Digital resource access control system and method
AssigneeTorsion Information Security Limited
InventorPeter Glenn BRADLEY
Life of this patent
Estimating the term…
Abstract
A digital resource access control system and method comprising for controlling access to a digital resource stored on an information management system to reflect context of a reason for access and the circumstances of a user in a cloud environment for unstructured data.
Claims20
A digital resource access control system comprising:
- an integration layer configured to interface with an information management system;
- an access orchestration engine configured to determine user access controls;
- a context change detection engine configured to determine a change in contextual data related to a given user;
- an access control list automation engine configured to update an access control list data structure associated with at least one digital resource;
- wherein
- the context change detection engine is configured to receive input data relating to at least one attribute associated with at one least user, compare the input data to current attribute data associated with the at least one user and to output a trigger message comprising the input data to the access orchestration engine in response to detecting a difference between the input data and the current attribute data;
- the access orchestration engine is configured to receive the trigger message and to determine access controls to digital resources based upon input data and to send an update message to the access control list automation engine;
- the access control list automation engine is configured to update at least one access control data structure based upon the update message and to output the updated at least one access control data structure to the access orchestration engine, which is further configured to pass the access control data structure to the integration layer;
- and
- the integration layer is configured to control an access control database of the information management system and to update the access control database in response to receiving the at least one access control data structure received from the access orchestration engine, such that in use, access to data is controlled in accordance with at least one entry in the access control database.
A computer implemented method of controlling access to a digital resource in an information management system by a digital resource access control system comprising the steps of:
- comparing input data relating to at least one attribute associated with at least one user to current attribute data associated with the at least one user by the context change detection engine;
- outputting a trigger message comprising the input data to an access orchestration engine in response to detecting a difference between the input data and the current attribute data by the context change detection engine;
- determining access controls to at least one digital resource stored in the information management system by the access orchestration engine based upon input data;
- outputting an update message to an access control list automation engine;
- updating at least one access control data structure based upon the update message by the access control automation engine;
- outputting the updated at least one access control data structure to the access orchestration engine from the access control automation engine;
- passing the access control data structure to an integration layer configured to interface with the information management system;
- updating an access control database of the information management system by the integration layer in response to receiving the at least one access control data structure received from the access orchestration engine;
- and
- controlling access to data within the information management system based upon at least one entry in the access control database.
An access orchestration engine configured to determine user access controls for at least one digital resource stored in an information management system based upon the output of an access detection engine which is arranged to compare input data to current attribute data associated with at least one user and to output a trigger message comprising the input data to the access orchestration engine in response to detecting a difference between the input data and the current attribute data, and being further configured to pass an access control data structure reflective of the user access controls to an access control database of the information management system.
Dependencies are inferred from the claim text.