DYNAMIC GENERATION OF ACCESS CONTROL WORKFLOWS
卷宗概要
申请人
International Business Machines Corporation
发明人
Shreenivas Suvarna; Heather Nicole Polgrean; Tiberiu Suto; Jessica Nahulan
IPC 分类
CPC 分类
Dynamically controlling access to confidential data is provided. The method comprises receiving input of a user security profile that specifies data access privileges for a user. Natural language processing is used to analyze a number of documented communications among authorized personnel regarding work related to the confidential data. From the analysis of the documented communications, a task is identified for the user that requires access privileges to the confidential data that the user security profile does not authorize. An urgency score for the task is calculated from the analysis of the documented communications. Responsive to a determination that the urgency score exceeds a specified threshold, an access control workflow is automatically initiated that is routed to an authorizing agent. Authorization is received in near real-time from the authorizing agent, wherein the user security profile is updated to allow access to the confidential data for a specified duration.
原文(中文)
Dynamically controlling access to confidential data is provided. The method comprises receiving input of a user security profile that specifies data access privileges for a user. Natural language processing is used to analyze a number of documented communications among authorized personnel regarding work related to the confidential data. From the analysis of the documented communications, a task is identified for the user that requires access privileges to the confidential data that the user security profile does not authorize. An urgency score for the task is calculated from the analysis of the documented communications. Responsive to a determination that the urgency score exceeds a specified threshold, an access control workflow is automatically initiated that is routed to an authorizing agent. Authorization is received in near real-time from the authorizing agent, wherein the user security profile is updated to allow access to the confidential data for a specified duration.