DYNAMIC GENERATION OF ACCESS CONTROL WORKFLOWS
개요
출원인
International Business Machines Corporation
발명자
Shreenivas Suvarna; Heather Nicole Polgrean; Tiberiu Suto; Jessica Nahulan
IPC 분류
CPC 분류
Dynamically controlling access to confidential data is provided. The method comprises receiving input of a user security profile that specifies data access privileges for a user. Natural language processing is used to analyze a number of documented communications among authorized personnel regarding work related to the confidential data. From the analysis of the documented communications, a task is identified for the user that requires access privileges to the confidential data that the user security profile does not authorize. An urgency score for the task is calculated from the analysis of the documented communications. Responsive to a determination that the urgency score exceeds a specified threshold, an access control workflow is automatically initiated that is routed to an authorizing agent. Authorization is received in near real-time from the authorizing agent, wherein the user security profile is updated to allow access to the confidential data for a specified duration.
원문 (중국어)
Dynamically controlling access to confidential data is provided. The method comprises receiving input of a user security profile that specifies data access privileges for a user. Natural language processing is used to analyze a number of documented communications among authorized personnel regarding work related to the confidential data. From the analysis of the documented communications, a task is identified for the user that requires access privileges to the confidential data that the user security profile does not authorize. An urgency score for the task is calculated from the analysis of the documented communications. Responsive to a determination that the urgency score exceeds a specified threshold, an access control workflow is automatically initiated that is routed to an authorizing agent. Authorization is received in near real-time from the authorizing agent, wherein the user security profile is updated to allow access to the confidential data for a specified duration.