Managing privileged system access based on risk assessment
AssigneeInternational Business Machines Corporation
InventorsEwan Chalmers, Eileen Hayes, Michael J. Landers, Richard O'Mahony, Thierry Supplisson
Life of this patent
Estimating the term…
Abstract
Managing privileged system access may be performed by a risk management system controlling user access privilege to production systems. One example method of operation may provide at least one of detecting an insecure user action at a user device, reducing an access privilege of a user profile associated with the user device to one or more privileged production servers, providing the user device with an application based on the insecure user action, determining that an outcome associated with the application has been achieved, and re-instating the access privilege of the user profile.
Claims25
A method, comprising:
- temporarily restricting one or more computing operations of a user device based on an insecure computing action;
- requesting a training session including a target set of training items, via the user device, based on a type of the insecure computing action and an age of a user profile of the user device;
- and
- re-instating the temporarily restricted one or more computing operations of the user device in response to the training session being completed.
A system, comprising:
- a processor device configured to temporarily restrict one or more computing operations of a user device, determine a target set of training items based on a type of the detected insecure computing action and how active a user profile of the user device is on a host system accessed by the user device, and automatically request a training session including the target set of training items via the user device, in response to the insecure computing action being detected, wherein the processor determines how focused the target set of training items are with respect to the type of detected insecure computing action based on an age of the user profile,
- wherein the processor device is further configured to automatically determine, via the user device, that the training session tailored to the insecure computing action is completed, and re-instate the one or more temporarily restricted computing operations of the user device in response to the training being completed.
A non-transitory computer readable medium configured to store instructions that when executed cause a processor to:
- temporarily restricting one or more computing operations of a user device based on an insecure computing action;
- requesting a training session including a target set of training items, via the user device, based on a type of the insecure computing action and an age of a user profile of the user device;
- and
- re-instating the temporarily restricted one or more computing operations of the user device in response to the training session being completed.
Dependencies are inferred from the claim text.