Managing policy
AssigneeEMC IP Holding Company LLC
InventorsDaniel Hassan, III, Yafit Levi, Maor Franco, Ayelet Eliezer, Liron Liptz
Life of this patent
Estimating the term…
Abstract
There is disclosed a technique for use in managing policy. The technique comprises storing information relating to at least one previous authentication request. It should be understood that the information can be used in an authentication operation performed in connection with an authentication request. The technique also comprises receiving a policy request to alter a policy relating to an authentication operation that can be performed in connection with an authentication request. The technique further comprises generating an alteration to the policy based on the stored information and the received policy request.
Claims6
A method for use in managing policy, the method comprising:
- storing information relating to at least one previous authentication request;
- analyzing the information relating to the least one previous authentication request;
- receiving a policy request to alter a policy relating to the issuance of authentication challenges, wherein the policy request relates to an amount of authentication challenges to be performed over a period of time in the event that authentication operations determine authentication requests to be risky, still further wherein the policy comprises a rule;
- based on the analysis and the policy request, generating a new rule in connection with the policy, wherein the new rule comprises a new threshold for determining whether to issue authentication challenges in connection with future authentication requests;
- displaying a cost associated with the rule and the new rule, wherein the cost relates to the issuance of authentication challenges by the rule and the new rule;
- receiving an approval of the new rule;
- and
- in response to receiving the approval, modifying the rule based on the new rule.
An apparatus for use in managing policy, the apparatus comprising:
- a memory;
- and
- at least one hardware device, coupled to the memory, operative to:
- store information relating to at least one previous authentication request;
- analyze the information relating to the least one previous authentication request;
- receive a policy request to alter a policy relating to the issuance of authentication challenges, wherein the policy request relates to an amount of authentication challenges to be performed over a period of time in the event that authentication operations determine authentication requests to be risky, still further wherein the policy comprises a rule;
- based on the analysis and the policy request, generate a new rule in connection with the policy, wherein the new rule comprises a new threshold for determining whether to issue authentication challenges in connection with future authentication requests;
- display a cost associated with the rule and the new rule, wherein the cost relates to the issuance of authentication challenges by the rule and the new rule;
- receive an approval of the new rule;
- and
- in response to receiving the approval, modify the rule based on the new rule.
An article of manufacture for use in managing policy, comprising a non-transitory machine readable recordable medium containing one or more programs which when executed implement the steps of:
- storing information relating to at least one previous authentication request;
- analyzing the information relating to the least one previous authentication request;
- receiving a policy request to alter a policy relating to the issuance of authentication challenges, wherein the policy request relates to an amount of authentication challenges to be performed over a period of time in the event that authentication operations determine authentication requests to be risky, still further wherein the policy comprises a rule;
- based on the analysis and the policy request, generating a new rule in connection with the policy, wherein the new rule comprises a new threshold for determining whether to issue authentication challenges in connection with future authentication requests;
- displaying a cost associated with the rule and the new rule, wherein the cost relates to the issuance of authentication challenges by the rule and the new rule;
- receiving an approval of the new rule;
- and
- in response to receiving the approval, modifying the rule based on the new rule.
Dependencies are inferred from the claim text.