US 11,941,157 B2
Computer analysis of software permissions for protecting access to data
Hao Chun Hung, Taipei (TW); Po-Cheng Chiu, Taipei (TW); Tsai-Hsuan Hsieh, Taoyuan (TW); Cheng-Lun Yang, Taipei (TW); Chiwen Chang, Taipei (TW); and Shin Yu Wey, Taipei (TW)
Assigned to INTERNATIONAL BUSINESS MACHINES CORPORATION, Armonk, NY (US)
Filed by INTERNATIONAL BUSINESS MACHINES CORPORATION, Armonk, NY (US)
Filed on Dec. 16, 2020, as Appl. No. 17/123,887.
Prior Publication US 2022/0188433 A1, Jun. 16, 2022
Int. Cl. G06F 21/51 (2013.01); G06F 16/951 (2019.01); G06F 21/62 (2013.01)
CPC G06F 21/629 (2013.01) [G06F 16/951 (2019.01); G06F 21/51 (2013.01); G06Q 50/40 (2024.01)] 14 Claims
OG exemplary drawing
 
1. A computer-implemented method for managing the scope of permissions granted by users to application comprising:
collecting a set of permissions for an application from an application provider publication;
collecting a process flow for functional steps of the application from a review of the application that is published on a product review type publication, wherein the product review type publication is a diary type blog from the users on a social media type web page;
dividing the functional steps of the application into a plurality of journeys, each of said plurality of journeys having a function associated with a stage of a functional step from a perspective of the users and a time period for performing the functional step;
matching permissions from the set of permissions for each journey of said plurality of journeys to provide matched permissible permissions to journeys stored in a customer journey store, wherein permissions matched to each journey are correlated to the time period for performing the functional step for each journey; and
monitoring a running application for a user using the matched permissible permissions to the plurality of journeys stored in the customer journey store, wherein an execution of a permission by the running application that is not correlated to said matched permissible permissions in the customer journey store including the permissions matched to each journey that are correlated to the time period for performing the functional step for each journey is designated as non-permissible to the user of the application.