Patent Document ID: 9846847
Application ID: 12760868

Base Claim:
1. A computer-implemented system for updating entitlements in real-time for controlling access to secured electronic resources of an organization, the system comprising: an organizational information system in communication with a plurality of organizational databases storing data associated with the organization; a plurality of entitlement engines, wherein each entitlement engine is associated with a corresponding application programmed to request access to at least one secured resource of the organization, and wherein each entitlement engine comprises: a set of business entitlement rules; and an associated entitlement database that stores associated entitlement data; wherein each entitlement engine is programmed to: receive an entitlement request from the corresponding application to access the at least one secured resource of the organization; and determine whether a first user using the corresponding application is entitled to access the at least one secured resource based on the associated entitlement data; a publication system programmed to publish event data associated with the organization in real time; an entitlement generator to update entitlement data of the plurality of entitlement engines in response to real time events, wherein the entitlement generator comprises: an event listener programmed to receive the real time event data from the publication system, wherein the real time event data indicates a change in a status of a system user comprising a change to at least one of: relationship data describing a relationship between the system user and a team; role data describing a job function assigned to the system user; or coverage data describing a scope of responsibility of the system user with respect to the job function associated with the system user; and a plurality of domain processors arranged for parallel processing of the real time event data, wherein each domain processor of the plurality of domain processors is associated with a corresponding domain, wherein each domain is associated with a corresponding entitlement engine of the plurality of entitlement engines, and wherein each domain processor comprises: a rules engine comprising a rule set including a set of business entitlement rules associated with the corresponding entitlement engine; and a transformation service programmed to: apply the real time event data to the rule set to create updated entitlement data for the corresponding entitlement engine; and communicate the updated entitlement data to the corresponding entitlement engine; wherein each entitlement engine is further programmed to: store the updated entitlement data in the associated entitlement database; and determine whether the first user using the corresponding application is entitled to access the at least one secured resource further based on the updated entitlement data.

---

Claim 2:
2. The system of claim 1 , wherein the publication system is programmed to transmit the event data to the entitlement generator, wherein the event data corresponds to events generated by the organizational information system.