Trust/value/risk-based access control policy
AssigneeInternational Business Machines Corporation
InventorsPau-Chen Cheng, Lawrence Koved, Kapil K. Singh
Life of this patent
Estimating the term…
Abstract
Generating a resource access control decision is provided. A user trust value associated with a user identifier of a user requesting access to a protected resource is modulated based on an estimated risk value associated with a context of a resource access request. The resource access control decision is generated based on the modulated user trust value associated with the user requesting access to the protected resource.
Claims20
A computer-implemented method for generating a resource access control decision, the computer-implemented method comprising:
- adjusting, by a computer, a resource value associated with a resource identifier of a protected resource using an emergency value associated with a resource access request;
- modulating, by the computer, a user trust value associated with a user identifier of a user requesting access to the protected resource based on an estimated risk value associated with a context of the resource access request;
- and
- generating, by the computer, the resource access control decision based on the adjusted resource value associated with the protected resource and the modulated user trust value associated with the user requesting access to the protected resource.
A computer system for generating a resource access control decision, the computer system comprising:
- a bus system;
- a storage device connected to the bus system, wherein the storage device stores computer readable program code;
- and
- a processor unit connected to the bus system, wherein the processor unit executes the computer readable program code to:
- adjust a resource value associated with a resource identifier of a protected resource using an emergency value associated with a resource access request;
- modulate a user trust value associated with a user identifier of a user requesting access to the protected resource based on an estimated risk value associated with a context of the resource access request;
- and
- generate the resource access control decision based on the adjusted resource value associated with the protected resource and the modulated user trust value associated with the user requesting access to the protected resource.
A computer program product stored on a computer readable storage medium having computer readable program code encoded thereon that is executable by a computer for generating a resource access control decision, the computer program product comprising:
- computer readable program code to adjust a resource value associated with a resource identifier of a protected resource using an emergency value associated with a resource access request;
- computer readable program code to modulate a user trust value associated with a user identifier of a user requesting access to the protected resource based on an estimated risk value associated with a context of the resource access request;
- and
- computer readable program code to generate the resource access control decision based on the adjusted resource value associated with the protected resource and the modulated user trust value associated with the user requesting access to the protected resource.
Dependencies are inferred from the claim text.