Abstract: The technology disclosed herein enables removal of unused access privileges for data environments based on usage. In a particular example, a method provides accessing audit logs for a plurality of data environments. The audit logs indicate which permissions were used for the plurality of data environments during and corresponding times in which the permissions were used. The method also provides aggregating the permissions into timeframes based on the corresponding times and tracking, in a database, a number of times each of the permissions was used in each of the timeframes. In response a one of the permissions satisfying a usage threshold, the method provides removing the one of the permissions.

Abstract: The technology disclosed herein enables control of permissions to access resources of data environments based on business requirements. In a particular example, a method provides determining a high-level requirement for access to data environments and defining an access policy that maps to the high-level requirement. The method further provides generating one or more rules to implement the access policy and enforcing the rules on access requests to the data environments to satisfy the high-level requirement.

Abstract: The technology disclosed herein enables automated approval and denial of access decisions responsive to access requests to data environments. In a particular example, a method provides obtaining access decisions responsive to access requests to a plurality of data environments. The method provides determining, based on baseline rules, a subset of the access decisions that should be rejected. The method further provides receiving user input indicating additional ones of the access decisions for inclusion in the subset and determining a new access-review rule based on the user input.

Abstract: The technology disclosed herein accelerates traversal of a privilege graph indicating access permissions to resources of data environments. In a particular example, a method provides identifying a first node type of a start node of a plurality of nodes in a privilege graph and a second node type of an end node of the plurality of nodes. The privilege graph indicates access privileges for a plurality of users to features of a plurality of data environments. The method also provides identifying one or more possible paths between the first node type and the second node type based on a schema of the privilege graph and traversing the plurality of nodes from the start node to the end node while ignoring paths that are not included in the one or more possible paths.

Abstract: A telecommunications network (10) includes a gateway (18) receiving signaling information in a media gateway and call session control format from a Class 5 softswitch (26). The gateway (18) converts the media gateway and call session control format to a broadband loop emulation service signaling protocol for transfer to integrated access devices (20) at a customer premises (22) through a broadband loop emulation services network (14). The gateway (18) also receives signal information in a broadband loop emulation service signaling protocol from the integrated access devices (20) through the broadband loop emulation services network (14). The gateway (18) converts the broadband loop emulation service signaling protocol to the media gateway and call session control format for transfer to the Class 5 softswitch (26). The Class 5 softswitch (26) places the media gateway and call session control format into a network signal format for transfer over a signaling network (24).

Abstract: A system for providing lifeline telecommunication service includes a gateway, an analog signal service module, and an integrated access device. The gateway receives telecommunication information from a telecommunication switch and generates data packets for communicating the telecommunication information. The analog signal service module is remotely coupled to the gateway. The analog signal service module may receive the data packets from the gateway and generate a first analog telephone signal for communicating the telecommunication information over a local loop circuit. Coupled to the local loop circuit, the integrated access device may receive the first analog telephone signal from the analog signal service module and communicate the first analog telephone signal to a subscriber line in a first mode of operation.

Abstract: A telecommunications network (10) includes a gateway (18) that receives signaling information in a message based signaling format from a Class 5 softswitch (26). The gateway (18) also receives voice traffic over an inter-machine trunk from a public switched telephone network (12). The gateway (18) places the voice traffic into data packets. The gateway (18) transfers the data packets and the signaling information to an Internet Protocol network (30). The data packets and the signaling information may be transferred over a common physical link and over separate logical links.