Back to results
US 8,286,254 B2Granted
Behavioral learning for interactive user security
AssigneeCisco Technology, Inc.
InventorsJeffrey A. Kraemer, Debra Malver
Life of this patent
Estimating the term…
Abstract
A system for automatically handling requests to grant or deny access to resources in a network or computer system. In a preferred embodiment of the invention a “learning mode” can be designated so that whenever a permission query is detected the system automatically supplies an answer to the query without requiring the user to make a response or take other action. The automated answer can be set so that the permission is always granted or other criteria can be used for the automated answer such as by categorizing the type of access permission and using a default response according to the category.
Claims23
A method for setting access permissions in a computer system, the computer system including a processor and a non-transitory computer readable storage medium including instructions executable by the processor, the method comprising:
- detecting a query by an application for permission to access a resource;
- searching a rules database for a rule that is applicable to the query;
- determining that the rules database contains an applicable rule;
- determining whether the applicable rule indicates whether the application is permitted to access the resource;
- responsive to determining that the applicable rule indicates whether the application is permitted to access the resource, granting or denying permission to the application to access the resource based on the applicable rule;
- and
- responsive to determining that the applicable rule does not indicate whether the application is permitted to access the resource:
- determining whether a learning mode is active for the applicable rule, and
- responsive to determining that a learning mode is active for the applicable rule:
- providing an automatic response to the query without requiring an input from a user, the automatic response granting or denying, based on a policy, permission to the application to access the resource, and
- automatically setting, without input from a user, the applicable rule, based on the policy, to indicate that the application is permitted or is not permitted to access the resource, and
- responsive to a determination that the learning mode is inactive for the applicable rule:
- obtaining an input from the user, the input indicating whether the application is permitted to access the resource, and
- providing a response to the query, granting or denying permission to the application to access the resource based on the input.
11 more elements
A computer-implemented method comprising:
- determining whether a resource request matches a query-based rule, wherein the determining comprises searching for applicable rules in a rules database;
- in response to determining that the resource request matches the query-based rule, determining whether a learning mode is active for the matched query-based rule;
- in response to determining that the learning mode is active for the matched query-based rule:
- providing an automatic response to the permission query without requiring an input from a user, the automatic response granting or denying, based on a policy, permission to the application to access the resource, and
- automatically setting, without input from a user, the matched query-based rule, based on the policy, to indicate that the application is permitted or is not permitted to access the resource.
2 more elements
An apparatus for setting access permissions in a computer system, the apparatus comprising:
- a processor;
- a non-transitory computer readable storage medium including instructions executable by the processor for performing the following:
- detecting that a permission query is being presented, wherein an application executing in a computer system includes a permission query;
- matching a query-based rule to the permission query, wherein the matching comprises searching for an applicable rule in a rules database;
- determining whether a learning mode is active for the matched query-based rule;
- and
- in response to determining that the learning mode is active for the matched query-based rule:
- providing an automatic response to the permission query without requiring an input from a user, the automatic response granting or denying, based on a policy, permission to the application to access the resource, and
- automatically setting, without input from a user, the matched query-based rule, based on the policy, to indicate that the application is permitted or is not permitted to access the resource.
6 more elements
A non-transitory computer readable storage medium including instructions comprising:
- one or more instructions for detecting that the permission query is being presented, wherein an application executing in a computer system includes the permission query;
- one or more instructions for matching a query-based rule to the permission query, wherein the matching comprises searching for applicable rules in a rules database;
- and
- in response to matching a query-based rule to the permission query, one or more instructions for determining whether a learning mode is active for the matched query-based rule;
- and
- in response to determining that the learning mode is active for the matched query-based rule:
- providing an automatic response to the permission query without requiring an input from a user, the automatic response granting or denying, based on a policy, permission to the application to access the resource, and
- automatically setting, without input from a user, the matched query-based rule, based on the policy, to indicate that the application is permitted or is not permitted to access the resource.
5 more elements
An system comprising:
- a processor;
- and
- a non-transitory computer readable storage medium including instructions executable by the processor for performing the following:
- detecting a query by an application for permission to access a resource;
- searching a rules database for a rule that is applicable to the query;
- determining that the rules database contains an applicable rule;
- determining whether a learning mode is active for the applicable rule;
- and
- in response to determining that the learning mode is active for the applicable rule:
- providing an automatic response to the query without requiring an input from a user, the automatic response granting or denying, based on a policy, permission to the application to access the resource, and
- automatically setting, without input from a user, the applicable rule, based on the policy, to indicate that the application is permitted or is not permitted to access the resource.
8 more elements
Dependencies are inferred from the claim text.