Access control for digital data
AssigneeBlackBerry Limited
InventorRupen Chanda
Life of this patent
Estimating the term…
Abstract
A system and method to control access to data are disclosed. An access request is received from a requesting device to access requested data and a context for the requesting device is determined. An access pattern for the requested data is determined based at least on the request and the context. A deviation between the context and the access pattern is determined and based on determining the deviation, a decision request to allow or deny the access request is sent. Based on a response to the decision request, access to the requested data is allowed.
Claims17
A method, comprising:
- accumulating a history of access requests for a requested data over a time period, the history of access requests comprising a respective context for access requests received during the time period;
- determining, based on an analysis of the respective context contained in each access request in the history of access requests for the requested data, an access pattern for the requested data,
- receiving, after accumulating the history of access requests, a present access request from a requesting device to access requested data;
- determining a context for the requesting device sending the present access request;
- determining a deviation between the context for the requesting device sending the present access request and the access pattern;
- comparing, based on determining the deviation, the context of the present requesting device to contexts defined in the access pattern;
- and
- allowing, based on the comparing, access to the requested data.
A device, comprising:
- a context processor that, when operating:
- accumulates a history of access requests for a requested data over a time period, the history of access requests comprising a respective context for access requests received during the time period;
- determines, based on an analysis of respective context contained in each access request in the history of access requests for the requested data, an access pattern for the requested data,
- determines a context for a requesting device sending a present access request for the requested data;
- determines a deviation between the context for the requesting device sending the present access request and the access pattern;
- compares, based on determining the deviation, the context of the present requesting device to contexts defined in the access pattern;
- and
- allows, based on a comparison of the context of the present requesting device to contexts defined in the access pattern, access to the requested data;
- and
- a data interface that, when operating, receives the present access request from the requesting device to access the requested data.
A non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising instructions for:
- accumulating a history of access requests over a time period, the history of access requests for a requested data, the history of access requests comprising a respective context for access requests received during the time period;
- determining, based on an analysis of respective context contained in each access request in the history of access requests for the requested data, an access pattern for the requested data,
- receiving, after accumulating the history of access requests, a present access request from a requesting device to access requested data;
- determining a context for the requesting device sending the present access request;
- determining a deviation between the context for the requesting device sending the present access request and the access pattern;
- comparing, based on determining the deviation, the context of the present requesting device to contexts defined in the access pattern;
- and
- allowing, based on the comparing, access to the requested data.
Dependencies are inferred from the claim text.