Graphical user interface privacy, security and anonymization

• US 10,554,669 B2
• Filed: 05/31/2017
• Issued: 02/04/2020
• Est. Priority Date: 05/31/2017
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Calcaterra, Jeffrey A., Rueger, Erik, Schmitt, Christof
• Primary Examiner(s): Lewis, Lisa C
• Assistant Examiner(s): Salman, Raied A
• Application Number:
  US15/609,515
• Publication Number:
  US 20180351961A1
• Time in Patent Office: 979 Days
• Field of Search: 726 4, 726 23, 709225, 37926509
• CPC Class Codes: G06F 3/048 Interaction techniques based on graphical user interfaces [GUI]
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method, computer system, and a computer program product for restricting and anonymizing a graphical user interface for a remote access session is provided. The present invention may include receiving a remote access request, from a third party, to fix a problem associated with a client computer. The present invention may also include determining the problem associated with the client computer utilizing a cognitive processing system. The present invention may then include determining a plurality of appropriate permissions for the graphical user interface of the client computer for fixing the determined problem utilizing the cognitive processing system. The present invention may further include presenting the determined problem and the determined plurality of appropriate permissions to a user. The present invention may also include receiving a user confirmation, wherein the user confirmation indicates the user agrees with the determined problem.

Claims

1. A method for restricting and anonymizing a graphical user interface for a remote access session, the method comprising:

receiving a remote access request, from a third party, to fix a problem associated with a client computer;

determining the problem associated with the client computer;

determining a plurality of appropriate permissions for the graphical user interface of the client computer for fixing the determined problem,

wherein the determined plurality of appropriate permissions is structured based on the determined problem by a plurality of error messages,

wherein the plurality of error messages includes one or more sets of if-then protocols,

wherein determining a plurality of sensitive data is determined within the graphical user interface based on the determined plurality of appropriate permissions,

wherein the determined plurality of sensitive data is anonymized;

presenting the determined problem and the determined plurality of appropriate permissions to a user;

wherein the determined plurality of restricted graphical user interface panels includes a minimum access level for a third party to fix the determined problem; and

receiving a user confirmation,

wherein the user confirmation indicates the user agrees with the determined problem.

2. The method of claim 1, further comprising:

receiving a user decision to change a plurality of previously defined permissions in response to presenting the determined plurality of appropriate permissions to the user; and

changing the determined plurality of appropriate permissions before granting the remote access session to the third party.

3. The method of claim 1, further comprising:

receiving a user decision to change a plurality of previously defined permissions in response to presenting the determined plurality of appropriate permissions to the user; and

changing the determined plurality of appropriate permissions based on the received user decision,

wherein the changed plurality of appropriate permissions apply for the duration of the remote access session of the third party.

4. The method of claim 1, wherein determining a plurality of appropriate permissions for the graphical user interface of the client computer for fixing the determined problem, further comprises:

determining a graphical user interface panel associated with the determined problem;

determining a plurality of restricted graphical user interface panels associated with the graphical user interface,

determining the plurality of appropriate permissions based on the plurality of restricted graphical user interface panels and the plurality of anonymized data to fix the determined problem; and

presenting to the user the determined plurality of appropriate permissions.

5. The method of claim 4, further comprising:

determining that the user applied a plurality of temporary changes to the determined plurality of appropriate permissions; and

granting remote access to the third party to fix the determined problem, wherein the third party is allowed access based on the determined plurality of temporary changes.

6. The method of claim 4, further comprising:

determining that no changes were made to determined plurality of appropriate permissions in the graphical user interface; and

granting remote access to the third party to fix the problem, wherein the third party is allowed access based on the determined plurality of appropriate permissions.

7. The method of claim 5, further comprising:

terminating the granted remote access to the third party; and

reverting the plurality of temporary changes back to the plurality of previously defined permissions corresponding with the determined plurality of appropriate permissions.

8. The method of claim 1, further comprising:

determining the user is not currently at the client computer;

notifying the user of the remote access request by an alternate electronic method; and

receiving from the user a confirmation of the determined problem by the alternate electronic method,

wherein the received confirmation includes a decision indicating whether to change the determined plurality of appropriate permissions.

9. A computer system for restricting and anonymizing a graphical user interface for a remote access session, comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising;

receiving a remote access request, from a third party, to fix a problem associated with a client computer;

determining the problem associated with the client computer;

determining a plurality of appropriate permissions for the graphical user interface of the client computer for fixing the determined problem,

wherein the determined plurality of appropriate permissions is structured based on the determined problem by a plurality of error messages,

wherein the plurality of error messages includes one or more sets of if-then protocols,

wherein determining a plurality of sensitive data is determined within the graphical user interface based on the determined plurality of appropriate permissions,

wherein the determined plurality of sensitive data is anonymized;

presenting the determined problem and the determined plurality of appropriate permissions to a user;

wherein the determined plurality of restricted graphical user interface panels includes a minimum access level for a third party to fix the determined problem; and

receiving a user confirmation,

wherein the user confirmation indicates the user agrees with the determined problem.

10. The computer system of claim 9, further comprising:

receiving a user decision to change a plurality of previously defined permissions in response to presenting the determined plurality of appropriate permissions to the user; and

changing the determined plurality of appropriate permissions before granting the remote access session to the third party.

11. The computer system of claim 9, further comprising:

receiving a user decision to change a plurality of previously defined permissions in response to presenting the determined plurality of appropriate permissions to the user; and

changing the determined plurality of appropriate permissions based on the received user decision, wherein the changed plurality of appropriate permissions apply for the duration of the remote access session of the third party.

12. The computer system of claim 9, wherein determining a plurality of appropriate permissions for the graphical user interface of the client computer for fixing the determined problem further comprises:

determining a graphical user interface panel associated with the determined problem;

determining a plurality of restricted graphical user interface panels associated with the graphical user interface,

determining the plurality of appropriate permissions based on the plurality of restricted graphical user interface panels and the plurality of anonymized data to fix the determined problem; and

presenting to the user the determined plurality of appropriate permissions.

13. The computer system of claim 12, further comprising:

determining that the user applied a plurality of temporary changes to the determined plurality of appropriate permissions; and

granting remote access to the third party to fix the determined problem,

wherein the third party is allowed access based on the determined plurality of temporary changes.

14. The computer system of claim 12, further comprising:

determining that no changes were made to determined plurality of appropriate permissions in the graphical user interface; and

granting remote access to the third party to fix the problem,

wherein the third party is allowed access based on the determined plurality of appropriate permissions.

15. The computer system of claim 13, further comprising:

terminating the granted remote access to the third party; and

reverting the plurality of temporary changes back to the plurality of previously defined permissions corresponding with the determined plurality of appropriate permissions.

16. The computer system of claim 9, further comprising:

determining the user is not currently at the client computer;

notifying the user of the remote access request by an alternate electronic method; and

receiving from the user a confirmation of the determined problem by the alternate electronic method,

wherein the received confirmation includes a decision indicating whether to change the determined plurality of appropriate permissions.

17. A computer program product for restricting and anonymizing a graphical user interface for a remote access session, comprising:

one or more computer-readable storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor, the program instructions comprising;

program instructions to receive a remote access request, from a third party, to fix a problem associated with a client computer;

program instructions to determine the problem associated with the client computer;

program instructions to determine a plurality of appropriate permissions for the graphical user interface of the client computer for fixing the determined problem,

wherein the determined plurality of appropriate permissions is structured based on the determined problem by a plurality of error messages,

wherein the plurality of error messages includes one or more sets of if-then protocols,

wherein determining a plurality of sensitive data is determined within the graphical user interface based on the determined plurality of appropriate permissions,

wherein the determined plurality of sensitive data is anonymized;

program instructions to present the determined problem and the determined plurality of appropriate permissions to a user;

wherein the determined plurality of restricted graphical user interface panels includes a minimum access level for a third party to fix the determined problem; and

program instructions to receive a user confirmation,

wherein the user confirmation indicates the user agrees with the determined problem.

18. The computer program product of claim 17, further comprising:

program instructions to receive a user decision to change a plurality of previously defined permissions in response to presenting the determined plurality of appropriate permissions to the user; and

program instructions to change the determined plurality of appropriate permissions before granting the remote access session to the third party.

19. The computer program product of claim 17, further comprising:

program instructions to receive a user decision to change a plurality of previously defined permissions in response to presenting the determined plurality of appropriate permissions to the user; and

program instructions to change the determined plurality of appropriate permissions based on the received user decision,

wherein the changed plurality of appropriate permissions apply for the duration of the remote access session of the third party.

20. The computer program product of claim 17, wherein program instructions to determine a plurality of appropriate permissions for the graphical user interface of the client computer for fixing the determined problem, further comprises:

program instructions to determine a graphical user interface panel associated with the determined problem;

program instructions to determine a plurality of restricted graphical user interface panels associated with the graphical user interface,

program instructions to determine the plurality of appropriate permissions based on the plurality of restricted graphical user interface panels and the plurality of anonymized data to fix the determined problem; and

program instructions to present to the user the determined plurality of appropriate permissions.