# US 11,451,515 B2 · Access rule management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,451,515 B2 - Document ID: US11451515B2 - Status: Granted - Kind: B2 - Application number: 16/911,277 - Filed: 2020-06-24 - Published: 2021-12-30 - Granted: 2022-09-20 - Earliest claimed: 2020-06-24 - Assignees: Visa International Service Association - Applicants: Visa International Service Association - Inventors: Benjamin Scott Boding; Christopher Holmes; Cory Siddens; Henry Wong - Web page: https://patentgrep.com/patent/US11451515B2 ## CPC - H04L 63/0263: {Rule management} - H04L 63/102: {Entity profiles} - G06Q 20/4016: {involving fraud or risk level assessment in transaction processing} - G06Q 20/405: {Establishing or using transaction specific rules} - H04L 63/101: {Access control lists [ACL]} - H04L 63/105: {Multiple levels of security} - H04L 63/108: {when the policy decisions are valid for a limited amount of time} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Techniques managing access rules are provided. Access rules and their associated profiles are determined for evaluation. A triggering rate or a triggering percentage can be used to indicate efficacy of the rule. Recommendations can be provided based on a triggering percentage difference of the rule during a predetermined period of time. The recommendations can be provided in an interactive user interface. ## Claims ### Claim 1 A method for managing a plurality of access rules performed by a computer device comprising a processor and a memory, the method comprising: receiving a first access rule from the plurality of access rules for evaluation; determining a first profile associated with the first access rule, loading the first access rule and the first profile into the memory; receiving a designated period of time for performing the evaluation of the first access rule; initializing a counter associated with the first access rule for the first profile, wherein the counter tracks a triggering of the first access rule for the first profile during the designated period of time, wherein the counter stores a counter value; receiving a plurality of access requests during the designated period of time; determining whether one or more of the plurality of access requests trigger the first access rule; incrementing the counter value for each instance that the first access rule is triggered by an access request of the plurality of access requests during the designated period of time; calculating a first trigger percentage for the first access rule based on the counter value of the first access rule during a first subset of time of the designated period of time; calculating a second trigger percentage for the first access rule based on the counter value of the first access rule during a second subset of time of the designated period of time; determining a trigger percentage difference between the first trigger percentage and the second trigger percentage; determining whether the trigger percentage difference is statistically significant; and providing a recommendation regarding the first access rule for the first profile in response to determining that the trigger percentage difference is statistically significant. ### Claim 2 (depends on 1) The method according to claim 1, wherein the trigger percentage difference is statistically significant when the trigger percentage difference is above a predetermined threshold. ### Claim 3 (depends on 1) The method according to claim 1, wherein when the trigger percentage difference is in within a first range, provide a recommendation to remove the first access rule. ### Claim 4 (depends on 3) The method according to claim 3, wherein when the trigger percentage difference is in within a second range that is less than the first range, provide a recommendation to check the first access rule. ### Claim 5 (depends on 4) The method according to claim 4, wherein when the trigger percentage difference is in within a third range that is less than the second range, provide a recommendation to accept the first access rule. ### Claim 6 (depends on 1) The method according to claim 1, wherein the recommendation comprises a report that is displayed on an interactive user interface. ### Claim 7 (depends on 6) The method according to claim 6, wherein the report identifies whether the first access rule should be removed, checked or accepted. ### Claim 8 (depends on 1) The method according to claim 1, wherein the first subset of time is earlier in time than the second subset of time. ### Claim 9 (depends on 1) The method according to claim 1, wherein the plurality of access requests are received in real time. ### Claim 10 (depends on 2) The method according to claim 2, wherein in response to determining that the trigger percentage difference is above the predetermined threshold, automatically removing the first access rule from the first profile. ### Claim 11 A server computer comprising: a processor; a memory; a computer readable medium coupled to the processor, the computer readable medium storing instructions executable by the processor for implementing a method comprising: receiving a first access rule from a plurality of access rules for evaluation; determining a first profile associated with the first access rule, loading the first access rule and the first profile into the memory; receiving a designated period of time for performing the evaluation of the first access rule; initializing a counter associated with the first access rule for the first profile, wherein the counter tracks a triggering of the first access rule for the first profile during the designated period of time, wherein the counter stores a counter value; receiving a plurality of access requests during the designated period of time; determining whether one or more of the plurality of access requests trigger the first access rule; incrementing the counter value for each instance that the first access rule is triggered by an access request of the plurality of access requests during the designated period of time; calculating a first trigger percentage for the first access rule based on the counter value of the first access rule during a first subset of time of the designated period of time; calculating a second trigger percentage for the first access rule based on the counter value of the first access rule during a second subset of time of the designated period of time; determining a trigger percentage difference between the first trigger percentage and the second trigger percentage; determining whether the trigger percentage difference is statistically significant; and providing a recommendation regarding the first access rule for the first profile in response to determining that the trigger percentage difference is statistically significant. ### Claim 12 (depends on 11) The server computer according to claim 11, wherein the trigger percentage difference is statistically significant when the trigger percentage difference is above a predetermined threshold. ### Claim 13 (depends on 11) The server computer according to claim 11, wherein when the trigger percentage difference is in within a first range, provide a recommendation to remove the first access rule. ### Claim 14 (depends on 13) The server computer according to claim 13, wherein when the trigger percentage difference is in within a second range that is less than the first range, provide a recommendation to check the first access rule. ### Claim 15 (depends on 14) The server computer according to claim 14, wherein when the trigger percentage difference is in within a third range that is less than the second range, provide a recommendation to accept the first access rule. ### Claim 16 A system for review of access rules, the system comprising: a server computer, comprising a processor and a memory, configured to: receive a first access rule from a plurality of access rules for evaluation; determine a first profile associated with the first access rule, load the first access rule and the first profile into the memory; receive a designated period of time for performing the evaluation of the first access rule; initialize a counter associated with the first access rule for the first profile, wherein the counter tracks a triggering of the first access rule for the first profile during the designated period of time, wherein the counter stores a counter value; receive a plurality of access requests during the designated period of time; determine whether one or more of the plurality of access requests trigger the first access rule; increment the counter value for each instance that the first access rule is triggered by an access request of the plurality of access requests during the designated period of time; calculate a first trigger percentage for the first access rule based on the counter value of the first access rule during a first subset of time of the designated period of time; calculate a second trigger percentage for the first access rule based on the counter value of the first access rule during a second subset of time of the designated period of time; determine a trigger percentage difference between the first trigger percentage and the second trigger percentage; determine whether the trigger percentage difference is statistically significant; and providing a recommendation regarding the first access rule for the first profile in response to determining that the trigger percentage difference is statistically significant. ### Claim 17 (depends on 16) The system according to claim 16, wherein the trigger percentage difference is statistically significant when the trigger percentage difference is above a predetermined threshold. ### Claim 18 (depends on 16) The system according to claim 16, wherein when the trigger percentage difference is in within a first range, provide a recommendation to remove the first access rule. ### Claim 19 (depends on 18) The system according to claim 18, wherein when the trigger percentage difference is in within a second range that is less than the first range, provide a recommendation to check the first access rule. ### Claim 20 (depends on 19) The system according to claim 19, wherein when the trigger percentage difference is in within a third range that is less than the second range, provide a recommendation to accept the first access rule.