SYSTEM AND METHOD FOR DYNAMICALLY AWARDING PERMISSIONS

• US 20140380423A1
• Filed: 06/24/2013
• Published: 12/25/2014
• Est. Priority Date: 06/24/2013
• Status: Abandoned Application

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Wong, Wayne, Krack, Michael, Wong, Jeffrey, Pugalia, Jai, Shero, Lee, Buddhisagar, Rahul
• Application Number:
  US13/924,788
• Publication Number:
  US 20140380423A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An authorization system for dynamically awarding permissions to a requestor for performing an action, based on real-time monitored statistics of the requestor. The authorization system comprises a processor and a memory. The memory further comprises a status database for storing real-time information corresponding to the requestor, and a rules database for storing rules to enable the authorization system in determining permissions for various requestors'"'"' requests to perform the action. Additionally, the memory includes a status determining module for determining status-data related to the requestor, and a permission awarding module to evaluate the status-data with a dynamically selected set of rules for awarding permission to a requestor'"'"'s request. The memory further includes a risk estimation module for calculating risk associated in awarding the permission, and an action triggering module for triggering an associated action based on the calculated risk.

Claims

1. An authorization system comprising:

a processor coupled to a memory, the memory configured to store instructions that, when executed by the processor, provide;

a status determining module for determining status-data related to a requestor based on a request from the requestor to perform an action, wherein the status-data comprises real-time data related to the requestor; and

a permission awarding module for evaluating the status-data based on dynamically selected set of rules to award permission to the requestor for performing the action based on the evaluation.

2. The authorization system of claim 1, wherein the dynamically selected set of rules comprises selecting different rules for different requestors based on status-data of the requestors.

3. The authorization system of claim 1, wherein the real-time data related to the requestor comprises behavior history of the requestor.

4. The authorization system of claim 1, wherein the real-time data related to the requestor comprises medical condition of the requestor.

5. The authorization system of claim 1, wherein the real-time data related to the requestor comprises location of the requestor.

6. The authorization system of claim 1, wherein the real-time data related to the requestor comprises progress report of the requestor.

7. The authorization system of claim 1, wherein the status determining module retrieves the status-data from an external repository or device.

8. The authorization system of claim 7, wherein the external repository comprises one of a calendar, or a social networking repository.

9. The authorization system of claim 1, wherein the requestor is one of a human or a device.

10. The authorization system of claim 1, further comprising a risk calculation module for calculating a risk in awarding permission.

11. The authorization system of claim 10, further comprising an action triggering module for triggering an action based on the calculated risk.

12. The authorization system of claim 11, wherein the action triggering module comprises a communication interface configured to send a notification to a supervisor of the requestor.

13. The authorization system of claim 1, further comprising a rules configuring module for allowing an administrator to configure set of rules.

14. A computer-implemented method for authorizing a requestor to perform an action, the computer-implemented method comprising:

receiving a request from the requestor to perform the action;

determining status-data corresponding to the requestor based on the request;

evaluating the status-data based on dynamically selected set of rules; and

authorizing the requestor to perform the action based on the evaluation.

15. The computer-implemented method of claim 14, further comprising the step of determining a risk based on the evaluation.

16. The computer-implemented method of claim 15, further comprising the step of triggering an action based on the determined risk.

17. The computer-implemented method of claim 16, wherein the step of triggering an action comprises the step of sending a notification to a supervisor of the requestor.

18. The computer-implemented method of claim 14, wherein the step of determining status-data comprises the step of retrieving real-time data corresponding to the requestor from an external repository or device.

19. The computer-implemented method of claim 14, wherein the request to perform the action comprises a request to access a shared resource.

20. A non-volatile computer readable medium configured to store computer readable instructions that, when executed by a processor, perform a method comprising the steps of:

receiving, via a communication interface, a request from a requestor to perform an action;

determining status-data corresponding to the requestor based on the request;

evaluating, by the processor, the status-data based on dynamically selected set of rules; and

authorizing the requestor to perform the action based on the evaluation.