Permissions Based on Behavioral Patterns

• US 20120222132A1
• Filed: 02/25/2011
• Published: 08/30/2012
• Est. Priority Date: 02/25/2011
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Burger, Douglas C., Davis, Marc Eliot, Horvitz, Eric J.
• Application Number:
  US13/035,603
• Publication Number:
  US 20120222132A1
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

Users may choose to have their behavior analyzed in order to infer default sharing permission settings for documents and other information maintained in one or more computer systems. This may increase information security for the users and streamline implementation of privacy and/or sharing permissions. The default sharing permissions are implemented by a computer system as soft permissions that may be used to determine which documents are to be shared with which recipients. The soft permissions may address sharing situations for which a user has not expressly indicated his or her sharing rules. The soft permissions may change over time in response to changing user behavior and/or the soft permissions may be revised in light of user feedback.

Claims

1. A system comprising:

a processor;

a memory communicatively coupled to the processor;

a potential recipient analysis module stored in the memory and executable at the processor to analyze data derived at least in part from interactions between a user and potential recipients of documents to determine a level of trust for individual ones of the potential recipients;

a document analysis module stored in the memory and executable at the processor to perform an analysis of the documents to determine a level of document privacy;

an inference module stored in the memory and executable at the processor to derive soft permissions for sharing the documents based at least in part on the level of trust and the level of document privacy; and

an implementation module stored in the memory and executable at the processor to implement soft permissions derived by the inference module.

2. The system of claim 1, wherein the interactions between the user and the potential recipients comprise one or more of an e-mail exchange, a sharing of documents, or a categorization of one or more of the potential recipients by the user.

3. The system of claim 1, wherein the interactions between the user and the potential recipients comprise one or more of both the user and the potential recipients receiving an invitation to a same location at a same time or both the user and the potential recipients being present at the same location at the same time.

4. The system of claim 1, wherein the analysis comprises one or more of an analysis of text within the documents, analysis of metadata associated with the documents, or analysis of a type of document.

5. The system of claim 1, wherein the inference module is further configured to derive the soft permissions using one or more of a support vector machine, a neural network, an expert system, a Bayesian belief network, a decision tree, fuzzy logic, or a probabilistic classification model.

6. The system of claim 1, wherein the implementation module implements the soft permissions by one or more of:

automatically applying the soft permissions to share a one of the documents;

or

querying the user regarding sharing the one of the documents according to the soft permissions.

7. The system of claim 1, further comprising a permissions database comprising one or more hard permissions explicitly provided by the user, wherein inference module is further configured to derive the soft permissions based at least in part on the hard permissions.

8. The system of claim 1, further comprising a recommendation generator configured to identify one or more documents or one or more potential recipients for which a currently applied sharing permission results in a different sharing decision than one of the soft permissions and generating a recommendation to change the currently applied sharing permission.

9. A computer-implemented method comprising:

under control of one or more processors configured with executable instructions,

analyzing an action of a user related to sharing a first document with a recipient;

deriving, based at least in part on the analyzing, a soft permission for sharing documents;

determining potential recipients of a second document, the determining based at least in part on the soft permission; and

applying the soft permission to the second document.

10. The computer-implemented method of claim 9, wherein the action of the user comprises the user providing an explicit rule for sharing the first document with the recipient.

11. The computer-implemented method of claim 9, wherein the action of the user comprises the user sharing the first document with the recipient.

12. The computer-implemented method of claim 9, wherein the action of the user comprises behavior that indicates a strength and type of relationship with a potential recipient.

13. The computer-implemented method of claim 12, wherein the strength and type of relationship with the potential recipient is based at least in part on a relationship between the user and a third person and a relationship between the potential recipient and the third person.

14. The computer-implemented method of claim 9, wherein the analysis comprises an inference based at least in part upon a mathematical model of past actions of the user.

15. The computer-implemented method of claim 9, wherein the deriving the soft permission is based in part on a classification of one or more of the potential recipients.

16. The computer-implemented method of claim 9, wherein the deriving the soft permission is based in further part on a classification of the second document.

17. One or more computer-readable media storing computer-executable instructions that, when executed by a processor, configure the processor to perform acts comprising:

generating a soft permission for sharing documents based at least in part on inferences derived from past document sharing behavior of a user;

receiving feedback from the user regarding the soft permission; and

modifying the soft permission based at least in part on the feedback from the user.

18. The one or more computer storage media of claim 17, wherein the feedback comprises the user explicitly indicating a hard permission that is at least partially inconsistent with the soft permission.

19. The one or more computer storage media of claim 17, wherein the feedback comprises the user sharing a document in a manner that is at least partially inconsistent with the soft permission.

20. The one or more computer storage media of claim 17, wherein the modifying comprises regenerating the soft permission based at least in part on inferences derived from the past document sharing behavior of the user and from the feedback from the user.

21. The one or more computer storage media of claim 20, further comprising determining that the user feedback indicates more restrictive sharing than the soft permission, the regenerating the soft permission utilizes inferences biased against sharing documents.

22. The one or more computer storage media of claim 17, further comprising recommending a change to an other sharing permission based at least in part on the modifying the soft permission.

23. A system comprising:

a processor;

a memory communicatively coupled to the processor;

a potential recipient analysis module stored in the memory and executable at the processor to generate a social graph based at least in part on analysis of relationships between the user and a plurality of potential recipients;

a document analysis module stored in the memory and executable at the processor to perform an analysis of the documents to determine a level of document privacy;

an inference module stored in the memory and executable at the processor to derive soft permissions for sharing the documents based at least in part on the social graph and the level of document privacy; and

an implementation module stored in the memory and executable at the processor to implement a sharing action.

24. The system of claim 23, wherein the relationships between the user and the potential recipients are received from an external system maintaining, at least in part, a social network that includes the user and one or more of the plurality of potential recipients.

25. The system of claim 23, wherein the inference module derives the soft permissions based at least in part on a number of degrees of separation in the social graph between the user and one of the plurality of potential recipients.

26. The system of claim 23, wherein the sharing action is selected from one of:

sharing one or more of the documents with one or more of the potential recipients, preventing sharing of one or more of the documents with one or more of the potential recipients, querying the user, or seeking additional information from a source other than the user.

27. The system of claim 26, wherein the sharing action is selected based at least in part on a confidence level assigned to each of multiple sharing actions, the confidence level determined at least in part by machine learning.