# US 9,519,799 B2 · Dynamic determination of access rights > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,519,799 B2 - Document ID: US9519799B2 - Status: Granted - Kind: B2 - Application number: 13/318,493 - Filed: 2010-05-28 - Published: 2012-03-01 - Granted: 2016-12-13 - Earliest claimed: 2009-06-01 - Assignees: Koninklijke Philips N.V. - Applicants: Muhammad Asim; Milan Petkovic; Jin Qu - Inventors: Muhammad Asim; Milan Petkovic; Jin Qu - Web page: https://patentgrep.com/patent/US9519799B2 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method of dynamically determining the access rights of a client to a record comprises receiving an access request from the client with respect to the record, determining one or more contexts relating to the access request, calculating a score for each determined context, calculating an overall score from the context scores, accessing a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score, and determining the client's access rights according to a comparison of the overall score to the score for each right in the rights policy. ## Claims ### Claim 1 A method of dynamically determining the access rights to a record comprising: receiving an access request from a client with respect to the record, determining one or more contexts relating to the access request, calculating a context score for each determined context, the context score being selected from a plurality of context scores for each context; calculating an overall score from the context scores, accessing a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score, determining the access rights according to a comparison of the overall score to the score for each right in the rights policy; and accessing an audit log defining at least one of prior reputation and prior behavior for the client and minimizing the rights policy according to the audit log; and dynamically providing rights access based on the level of trust, a subset of rights comprising one or more of the full set of rights being granted if the level of trust is below a predetermined threshold; wherein determining one or more contexts relating to the access request comprises selecting contexts of authentication level, trustworthiness of client and access time of day indicative of whether the access request is urgent. ### Claim 2 (depends on 1) The method according to claim 1, wherein the step of calculating an overall score from tile context scores comprises calculating an average of the context scores. ### Claim 3 (depends on 2) The method according to claim 2, wherein the average is a weighted average according to a predefined formula. ### Claim 4 (depends on 1) The method according to claim 1, wherein the step of determining the client's access rights comprising restricting the client's access rights to fewer than, but at least one of, the total rights defined by the rights policy. ### Claim 5 (depends on 1) The method according to claim 1, and further comprising transmitting a message to the client, the message comprising the client's access rights. ### Claim 6 (depends on 1) The method according to claim 1, wherein the step of calculating a context score for each determined context comprises assigning a descriptive value to each context. ### Claim 7 (depends on 6) The method according to claim 6, wherein the step of calculating an overall score from the context scores comprises applying a rules policy to the descriptive values to obtain an overall score that comprises a descriptive value. ### Claim 8 A system for dynamically determining the access rights to a record comprising: a license server arranged to store a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score, a component arranged to receive an access request with respect to the record, and a context evaluator arranged to determine one or more contexts relating to the access request, to calculate a score for each determined context wherein the context score is selectable from a plurality of context scores for each context, to calculate an overall score from the context scores, to access the rights policy for the record, and to determine the access rights according to a comparison of the overall score to the score for each right in the rights policy; wherein the license server accesses an audit log defining at least one of prior reputation and prior behavior for a client and minimizes the rights policy according to the audit log; wherein the context evaluator dynamically provides rights access based on the comparison of the overall score to the score for each right in the rights policy, a subset of rights comprising one or more of the full set of rights being granted if a score for a given right in the rights policy is below the overall score; and wherein the context evaluator is arranged, when determining one or more contexts relating to the access request, to select one or more contexts of authentication level, trustworthiness of client and access time of day indicative of whether the access request is urgent. ### Claim 9 (depends on 8) The system according to claim 8, wherein the context evaluator is arranged, when calculating an overall score from the context scores, to calculate an average of the context scores. ### Claim 10 (depends on 9) The system according to claim 9, wherein the average is a weighted average according to a predefined formula. ### Claim 11 (depends on 8) The system according to claim 8, wherein the context evaluator is arranged, when determining tile client's access rights, to restrict the client's access rights to fewer than, but at least one of, the total rights defined by the rights policy. ### Claim 12 A method of dynamically determining the access rights to a record comprising: receiving an access request from a client with respect to the record, determining one or more contexts relating to the access request, calculating a context score for each determined context, the context score being selected from a plurality of context scores for each context; calculating an overall score from the context scores, accessing a rights policy for the record, the rights policy defining a plurality of different rights with respect to the record, each with a respective minimum score; determining the access rights according to a comparison of the overall score to the score for each right in the rights policy; and transmitting a message to the client, the message describing the client's access rights, which include at least one granted access right; and dynamically providing access rights as a function of the overall score and the individual context scores, a subset of rights comprising one or more of the full set of rights being granted if the level of trust is below a predetermined threshold; wherein determining one or more contexts relating to the access request comprises selecting contexts of authentication level, trustworthiness of client and access time of day indicative of whether the access request is urgent.