US 10,454,971 B2Granted

Managing privileged system access based on risk assessment

AssigneeInternational Business Machines Corporation

InventorsEwan Chalmers, Eileen Hayes, Michael J. Landers, Richard O'Mahony, Thierry Supplisson

Life of this patent

Estimating the term…

Loading patent…

Abstract

Managing privileged system access may be performed by a risk management system controlling user access privilege to production systems. One example method of operation may provide at least one of detecting an insecure user action at a user device, reducing an access privilege of a user profile associated with the user device to one or more privileged production servers, providing the user device with an application based on the insecure user action, determining that an outcome associated with the application has been achieved, and re-instating the access privilege of the user profile.

Claims24

Dependent claims

A method, comprising:

detecting an insecure computing action via a user device;
in response to detecting the insecure computing action, temporarily restricting one or more computing operations of the user device, determining a target set of training items based on a type of the detected insecure computing action and how active a user profile of the user device is on a host system accessed by the user device, and requesting a training session including the target set of training items via the user device, wherein the determining comprises determining how focused the target set of training items are with respect to the type of detected insecure computing action based on an age of the user profile;
automatically determining, via the user device, that the training session tailored to the insecure computing action is completed;
and
re-instating the one or more temporarily restricted computing operations of the user device in response to the training being completed.

2 more elements

A system, comprising:

a network interface configured to receive a notification indicating an insecure computing action is detected at a user device;
and
a processor device configured to temporarily restrict one or more computing operations of the user device, determine a target set of training items based on a type of the detected insecure computing action and how active a user profile of the user device is on a host system accessed by the user device, and automatically request a training session including the target set of training items via the user device, in response to the insecure computing action being detected, wherein the processor determines how focused the target set of training items are with respect to the type of detected insecure computing action based on an age of the user profile,
wherein the processor device is further configured to automatically determine, via the user device, that the training session tailored to the insecure computing action is completed, and re-instate the one or more temporarily restricted computing operations of the user device in response to the training being completed.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 15/258,310Filed 7 Sep 2016
Published: US 2018/0069866 A18 Mar 2018
Granted: 22 Oct 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
G06F 21/554
Detecting local intrusion or implementing counter-measures: involving event detection and direct action
H04L 63/105
For controlling access to devices or network resources: multiple levels of security
H04L 63/1433
For detecting or protecting against malicious traffic: vulnerability analysis

Family

US 2018/0069866 A1Pre-grant publication · published 8 Mar 2018
US 10,454,971 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key