Determine security access level based on user behavior
AssigneeInternational Business Machines Corporation
InventorsDerek W. Botti, Ramamohan Chennamsetty, C. Steven Lingafelt, William H. Tworek
Life of this patent
Estimating the term…
Abstract
Examples of techniques for determining security access based on user behavioral measurements are disclosed. In accordance with aspects of the present disclosure, a computer-implemented method is provided. The method may comprise performing a trust evaluation to calculate a trust penalty value for a user based on a plurality of measured user attributes. The method may further comprise determining, by a processing device, a security access level based on a predefined trust threshold and the trust penalty value for the user. The method may also comprise applying the security access level to the user.
Claims16
A computer-implemented method comprising:
- performing a trust evaluation to calculate a total trust penalty value for a user, wherein the total trust penalty value is calculated based on a plurality of individual trust penalty values that are calculated for each of a plurality of measured user attributes, wherein the plurality of measured attributes is based on observing a behavior of the user, and wherein observing the behavior of the user includes observing at least two of a social behavior of the user, a life event of the user, a connection attribute of the user, a connection attribute of a processing system of the user, a compliance issue of the user, and a work activity of the user;
- when the total trust penalty value is greater than a predefined trust threshold, determining, by a processing device, a security access level for the user;
- and
- applying the security access level to the user.
A system comprising:
- a processor in communication with one or more types of memory, the processor configured to:
- perform a trust evaluation to calculate a total trust penalty value for a user, wherein the total trust penalty value is calculated based on a plurality of individual trust penalty values that are calculated for each of a plurality of measured user attributes, wherein the plurality of measured attributes is based on observing a behavior of the user, and wherein observing the behavior of the user includes observing at least two of a social behavior of the user, a life event of the user, a connection attribute of the user, a connection attribute of a processing system of the user, a compliance issue of the user, and a work activity of the user,
- when the total trust penalty value is greater than a predefined trust threshold, determine a security access level for the user, and
- apply the security access level to the user.
A computer program product comprising:
- a non-transitory storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
- performing a trust evaluation to calculate a total trust penalty value for a user, wherein the total trust penalty value is calculated based on a plurality of individual trust penalty values that are calculated for each of a plurality of measured user attributes, wherein the plurality of measured attributes is based on observing a behavior of the user, and wherein observing the behavior of the user includes observing at least two of a social behavior of the user, a life event of the user, a connection attribute of the user, a connection attribute of a processing system of the user, a compliance issue of the user, and a work activity of the user,
- when the total trust penalty value is greater than a predefined trust threshold, determining a security level for the user, and
- applying the security access level to the user.
Dependencies are inferred from the claim text.