Alertness Based Authorization

• US 20170063858A1
• Filed: 08/31/2015
• Published: 03/02/2017
• Est. Priority Date: 08/31/2015
• Status: Abandoned Application

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Inventors: Bandi, Sreenivasulu, Padmanabhan, Ragavendran, Mokhinuddeen, Shaik, Ainsworth, John
• Application Number:
  US14/840,182
• Publication Number:
  US 20170063858A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Various methods, apparatus, computer program products embodied on computer-readable storage mediums, and systems of providing alertness-based authorization include determining the alertness of a user and authorizing access permissions for that user based on the determined alertness. Although the user is associated with access permissions that are predefined, the access permissions actually authorized for that user are distinct from the predefined access permissions with which the user is associated.

Claims

1. A method comprising:

receiving an access request from a user associated with predefined access permissions;

determining an alertness score corresponding to the access request based on a test administered to the user;

authorizing access permissions for the user based on the alertness score, the authorized access permissions being distinct from the predefined access permissions.

2. The method of claim 1, further comprising authenticating the user based on credentials received in the access request.

3. The method of claim 1, wherein determining the alertness score corresponding to the access request based on the test administered to the user comprises administering a skill-based game, to the user, that produces the alertness score.

4. The method of claim 1, wherein authorizing access permissions for the user based on the alertness score comprises authorizing a modification of the predefined access permissions.

5. The method of claim 1:

wherein the predefined access permissions correspond to a first predefined access role;

wherein authorizing access permissions for the user based on the alertness score comprises authorizing access permissions that correspond to a second predefined access role that is distinct from the first predefined access role.

6. The method of claim 5, wherein authorizing access permissions that correspond to the second predefined access role comprises selecting, based on the alertness score, the second predefined access role from a plurality of other predefined access roles that are distinct from the first predefined access role.

7. The method of claim 1, wherein authorizing access permissions for the user based on the alertness score comprises authorizing access permissions for the user that are more limited than the predefined access permissions.

8. The method of claim 1, wherein authorizing access permissions for the user based on the alertness score comprises comparing the alertness score to a historical testing record of the user obtained from testing the user previous to receiving the access request.

9. The method of claim 1, wherein determining the alertness score corresponding to the access request based on the test administered to the user comprises determining a time required by the user to complete the test administered to the user.

10. The method of claim 1, wherein determining the alertness score corresponding to the access request based on the test administered to the user comprises determining an extent to which the test is correctly completed by the user.

11. A computing device comprising:

interface circuitry configured to exchange signals with a user;

processing circuitry communicatively coupled to the interface circuitry and configured to;

receive an access request from the user associated with predefined access permissions via the interface circuitry;

determine an alertness score corresponding to the access request based on a test administered to the user via the interface circuitry;

authorize access permissions for the user based on the alertness score, the authorized access permissions being distinct from the predefined access permissions.

12. The computing device of claim 11, wherein the processing circuitry is further configured to authenticate the user based on credentials received in the access request.

13. The computing device of claim 11, wherein to determine the alertness score corresponding to the access request based on the test administered to the user via the interface circuitry, the processing circuitry is configured to administer a skill-based game, to the user via the interface circuitry, that produces the alertness score.

14. The computing device of claim 11, wherein to authorize access permissions for the user based on the alertness score the processing circuitry is configured to authorize a modification of the predefined access permissions.

15. The computing device of claim 11:

wherein the predefined access permissions correspond to a first predefined access role;

wherein to authorize access permissions for the user based on the alertness score the processing circuitry is configured to authorize access permissions that correspond to a second predefined access role that is distinct from the first predefined access role.

16. The computing device of claim 15, wherein to authorize access permissions that correspond to the second predefined access role the processing circuitry is configured to select, based on the alertness score, the second predefined access role from a plurality of other predefined access roles that are distinct from the first predefined access role.

17. The computing device of claim 11, wherein to authorize access permissions for the user based on the alertness score the processing circuitry is configured to authorize access permissions for the user that are more limited than the predefined access permissions.

18. The computing device of claim 11, wherein to authorize access permissions for the user based on the alertness score the processing circuitry is configured to compare the alertness score to a historical testing record of the user obtained from testing the user previous to receiving the access request.

19. The computing device of claim 11, wherein to determine the alertness score corresponding to the access request based on the test administered to the user via the interface circuitry, the processing circuitry is configured to determine a time required by the user to complete the test administered to the user.

20. The computing device of claim 11, wherein to determine the alertness score corresponding to the access request based on the test administered to the user via the interface circuitry, the processing circuitry is configured to determine an extent to which the test is correctly completed by the user.

21. A computer-readable storage medium comprising executable code stored thereon that, when executed by processing circuitry of a computing device, configures the computing device to:

receive an access request from a user associated with predefined access permissions;

determine an alertness score corresponding to the access request based on a test administered to the user;

authorize access permissions for the user based on the alertness score, the authorized access permissions being distinct from the predefined access permissions.