SYSTEM AND METHOD FOR ONLINE ACCESS CONTROL BASED ON USERS SOCIAL NETWORK CONTEXT

• US 20140041055A1
• Filed: 08/06/2012
• Published: 02/06/2014
• Est. Priority Date: 08/06/2012
• Status: Abandoned Application

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Shaffer, Shmuel, Seligmann, Doree Duncan, Klemm, Reinhard P.
• Application Number:
  US13/567,301
• Publication Number:
  US 20140041055A1
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06Q 10/10 Office automation; Time management

Abstract

System and method to control access by a user to an online service, the method including: receiving a request from a user to use an application; identifying, via a processor of a computing device, a social networking characteristic of the user; classifying the user based upon the social networking characteristic, to produce a classification of the user; and controlling an access to the online service based upon the classification of the user. The characteristic may be public or private. Controlling access may include permitting, impeding, or facilitating access. Display of a link may be changed, and/or the processing of the link if selected may be changed. Users may be classified at least as preferred, malicious, non-malicious, non-target and generic default.

Claims

1. A method to control access by a user to an online service,

comprising:

receiving a request from a user to use an application;

identifying, via a processor of a computing device, a social networking characteristic of the user;

classifying the user to one of a set of classifications based upon the social networking characteristic, to produce a classification of the user, wherein the set of classifications comprises preferred, non-target and malicious; and

controlling a level of access to the online service based upon the classification of the user.

2. The method of claim 1, wherein the social networking characteristic comprises a geographic source identifier of other posts from the user.

3. The method of claim 1, wherein the social networking characteristic comprises an IP address of the user.

4. The method of claim 1, wherein the social networking characteristic comprises a subnet address of the user.

5. The method of claim 1, wherein the social networking characteristic is publicly available.

6. The method of claim 1, wherein the social networking characteristic is private, the method further comprising:

requesting authorization from the user to access the social networking characteristic.

7. The method of claim 1, wherein controlling an access comprises permitting the user to use the online service.

8. The method of claim 1, wherein controlling an access comprises discarding a request from the user to use the online service.

9. The method of claim 8, further comprising the step of posting a notification message on a social media, to notify the user that the request was denied as having been originated from a malicious user.

10. The method of claim 1, wherein controlling an access comprises determining whether to display an online link to the user to use the online service.

11. The method of claim 1, further comprising:

classifying the user as one of a malicious user and a non-target user, based upon the social networking characteristic; and

controlling an access permission by impeding access to the online service.

12. The method of claim 1, further comprising:

classifying the user as a target user, based upon the social networking characteristic; and

controlling an access permission by facilitating access to the online service.

13. A system to control access by a user to an online service, comprising:

a receiver configured to receive a request from a user to use an application;

a processor of a computing device configured to identify a social networking characteristic of the user;

a classifier module configured to classify the user to one of a set of classifications based upon the social networking characteristic, to produce a classification of the user, wherein the set of classifications comprises preferred, non-target and malicious; and

a control module configured to control a level of access to the online service based upon the classification of the user.

14. The system of claim 13, wherein the social networking characteristic is publicly available.

15. The system of claim 13, wherein the social networking characteristic is private, the system further comprising:

requesting authorization from the user to access the social networking characteristic.

16. The system of claim 13, wherein controlling an access comprises permitting the user to use the online service.

17. The system of claim 13, wherein controlling an access comprises discarding a request from the user to use the online service.

18. The system of claim 17, further comprising a module configured to notify the user that the request was denied as having been originated from a malicious user.

19. The system of claim 13, wherein controlling an access comprises determining whether to display an online link to the user to use the online service.

20. The system of claim 13, further comprising:

classifying the user as one of a malicious user and a non-target user, based upon the social networking characteristic; and

controlling an access permission by impeding access to the online service.

21. The system of claim 13, further comprising:

classifying the user as a target user, based upon the social networking characteristic; and

controlling an access permission by facilitating access to the online service.