with regard to the environments in which different embodiments may be implemented. Many modifications to the depicted environment may be made. 
         [0033]    Server computer  110  includes communications fabric  302 , which provides communications between computer processor(s)  304 , memory  306 , persistent storage  308 , communications unit  310 , and input/output (I/O) interface(s)  312 . Communications fabric  302  can be implemented with any architecture designed for passing data and/or control information between processors (such as microprocessors, communications and network processors, etc.), system memory, peripheral devices, and any other hardware components within a system. For example, communications fabric  302  can be implemented with one or more buses. 
         [0034]    Memory  306  and persistent storage  308  are computer-readable storage media. In this embodiment, memory  306  includes random access memory (RAM)  314  and cache memory  316 . In general, memory  306  can include any suitable volatile or non-volatile computer-readable storage media. 
         [0035]    Change request program  112  is stored in persistent storage  308  for execution by one or more of the respective computer processors  304  via one or more memories of memory  306 . In this embodiment, persistent storage  308  includes a magnetic hard disk drive. Alternatively, or in addition to a magnetic hard disk drive, persistent storage  308  can include a solid state hard drive, a semiconductor storage device, read-only memory (ROM), erasable programmable read-only memory (EPROM), flash memory, or any other computer-readable storage media that is capable of storing program instructions or digital information. 
         [0036]    The media used by persistent storage  308  may also be removable. For example, a removable hard drive may be used for persistent storage  308 . Other examples include optical and magnetic disks, thumb drives, and smart cards that are inserted into a drive for transfer onto another computer-readable storage medium that is also part of persistent storage  308 . 
         [0037]    Communications unit  310 , in these examples, provides for communications with other data processing systems or devices, including user computer  120  and reviewer computer  130 . In these examples, communications unit  310  includes one or more network interface cards. Communications unit  310  may provide communications through the use of either or both physical and wireless communications links. Change request program  112  may be downloaded to persistent storage  308  through communications unit  310 . 
         [0038]    I/O interface(s)  312  allows for input and output of data with other devices that may be connected to server computer  110 . For example, I/O interface  312  may provide a connection to external devices  318  such as a keyboard, keypad, a touch screen, and/or some other suitable input device. External devices  318  can also include portable computer-readable storage media such as, for example, thumb drives, portable optical or magnetic disks, and memory cards. Software and data used to practice embodiments of the present invention, e.g., change request program  112 , can be stored on such portable computer-readable storage media and can be loaded onto persistent storage  308  via I/O interface(s)  312 . I/O interface(s)  312  also connect to a display  320 . Display  320  provides a mechanism to display data to a user and may be, for example, a computer monitor or an incorporated display screen, such as is used in table computers and smart phones. 
         [0039]    The programs described herein are identified based upon the application for which they are implemented in a specific embodiment of the invention. However, it should be appreciated that any particular program nomenclature herein is used merely for convenience, and thus the invention should not be limited to use solely in any specific application identified and/or implied by such nomenclature. 
         [0040]    The flowcharts and block diagrams in the Figures illustrate the architecture, functionality, and operations of possible implementations of systems, methods, and computer program products according to various embodiments of the present invention. However, numerous modifications and substitutions can be made without deviating from the scope of the present invention. Such modifications and substitutions that may be apparent to a person skilled in the art of the invention are intended to be included within the scope of the invention as defined by the accompanying claims. In this regard, each block in the flowcharts or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the blocks may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustrations, and combinations of blocks in the block diagrams and/or flowchart illustrations, can be implemented by special purpose hardware-based systems that perform the specified functions or acts, or combinations of special purpose hardware and computer instructions. The foregoing description is not intended to be exhaustive nor to limit the invention to the precise form disclosed. Therefore, the present invention has been disclosed by way of example and not limitation.