Novel Technology for Securing Access to an Enterprise Information System Through a Natural Language Interface

• US 20190319959A1
• Filed: 04/27/2018
• Published: 10/17/2019
• Est. Priority Date: 04/14/2018
• Status: Active Application

• Current Assignee: Ergonomic Group, Inc.
• Original Assignee: Ergonomic Group, Inc.
• Inventors: Gaffney, Gene F.
• Application Number:
  US15/965,831
• Publication Number:
  US 20190319959A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

Technology for securing a user'"'"'s access to enterprise information through a natural language interface is disclosed. A system for securing access includes computer structures working in concert to identify the user'"'"'s access permissions based on the initial request, collect further information from the user as required to update or further determine the user'"'"'s permissions, and to choose a response communication channel appropriate to the user'"'"'s request. A method for securing access includes receiving a request from a user, determining the user'"'"'s access permissions, formulating a response based on the user'"'"'s permissions, choosing the appropriate communication channel for the response, and initiating transmission of the response.

Claims

1. A method for securing natural language access to enterprise information, the method comprising:

(a) receiving a request for access to enterprise information from a user through a natural language interface, wherein the request for access is entered by the user through a user device and includes an indication of the user'"'"'s identity;

(b) determining, based on the indication of the user'"'"'s identity, whether the user is authorized for the requested access;

(c) formulating a response to the request for access to enterprise information based on whether the user is authorized for the requested access;

(d) choosing, based on the enterprise information to which the user requested access, a communication channel for responding to the request for access to enterprise information; and

(e) initiating sending of the response.

2. The method of claim 1 further comprising:

(a) requesting further information from the user if the determining step determines that the user is not authorized for the requested access, wherein the requesting further information is through the natural language interface;

(b) receiving the further information from the user; and

(c) further determining, based on the further information, whether the user is authorized for the requested access.

3. The method of claim 2 wherein receiving the further information is through the natural language interface.

4. The method of claim 2 further comprising providing a link to the user through the natural language interface and wherein receiving the further information is through the link.

5. The method of claim 2 wherein the further information is one of the group consisting of a scan of the user'"'"'s fingerprint, a scan of the user'"'"'s face, and a scan the user'"'"'s retina.

6. The method of claim 1 wherein the request for access includes an indication of the user'"'"'s geographic location, the method further comprising determining, based on the indication of the user'"'"'s location, whether the user is authorized for the requested access.

7. The method of claim 1 further comprising determining, based on the time of the request is received, whether the user is authorized for the requested access.

8. The method of claim 1 wherein the request for access includes an indication of the identity of the device through which the user entered the request, the method further comprising determining, based on the indication of the identity of the device, whether the user is authorized for the requested access.

9. The method of claim 1 wherein the request for access includes an indication of the IP address of the device through which the user entered the request, the method further comprising determining, based on the indication of the IP of the device, whether the user is authorized for the requested access.

10. The method of claim 1 further comprising:

(a) requesting further information from the user if the determining step determines that the user is conditionally authorized for the requested access, wherein the requesting further information is through the natural language interface;

(b) receiving the further information from the user; and

(c) further determining, based on the further information, whether a condition for user access is satisfied.

11. The method of claim 10 wherein the further information is one of the group consisting of a scan of the user'"'"'s fingerprint, a scan of the user'"'"'s face, a scan of the user'"'"'s retina, a recording of the user'"'"'s voice, a solution to a CAPTCHA challenge, and a biometric entry of a code.

12. The method of claim 10 wherein the further information is one of the group consisting of the user'"'"'s device'"'"'s MAC address, and the user'"'"'s device'"'"'s IP address, the user'"'"'s device'"'"'s UDID, the user'"'"'s device'"'"'s IMEI, the user'"'"'s device IMSI, the user'"'"'s device'"'"'s MEID, the user'"'"'s device'"'"'s ICID, the user'"'"'s device'"'"'s ESN, the user'"'"'s device'"'"'s serial number, the user'"'"'s device'"'"'s ANDROID ID, the user'"'"'s device'"'"'s UUID, and the user'"'"'s device'"'"'s GPS coordinates.

13. The method of claim 10 wherein receiving the further information is through the natural language interface.

14. The method of claim 10 further comprising providing a link to the user through the natural language interface and wherein receiving the further information is through the link.

15. The method of claim 1 further comprising:

(a) choosing a further-information communication channel based on the request for access;

(b) requesting further information from the user through the further-information communication channel;

(c) receiving the further information from the user;

(d) further determining, based on the further information, whether a condition for user access is satisfied.

16. A computer system for securely processing a user'"'"'s natural-language request for access to enterprise information, the computer system comprising:

(a) a means for determining, based on a user'"'"'s natural-language request for access to enterprise information, whether the user is authorized for access to enterprise information requested by the user;

(b) a means for collecting and processing further information from the user, wherein the collecting and processing the further information is to further determine whether the user is authorized for the requested access to enterprise information; and

(c) a means for choosing a communication channel based on the requested access.

17. A computer system for securing natural language access to enterprise information, the system comprising a processor configured to:

(a) receive a request for access to enterprise information from a user through a natural language interface wherein the request includes user-identifying information;

(b) determine whether the user is authorized for the requested access to enterprise information by comparing the user-identifying information with a list of authorized users, wherein the list includes entries defining, for each authorized user on the list, a permitted access to enterprise information for the authorized user; and

(c) choose a communications channel based on the enterprise information to which the user requests access by comparing the enterprise information to which the user requests access to a list of enterprise information, wherein the list includes entries defining a communication channel for each item of enterprise information on the list.

18. The computer system of claim 17 wherein the processor is further configured to:

(a) prompt the user to provide further information by sending a request for further information to the user through the natural language interface, wherein the request for further information includes an identification of a communication channel by which the user is to provide the further information; and

(b) further determine whether the user is authorized for the requested access to enterprise information by comparing the further information provided by the user with a list of authorized users, wherein the list includes entries defining, for each authorized user on the list, a permitted access to enterprise information for the authorized user.

19. The computer system of claim 17 wherein the processor is further configured to:

(a) choose a communication channel based on the user'"'"'s request for access;

(b) prompt the user to provide further information by sending a request for further information to the user through the communication channel, wherein the request for further information includes an identification of a communication channel by which the user is to provide the further information; and

(c) further determine whether the user is authorized for the requested access to enterprise information by comparing the further information provided by the user with a list of authorized users, wherein the list includes entries defining, for each authorized user on the list, a permitted access to enterprise information for the authorized user.

20. The computer system of claim 17 wherein the processor is a distributed processor comprising multiple processor units.