US 12,452,304 B2
Dynamically changing access rules for context-sensitive access control
Alan Byrne, Mulhuddart (IE); Paul Connolly, Castleknock (IE); and Bryan D. Osenbach, Cary, NC (US)
Assigned to International Business Machines Corporation, Armonk, NY (US)
Filed by International Business Machines Corporation, Armonk, NY (US)
Filed on Apr. 20, 2020, as Appl. No. 16/852,557.
Application 16/852,557 is a continuation of application No. 15/475,348, filed on Mar. 31, 2017, granted, now 10,673,857, issued on Jun. 2, 2020.
Prior Publication US 2020/0252431 A1, Aug. 6, 2020
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/00 (2013.01); H04L 9/40 (2022.01)
CPC H04L 63/20 (2013.01) [H04L 63/10 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method, comprising:
obtaining user data relating to a plurality of system users having previously been granted access to a computing resource in a context without complying with a ruleset defining criteria for automatically accessing the computing resource in the context, wherein the user data is obtained from each of:
a system user directory that stores values of properties of an employee profile associated with each of the plurality of system users,
an historical activity database that stores first user profile data derived from monitoring user activity for the plurality of system users in relation to the computing resource,
a social interactions database that stores second user profile data derived from monitoring communications between the plurality of system users, a publications database that stores data derived from relevant publications including third user profile data for system users of the plurality of system users who are named authors or contributors in the relevant publications,
an events attendance database storing fourth user profile data derived from lists of attendees at relevant events, and
a work assignment database storing fifth user profile data derived from records of work assignments performed by the plurality of system users and associated interactions;
identifying a combination of two or more user data properties having common values in the user data of a subset of two or more of the plurality of system users;
determining whether a number of system users in the subset exceeds a predetermined threshold;
automatically updating, upon the number of system users in the subset exceeding the predetermined threshold, the ruleset to include criteria based on the identified combination of two or more user data properties to generate an updated ruleset; and
providing access to the computing resource based at least in part on the updated ruleset in the context.