END POINT REPUTATION CREDENTIAL FOR CONTROLLING NETWORK ACCESS

• US 20160381022A1
• Filed: 06/24/2015
• Published: 12/29/2016
• Est. Priority Date: 06/24/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Jackson, Vernon A., Larsen, Andrew R., Leeder, Glen J., McCane, Gregory O., Rathi, Anand
• Granted Patent: US 10,536,448 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

In an approach for controlling access to a resource a processor monitors a first set of traffic of a computing device. A processor calculates reputation based on the first set of traffic of the computing device. A processor associates the reputation with the computing device. A processor receives a request to access a resource from the computing device. A processor determines whether the computing device shall be granted access to the resource based on the reputation.

Claims

1. A method for controlling access to a resource, the method comprising:

monitoring, by one or more hardware processors, a first set of usage of a computing device;

calculating, by one or more hardware processors, a reputation based on the first set of usage of the computing device;

associating, by one or more hardware processors, the reputation with the computing device;

receiving, by one or more hardware processors, a request to access a resource from the computing device; and

determining, by one or more hardware processors, whether the computing device shall be granted access to the resource based on the reputation.

2. The method of claim 1, further comprising:

monitoring, by one or more hardware processors, a second set of usage of a computing device;

determining, by one or more hardware processors, that the second set of usage of the computing device affects the reputation of the computing device;

adjusting;

by one or more hardware processors, the reputation based on the second set of usage of the computing device; and

wherein determining whether the computing device is granted access to the resource comprises determining, by one or more hardware processors, whether the computing device is granted access to the resource based on the adjusted reputation.

3. The method of claim 1, further comprising:

responsive to determining that the computing device shall be granted access to the resource, granting, by one or more hardware processors, the computing device access to the resource.

4. The method of claim 1, further comprising:

responsive to determining that the computing device shall not be granted access to the resource, denying, by one or more hardware processors, the computing device access to the resource.

5. The method of claim 4, further comprising:

receiving, by one or more hardware processors, a command to override the access denial; and

granting, by one or more hardware processors, the computing device access to the resource.

6. The method of claim 4, further comprising:

generating, by one or more hardware processors, an alert indicating that the computing device has been denied access to the resource.

21. The method of claim 2, wherein usage includes traffic data received and sent by the computing device, wherein the traffic data comprises a webpage visited, an application used, a server accessed, a database accessed, and an additional computing device communicated with.

22. The method of claim 1, wherein the second set of usage of the computing device comprises positive usage, wherein positive usage comprises visiting an approved webpage and accessing an approved database.

23. The method of claim 1, wherein the second set of usage of the computing device comprises negative usage, wherein negative usage comprises visiting a restricted webpage and using a restricted application, wherein the restricted webpage includes a predetermined trigger word selected from the group consisting of sexually explicit words, profanities, words related to job hunting, words associated with stereotypes, and words related to competitors.

7. (canceled)

8. A computer program product for controlling access to a resource,

the computer program product comprising:

one or more computer readable storage devices and program instructions stored on the one or more computer readable storage devices, the program instructions comprising;

program instructions to monitor a first set of usage of a computing device;

program instructions to calculate a reputation based on the first set of usage of the computing device;

program instructions to associate the reputation with the computing device;

program instructions to receive a request to access a resource from the computing device; and

program instructions to determine whether the computing device shall be granted access to the resource based on the reputation.

9. The computer program product of claim 8, further comprising:

program instructions, stored on the one or more computer readable storage devices, to monitor a second set of usage of a computing device;

program instructions, stored on the one or more computer readable storage devices, to determine that the second set of usage of the computing device affects the reputation of the computing device;

program instructions, stored on the one or more computer readable storage devices, to adjust the reputation based on the second set of traffic of the computing device; and

wherein program instructions to determine whether the computing device is granted access to the resource comprise program instructions to determine whether the computing device is granted access to the resource based on the adjusted reputation.

10. The computer program product of claim 8, further comprising:

program instructions, stored on the one or more computer readable storage devices, to responsive to the program instructions to determine that the computing device shall be granted access to the resource, grant the computing device access to the resource.

11. The computer program product of claim 8, further comprising:

program instructions, stored on the one or more computer readable storage devices, to responsive to the program instructions to determine that the computing device shall not be granted access to the resource, deny the computing device access to the resource.

12. The computer program product of claim 11, further comprising:

program instructions, stored on the one or more computer readable storage devices, to receive a command to override the access denial; and

program instructions, stored on the one or more computer readable storage devices, to grant the computing device access to the resource.

13. The computer program product of claim 11, further comprising:

program instructions, stored on the one or more computer readable storage devices, to generate an alert indicating that the computing device has been denied access to the resource.

14. (canceled)

15. A computer system for controlling access to a resource, the computer program product comprising:

one or more computer hardware processors, one or more computer readable storage devices, and program instructions stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, the program instructions comprising;

program instructions to monitor a first set of traffic of a computing device;

program instructions to calculate a reputation based on the first set of traffic of the computing device;

program instructions to associate the reputation with the computing device;

program instructions to receive a request to access a resource from the computing device; and

program instructions to determine whether the computing device shall be granted access to the resource based on the reputation.

16. The computer system of claim 15, further comprising:

program instructions, stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, to monitor a second set of traffic of a computing device;

program instructions, stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, to determine that the second set of traffic of the computing device affects the reputation of the computing device;

program instructions, stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, to adjust the reputation based on the second set of traffic of the computing device; and

wherein program instructions to determine whether the computing device is granted access to the resource comprise program instructions to determine whether the computing device is granted access to the resource based on the adjusted reputation.

17. The computer system of claim 15, further comprising:

program instructions, stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, to responsive to the program instructions to determine that the computing device shall be granted access to the resource, grant the computing device access to the resource.

18. The computer system of claim 15, further comprising:

program instructions, stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, to responsive to the program instructions to determine that the computing device shall not be granted access to the resource, deny the computing device access to the resource.

19. The computer system of claim 18, further comprising:

program instructions, stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, to receive a command to override the access denial; and

program instructions, stored on the one or more computer readable storage devices for execution by at least one of the one or more hardware processors, to grant the computing device access to the resource.

20. (canceled)