Learning cognitive access control service
AssigneeServiceNow, Inc.
InventorsAshton Mozano, Mohamed Sofiane Talmat
Life of this patent
Estimating the term…
Abstract
An indication associated with a request to access a protected object by a subject is received. Using one or more processors, application level behavioral patterns of the subject, context of the request by the subject, usage patterns associated with the protected object, and a current system state are automatically analyzed using one or more machine learning models to determine an analysis result associated with whether to grant the subject access to the protected object. An access control mechanism for the protected object is automatically modified based on the analysis result.
Claims20
A method, comprising:
- receiving an indication associated with a request to access a protected object by a subject;
- using one or more processors to automatically analyze at least application level behavioral patterns of the subject, context of the request by the subject, usage patterns associated with the protected object, and a current system state using one or more machine learning models to determine an analysis result associated with whether to grant the subject access to the protected object, wherein the analysis result includes a plurality of predicted consequential effects of the access of the protected object determined using at least a portion of the one or more machine learning models;
- and
- automatically modifying an access control mechanism for the protected object based on the analysis result including the plurality of predicted consequential effects determined using at least a portion of the one or more machine learning models.
A system, comprising:
- one or more processors;
- and
- a memory coupled to the one or more processors, wherein the memory is configured to provide the one or more processors with instructions which when executed cause the one or more processors to:
- receive an indication associated with a request to access a protected object by a subject;
- automatically analyze at least application level behavioral patterns of the subject, context of the request by the subject, usage patterns associated with the protected object, and a current system state using one or more machine learning models to determine an analysis result associated with whether to grant the subject access to the protected object, wherein the analysis result includes a plurality of predicted consequential effects of the access of the protected object determined using at least a portion of the one or more machine learning models;
- and
- automatically modify an access control mechanism for the protected object based on the analysis result including the plurality of predicted consequential effects determined using at least a portion of the one or more machine learning models.
A non-transitory computer readable storage medium comprising computer instructions for:
- receiving an indication associated with a request to access a protected object by a subject;
- automatically analyzing at least application level behavioral patterns of the subject, context of the request by the subject, usage patterns associated with the protected object, and a current system state using one or more machine learning models to determine an analysis result associated with whether to grant the subject access to the protected object, wherein the analysis result includes a plurality of predicted consequential effects of the access of the protected object determined using at least a portion of the one or more machine learning models;
- and
- automatically modifying an access control mechanism for the protected object based on the analysis result including the plurality of predicted consequential effects determined using at least a portion of the one or more machine learning models.
Dependencies are inferred from the claim text.