TIME DEPENDENT ACCESS PERMISSIONS

• US 20110061093A1
• Filed: 08/24/2010
• Published: 03/10/2011
• Est. Priority Date: 09/09/2009
• Status: Abandoned Application

• Current Assignee: Varonis Systems, Inc.
• Original Assignee: Varonis Systems, Inc.
• Inventors: BASS, David, KRETZER-KATZIR, Ophir, FAITELSON, Yakov, KORKUS, Ohad
• Application Number:
  US12/861,967
• Publication Number:
  US 20110061093A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

A network object access permission management system useful with a computer network including at least one server and a multiplicity of clients, the system including an access permissions subsystem which governs access permissions of users to network objects in the computer network in real time and a future condition based permissions instruction subsystem providing instructions to the access permission subsystem to grant or revoke access permissions of the users to network objects in real time in response to future fulfillment of conditions which are established by an operator in advance.

Claims

1. A network object access permission management system useful with a computer network including at least one server and a multiplicity of clients, the system comprising:

an access permissions subsystem which governs access permissions of users to network objects in said computer network in real time; and

a future condition based permissions instruction subsystem providing instructions to said access permission subsystem to grant or revoke access permissions of said users to network objects in real time in response to future fulfillment of conditions which are established by an operator in advance.

2. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant or revoke access permissions of said users to said network objects at future times set in advance by said operator.

3. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant or revoke access permissions of said users to said network objects in response to the occurrence of future events selected in advance by said operator.

4. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant and thereafter revoke access permissions of said users to said network objects at future times set in advance by said operator.

5. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to revoke and thereafter regrant pre-existing access permissions of said users to said network objects at future times set in advance by said operator.

6. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant to said users access permissions to said network objects for a limited duration set in advance by said operator.

7. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant or revoke access permissions of said users to said network objects based on changes in at least one characteristic of at least one user of said network object indicated in advance by said operator.

8. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant or revoke access permissions of said users to said network objects based on changes in at least one characteristic of said network object indicated in advance by said operator.

9. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant or revoke access permissions of said users to said network objects based on activity of at least one user related to said network object as indicated in advance by said operator.

10. A network object access permission management system according to claim 1 and wherein said future condition based permission instruction subsystem provides instructions to said access permission subsystem to grant or revoke access permissions of said users to said network objects based on changes in at least one classification of said network object indicated in advance by said operator.

11. A network object access permission management method useful with a computer network including at least one server and a multiplicity of clients, the method comprising:

providing instructions to grant or revoke access permissions of users to network objects in real time in response to future fulfillment of conditions which are established by an operator in advance; and

governing access permissions of said users to network objects in said computer network in real time in response to said instructions.

12. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant or revoke access permissions of said users to said network objects at future times set in advance by said operator.

13. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant or revoke access permissions of said users to said network objects in response to the occurrence of future events selected in advance by said operator.

14. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant and thereafter revoke access permissions of said users to said network objects at future times set in advance by said operator.

15. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to revoke and thereafter regrant pre-existing access permissions of said users to said network objects at future times set in advance by said operator.

16. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant to said users access permissions to said network objects for a limited duration set in advance by said operator.

17. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant or revoke access permissions of said users to said network objects based on changes in at least one characteristic of at least one user of said network object indicated in advance by said operator.

18. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant or revoke access permissions of said users to said network objects based on changes in at least one characteristic of said network object indicated in advance by said operator.

19. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant or revoke access permissions of said users to said network objects based on activity of at least one user related to said network object as indicated in advance by said operator.

20. A network object access permission management method according to claim 11 and wherein said method includes providing instructions to grant or revoke access permissions of said users to said network objects based on changes in at least one classification of said network object indicated in advance by said operator.