Verifying the Terms of Use for Access to a Service
AssigneeInternational Business Machines Corporation
InventorsTaku Aratsu, Daisuke Hayashi, Tomohiro Shimizu
Life of this patent
Estimating the term…
Abstract
Provided are techniques in which a document accompanying a service is acquired, a natural language analysis is per on the acquired document, a determination is made from the results of the natural language analysis whether an item defined in the access control policy is found in the acquired document and, when the item defined in the access control policy is found in the acquired document, the access control policy is referenced and access to the service controlled accordingly.
Claims19
A method for controlling access to a service provided by a first computing device, using computer processing, the method comprising:
- acquiring, by a second computing device, a document provided by the first computing device, wherein the document comprises specified conditions required for access to the service;
- performing, by the second computing device, natural language analysis on the acquired document, the natural language, processing comprising:
- annotating a term in the document with an attribute value;
- and
- matching the attribute value with an attribute value of an access control policy;
- determining, by the second computing device, from the results of the natural language analysis that an item defined in the access control policy is in the acquired document;
- and
- refusing, by the second computing device, the service in response to the determining.
An apparatus for controlling access to a service provided by a first computing device using computer processing, the method comprising:
- a processor coupled to a second computing device requesting a service from the first computing device;
- a non-transitory computer-readable recording medium coupled to the processor;
- and
- logic, stored on the computer-readable recording medium and executed on the processor, for:
- acquiring, by the second computing device, a document provided by the first computing device, wherein the document comprises specified conditions required for access to the service;
- performing, by the second computing device, natural language analysis on the acquired document, the natural language processing comprising:
- annotating a term in the document with an attribute value;
- and
- matching the attribute value with an attribute value of an access control policy;
- determining, by the second computing device, from the results of the natural language analysis that an item defined in the access control policy is in the acquired document;
- and
- refusing access by the second computing device to the service on the. first computing device in. response to the determining,
A computer programming product for controlling access to a service using computer processing, the computer programming product comprising:
- a non-transitory computer-readable recording medium;
- and
- logic, stored on the computer-readable recording medium for execution on a processor coupled to a first computing device requesting a service from a second computing device, for:
- acquiring, by the first computing device, a document provided by the second computing device, wherein the document comprises specified conditions required for access to the service;
- performing, by the first computing device, natural language analysis on the acquired document, the natural language processing comprising:
- annotating a term in the document with an attribute value;
- and
- matching the attribute value with an attribute value of an access control policy;
- determining, by the first computing device, from the results of the natural language analysis that an item defined in the access control policy is in the acquired document;
- and
- refusing access by the first computing device to the service on the second computing device in response to the determining.
Dependencies are inferred from the claim text.