Systems and methods for managing resource access permissions
AssigneeCapital One Services, LLC
InventorDominic Joseph Cannizzaro
Life of this patent
Estimating the term…
Abstract
Systems and methods for managing resource access permissions for users with unknown credentials are disclosed herein. A resource access request may be received. A measure of risk may be determined. In response to determining that a first access level is permitted, the first user identifier may be inserted in a first access control list. Based on information regarding resources accessed by the first user, an updated measure of risk may be determined. In response to determining that a second access level is permitted, the first user identifier may be inserted in a second access control list.
Claims20
A system for managing resource access permissions for users with unknown credentials, the system comprising:
- one or more processors;
- and
- a non-transitory, computer-readable medium storing instructions that, when executed by the one or more processors, cause operations comprising:
- receiving, from a first user, a resource access request for a system, wherein the resource access request comprises a first user identifier and a first access level requested by the first user;
- based on the first user identifier, determining a measure of risk associated with allocating resources to the first user;
- determining whether the first access level is permitted based on the measure of risk for the first user;
- in response to determining that the first access level is permitted, inserting the first user identifier in a first access control list from a plurality of access control lists, thereby causing the first user to have access to a first resource;
- at a subsequent time, receiving information regarding resources accessed by the first user;
- based on the received information, determining an updated measure of risk associated with allocating resources to the first user;
- determining whether a second access level is permitted based on the updated measure of risk for the first user, wherein the second access level provides access to a second resource in addition to the first resource;
- and
- in response to determining that the second access level is permitted, inserting the first user identifier in a second access control list from the plurality of access control lists, thereby causing the first user to have access to the second resource in addition to the first resource.
A method, the method comprising:
- receiving, by one or more processors and for a first user, a first access level permitted based on a measure of risk associated with allocating resources to the first user, wherein a first user identifier for the first user has been inserted in a first access control list from a plurality of access control lists, thereby causing the first user to have access to a first resource;
- based on information regarding resources accessed by the first user subsequent to the first user having access to the first resource, determining, by the one or more processors, an updated measure of risk associated with allocating resources to the first user;
- and
- in response to determining that a second access level is permitted based on the updated measure of risk for the first user, inserting, by the one or more processors, the first user identifier in a second access control list from the plurality of access control lists, thereby causing the first user to have access to a second resource in addition to the first resource.
A non-transitory, computer-readable medium comprising instructions that, when executed by one or more processors, cause operations comprising:
- receiving, for a first user, a first access level permitted based on a measure of risk associated with allocating resources to the first user, the first user having access to a first resource;
- based on information regarding resources accessed by the first user subsequent to the first user having access to the first resource, determining an updated measure of risk associated with allocating resources to the first user;
- and
- in response to determining that a second access level is permitted based on the updated measure of risk for the first user, causing the first user to have access to a second resource in addition to the first resource.
Dependencies are inferred from the claim text.