Patent ID: 8881299

Claim:
A system comprising: a memory device having stored therein information regarding a plurality of entitlement- eligible entities and information regarding one or more entitlements currently associated with each entitlement-eligible entity; and a processing device in communication with the memory device, wherein the processing device: receives information regarding entitlement-eligible entities within the organization, wherein entitlement includes access rights to resources within the entity; determines different communities of entitlement-eligible entities based on a review of the entitlements currently associated with at least some of the entitlement-eligible entities; selects a plurality of combinations of two entitlement-eligible entities from the plurality of entitlement-eligible entities; determines for each of the selected plurality of combinations of two entitlement-eligible entities a correlation number, wherein the correlation number indicates how well the entitlements associated with one entitlement-eligible entity of a combination of two entitlement-eligible entities correlate to the entitlements associated with the other entitlement-eligible entity of the combination of two entitlement-eligible entities, wherein the correlation number for the combination of two entitlement-eligible entities is computed as a function of a number of entitlements that the two entitlement-eligible entities have in common and a number of entitlements that the two entitlement-eligible entities do not have in common; determines a community of entitlement-eligible entities based on the review of the one or more entitlements that each entitlement-eligible entity has in common with the other of the plurality of entitlement-eligible entities; receives information about members of a new community; calculates how well each of the entitlement-eligible entities in the organization correlates with the new community; selects one or more entitlement-eligible entities that correlate with the new community above a pre-determined threshold; adds the one or more entitlement-eligible entities in the organization to the new community based on the one or more entitlement-eligible entities correlating with the new community; determines an extent to which the new community has uncommon entitlements in the community, wherein determining the extent to which the new community has uncommon entitlements is based on determining an infection rate that is a number or percentage of uncommon entitlements existing in the new community; compares the infection rate of the new community with an infection rate of at least one other community; and distributes new entitlements to the new community based on entitlements determined to be normal entitlements amount the new community, wherein the distribution is based on the infection rate of the new community.