首页> 外国专利> NEED-TO-KNOW INFORMATION ACCESS USING QUANTIFIED RISK

NEED-TO-KNOW INFORMATION ACCESS USING QUANTIFIED RISK

机译:使用量化风险需要了解信息访问

摘要

In one aspect of the invention access control includes retrieving a list of accesses to data by plurality of users for a certain purpose during a specified period of time. The access patterns are derived based on said accesses and the derived access patterns are stored. A risk score is computed, for each of the plurality of users based on each of the plurality of users' need to access the data for said certain purpose. An aggregated total risk score for each of the plurality of users is created based on each respective user' s computed risk score in a specified number of recent periods of time. A risk tolerance threshold is determined based on the aggregated total risk score for each of the plurality of users. A warning is issued if the aggregated total risk score for any of plurality of users exceeds a risk-tolerance threshold.
机译:在本发明的一方面,访问控制包括在指定的时间段内出于特定目的检索多个用户对数据的访问的列表。基于所述访问导出访问模式,并且存储导出的访问模式。基于多个用户中的每一个出于所述特定目的访问数据的需要,针对多个用户中的每一个计算风险分数。基于每个相应用户在指定数量的最近时间段内计算出的风险评分,为多个用户中的每个用户创建汇总的总风险评分。基于多个用户中的每个用户的合计总风险评分来确定风险承受度阈值。如果多个用户中任何一个的总风险总分超过风险容忍阈值,则发出警告。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号