# US 10,372,927 B2 · Strong confirmation mechanism for manipulation of sensitive configuration data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,372,927 B2 - Document ID: US10372927B2 - Status: Granted - Kind: B2 - Application number: 15/234,341 - Filed: 2016-08-11 - Published: 2018-02-15 - Granted: 2019-08-06 - Earliest claimed: 2016-08-11 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Robert J. Wallis; James D. Whitaker - Web page: https://patentgrep.com/patent/US10372927B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 2221/2133: Verifying human interaction, e.g., Captcha - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Pursuant to issuing a confirmation prompt to confirm an intention to perform a data management function in a computing environment, a processor device determines by a decision engine, a complexity strength of the confirmation prompt based upon a complexity algorithm. ## Claims ### Claim 1 A method for managing data security in a computing environment, by a processor device, comprising: pursuant to issuing a confirmation prompt to confirm an intention to perform a data management function, determining by a decision engine, a complexity strength of the confirmation prompt based upon a complexity algorithm; wherein the confirmation prompt requires a user to input at least one alphanumeric character associated with a subject of the data management function, as determined by the decision engine and based upon the complexity algorithm, prior to performing the data management function; increasing the complexity strength of the confirmation prompt upon determining, by the complexity algorithm, a similarity of a data name associated with the subject of the data management function is above a baseline threshold when compared to an alternative data name subject to the data management function; and upon successful completion of the input of the at least one alphanumeric character associated with the subject of the data management function according to the complexity strength, performing the data management function. ### Claim 2 (depends on 1) The method of claim 1, further including determining the complexity strength of the confirmation prompt, by the complexity algorithm, pursuant to accounting for an administrative access role of the user. ### Claim 3 (depends on 1) The method of claim 1, further including determining the complexity strength of the confirmation prompt, by the complexity algorithm, pursuant to at least one of a plurality of metrics together comprising an experience level of the user. ### Claim 4 (depends on 3) The method of claim 3, wherein the metrics include at least one of a historical activity metric, a length of service metric, a currency of account metric, a trust metric, and a diligence metric. ### Claim 5 (depends on 1) The method of claim 1, further including, upon determining the complexity strength by the complexity algorithm, returning the confirmation prompt to the user by the decision engine. ### Claim 6 A system for managing data security in a computing environment, the system comprising: at least one processor device, wherein the at least one processor device: pursuant to issuing a confirmation prompt to confirm an intention to perform a data management function, determines by a decision engine, a complexity strength of the confirmation prompt based upon a complexity algorithm; wherein the confirmation prompt requires a user to input at least one alphanumeric character associated with a subject of the data management function, as determined by the decision engine and based upon the complexity algorithm, prior to performing the data management function; increases the complexity strength of the confirmation prompt upon determining, by the complexity algorithm, a similarity of a data name associated with the subject of the data management function is above a baseline threshold when compared to an alternative data name subject to the data management function; and upon successful completion of the input of the at least one alphanumeric character associated with the subject of the data management function according to the complexity strength, performs the data management function. ### Claim 7 (depends on 6) The system of claim 6, wherein the at least one processor device determines the complexity strength of the confirmation prompt, by the complexity algorithm, pursuant to accounting for an administrative access role of the user. ### Claim 8 (depends on 6) The system of claim 6, wherein the at least one processor device determines the complexity strength of the confirmation prompt, by the complexity algorithm, pursuant to at least one of a plurality of metrics together comprising an experience level of the user. ### Claim 9 (depends on 8) The system of claim 8, wherein the metrics include at least one of a historical activity metric, a length of service metric, a currency of account metric, a trust metric, and a diligence metric. ### Claim 10 (depends on 6) The system of claim 6, wherein the at least one processor device, upon determining the complexity strength by the complexity algorithm, returning the confirmation prompt to the user by the decision engine. ### Claim 11 A computer program product for managing data security in a computing environment by at least one processor device, the computer program product embodied on a non-transitory computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising: an executable portion that, pursuant to issuing a confirmation prompt to confirm an intention to perform a data management function, determines by a decision engine, a complexity strength of the confirmation prompt based upon a complexity algorithm; wherein the confirmation prompt requires a user to input at least one alphanumeric character associated with a subject of the data management function, as determined by the decision engine and based upon the complexity algorithm, prior to performing the data management function; an executable portion that increases the complexity strength of the confirmation prompt upon determining, by the complexity algorithm, a similarity of a data name associated with the subject of the data management function is above a baseline threshold when compared to an alternative data name subject to the data management function; and an executable portion that, upon successful completion of the input of the at least one alphanumeric character associated with the subject of the data management function according to the complexity strength, performs the data management function. ### Claim 12 (depends on 11) The computer program product of claim 11, further including an executable portion that determines the complexity strength of the confirmation prompt, by the complexity algorithm, pursuant to accounting for an administrative access role of the user. ### Claim 13 (depends on 11) The computer program product of claim 11, further including an executable portion that determines the complexity strength of the confirmation prompt, by the complexity algorithm, pursuant to at least one of a plurality of metrics together comprising an experience level of the user. ### Claim 14 (depends on 13) The computer program product of claim 13, wherein the metrics include at least one of a historical activity metric, a length of service metric, a currency of account metric, a trust metric, and a diligence metric. ### Claim 15 (depends on 11) The computer program product of claim 11, further including an executable portion that, upon determining the complexity strength by the complexity algorithm, returning the confirmation prompt to the user by the decision engine.