# US 9,882,911 B2 · Autonomous trust evaluation engine to grant access to user private data

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,882,911 B2
- Document ID: US9882911B2
- Status: Granted
- Kind: B2
- Application number: 14/955,154
- Filed: 2015-12-01
- Published: 2017-06-01
- Granted: 2018-01-30
- Earliest claimed: 2015-12-01
- Assignees: International Business Machines Corporation
- Applicants: International Business Machines Corporation
- Inventors: Alexandre de Queiroz Baltar; Silvia Cristina Sardela Bianchi; Marcio da Ros Gomes; Marcos Vinicius Landivar Paraiso; Sergio Varga
- Web page: https://patentgrep.com/patent/US9882911B2

## CPC

- H04L 63/102: {Entity profiles}
- H04L 63/105: {Multiple levels of security}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A trust rating is computed for a data requester across one or more dimensions by identifying the data requester, collecting information regarding the data requester from one or more sources, and generating the trust rating for the data requester across the one or more dimensions based on the collected information. The trust rating is utilized to either grant or deny a request by the data requester to access data associated with one or more data providers.

## Claims

### Claim 1

A method, comprising:
computing a trust rating for a data requester across one or more dimensions, wherein said computing comprises:
identifying said data requester;
collecting information regarding said data requester from one or more sources;
generating said trust rating for said data requester across said one or more dimensions based on said collected information;
summarizing an overall trust rating for said data requester based on said trust ratings for each of said one or more dimensions, wherein said trust ratings for each of said one or more dimensions are weighted based on pre-defined values; and
utilizing said computed trust rating to one of grant or deny a request by said data requester to access data associated with one or more data providers;
wherein the steps are performed by at least one processor device coupled to a memory, and
wherein the method further comprises the steps of:
creating and maintaining a global access rule, wherein said global access rule is maintained in a global classification layer; and
creating and maintaining a personal access rule for each of said one or more data providers, wherein said personal access rule is maintained in a personal classification layer, wherein the global access rule and personal access rule are further stored in an access rules database.

### Claim 2 (depends on 1)

The method of claim 1, wherein said one or more dimensions are user-selected from a given list by said one or more data providers.

### Claim 3 (depends on 1)

The method of claim 1, wherein said one or more dimensions are weighted based on pre-defined values.

### Claim 4 (depends on 1)

The method of claim 1, wherein said computed trust rating is continuously updated and maintained in a trust index database.

### Claim 5 (depends on 1)

The method of claim 1, further comprising the step of notifying said one or more data providers of said request to access data and registering a granted request.

### Claim 6 (depends on 1)

The method of claim 1, further comprising the step of recording a denied request to access data.

### Claim 7 (depends on 1)

The method of claim 1, wherein said trust rating is qualified in degrees from high to low.

### Claim 8 (depends on 1)

The method of claim 1, wherein said trust rating is quantified by a numerical value with higher values indicating a higher degree of trust.

### Claim 9

An apparatus comprising:
a memory and a processor operatively coupled to the memory and configured to implement the steps of:
computing a trust rating for a data requester across one or more dimensions, wherein said computing comprises:
identifying said data requester;
collecting information regarding said data requester from one or more sources;
generating said trust rating for said data requester across said one or more dimensions based on said collected information;
summarizing an overall trust rating for said data requester based on said trust ratings for each of said one or more dimensions, wherein said trust ratings for each of said one or more dimensions are weighted based on pre-defined values; and
utilizing said computed trust rating to one of grant or deny a request by said data requester to access data associated with one or more data providers, wherein the processor is further configured to implement the steps of:
creating and maintaining a global access rule, wherein said global access rule is maintained in a global classification layer; and
creating and maintaining a personal access rule for each of said one or more data providers, wherein said personal access rule is maintained in a personal classification layer, wherein the global access rule and personal access rule are further stored in an access rules database.

### Claim 10 (depends on 9)

The apparatus of claim 9, wherein said one or more dimensions are user-selected from a given list by said one or more data providers, wherein said one or more dimensions are weighted based on pre-defined values.

### Claim 11 (depends on 9)

The apparatus of claim 9, wherein said computed trust rating is continuously updated and maintained in a trust index database.

### Claim 12 (depends on 9)

The apparatus of claim 9, further configured to implement the step of notifying said one or more data providers of said request to access data and registering a granted request.

### Claim 13

A computer program product comprising a non-transitory computer readable storage medium for storing computer readable program code which, when executed, causes a computer to:
compute a trust rating for a data requester across one or more dimensions, wherein said computing comprises:
identifying said data requester;
collecting information regarding said data requester from one or more sources;
generating said trust rating for said data requester across said one or more dimensions based on said collected information;
summarizing an overall trust rating for said data requester based on said trust ratings for each of said one or more dimensions, wherein said trust ratings for each of said one or more dimensions are weighted based on pre-defined values; and
utilize said computed trust rating to one of grant or deny a request by said data requester to access data associated with one or more data providers,
wherein the computer is further caused to:
create and maintain a global access rule, wherein said global access rule is maintained in a global classification layer; and
create and maintain a personal access rule for each of said one or more data providers, wherein said personal access rule is maintained in a personal classification layer, wherein the global access rule and personal access rule are further stored in an access rules database.
