Back to results
US 2014/0373104 A1Published application
Data sensitivity based authentication and authorization
AssigneeVisa International Service Association
InventorsAjit Gaddam, Selim Aissi, Taeho Kgil
Life of this patent
Estimating the term…
Abstract
Systems, devices, apparatuses, and methods of the present invention distribute authentication across multiple users. A data sensitivity model can define the sensitivity of different types of data. When an application requests access to a particular data item, the sensitivity of that data item can be determined. If the data item has a low sensitivity, access to the data item can be granted. If the data item has a high sensitivity, the system can request authentication before granting access to the data item.
Claims20
A method comprising:
- receiving, by a computing device including one or more processors, a request to access data;
- determining, by the computing device, a data sensitivity level associated with the data, wherein the data sensitivity level is determined by analyzing a plurality of security inputs using a decision model;
- determining, by the computing device, an authentication level associated with the request;
- comparing, by the computing device, the data sensitivity level to the authentication level;
- and
- based on a response to the authentication request, providing or denying access to the data.
3 more elements
A computing device, comprising:
- one or more processors;
- and
- a data sensitivity module executing on the one or more processors, wherein the data sensitivity module is configured to:
- receive a request to access data;
- determine a data sensitivity level associated with the data;
- determine an authentication level associated with the request;
- compare the data sensitivity level to the authentication level;
- and
- based on a response to the authentication request, provide or deny access to the data.
6 more elements
A method comprising:
- receiving a request to register through an application executing on a computing device;
- presenting one or more predefined security profiles;
- receiving a selection of a predefined security profile and one or more customizations;
- and
- registering the requestor with a custom security profile based on the predefined security profile.
2 more elements
Dependencies are inferred from the claim text.