Gathering, storing and using reputation information

• US 9,268,965 B2
• Filed: 06/26/2014
• Issued: 02/23/2016
• Est. Priority Date: 10/04/2010
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hom, Richard V., Nelson, Eric M., Roxin, David C.
• Primary Examiner(s): Arani, Taghi
• Assistant Examiner(s): PLECHA, THADDEUS J
• Application Number:
  US14/315,545
• Publication Number:
  US 20140310806A1
• Time in Patent Office: 607 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/1057 involving pre-assessment of levels of reputation of peers

Abstract

Approaches for using the historical party reputation data to calculate an access decision rating are provided. Specifically, one or more approaches provide a method, including: collecting reputation information of a first user that is requesting access to one or more assets, the reputation information based on at least an association of the first user with an organization and an association of the first user with one or more other users associated with one or more other organizations; storing the requester'"'"'s reputation information; determining a change in the requester'"'"'s reputation information, wherein the change comprises at least one of: the first user forming a new association with another organization, and the first user forming a new association with a second user, wherein the second user is affiliated with another organization; and causing an access decision rating to be calculated based upon the determined change in the requester'"'"'s reputation information.

Claims

1. A method of managing security for one or more computerized assets, the method comprising:

collecting, from disparate data sources by at least one computing device, reputation information of a first user that is requesting access to the one or more computerized assets, the reputation information based on at least an association of the first user with a first organization and an association of the first user with one or more other users associated with at least one second organization;

storing, by the at least one computing device, the first user'"'"'s reputation information in a memory storage device;

determining, by the at least one computing device, a change in the first user'"'"'s reputation information, wherein the change comprises at least one of;

the first user forming a first new association with an organization other than the first organization, or the first user forming a second new association with a second user, wherein the second user is affiliated with the organization other than the first organization; and

causing, by the at least one computing device, an access decision rating to be calculated based upon the determined change in the first user'"'"'s reputation information.

2. The method as defined in claim 1 further comprising accessing, using the at least one computing device, the access decision rating when an access decision is necessary.

3. The method as defined in claim 1 further comprising storing, using the at least one computing device, the access decision rating calculated based upon the determined change in the first user'"'"'s reputation information.

4. The method as defined in claim 1 further comprising calculating, using the at least one computing device, an initial access decision rating based upon the first user'"'"'s collected reputation information prior to calculating the access decision rating based upon the determined change in the first user'"'"'s reputation information.

5. The method as defined in claim 4, further comprising storing, using the at least one computing device, the initial access decision rating that is based upon the first user'"'"'s collected reputation information.

6. The method as defined in claim 1, wherein the second user has a familial relationship with the first user.

7. A computer-readable storage device storing computer instructions, which, when executed, enables a computer system to manage security for one or more computerized assets, the computer-readable storage device storing computer instructions comprising:

collecting, from disparate data sources, reputation information of a first user that is requesting access to the one or more computerized assets, the reputation information based on at least an association of the first user with an organization and an association of the first user with at least one second organization;

storing the first user'"'"'s reputation information in a memory storage device;

determining a change in the first user'"'"'s reputation information, wherein the change comprises at least one of;

the first user forming a first new association with an organization other than the first organization, or the first user forming a second new association with a second user, wherein the second user is affiliated with the organization other than the first organization; and

causing an access decision rating to be calculated based upon the determined change in the first user'"'"'s reputation information.

8. The computer-readable storage device of claim 7, wherein the computer instructions further comprise accessing the access decision rating when an access decision is necessary.

9. The computer-readable storage device of claim 7, wherein the computer instructions further comprise storing the access decision rating calculated based upon the determined change in the first user'"'"'s reputation information.

10. The computer-readable storage device of claim 7, wherein the computer instructions further comprise calculating an initial access decision rating based upon the first user'"'"'s collected reputation information prior to calculating the access decision rating based upon the determined change in the first user'"'"'s reputation information.

11. The computer-readable storage device of claim 10, wherein the computer instructions further comprise storing the initial access decision rating that is based upon the first user'"'"'s collected reputation information.

12. The computer-readable storage device of claim 7, wherein the second user has a familial relationship with the first user.

13. A computer system for managing security for one or more computerized, the system comprising:

a memory medium comprising instructions;

a bus coupled to the memory medium; and

a processor coupled to the bus that when executing the instructions causes the computer system to;

collect, from disparate data sources, reputation information of a first user that is requesting access to the one or more computerized assets, the reputation information based on at least an association of the first user with an organization and an association of the first user with at least one second organization;

store the first user'"'"'s reputation information in a memory storage device;

determine a change in the first user'"'"'s reputation information, wherein the change comprises at least one of;

the first user forming a first new association with an organization other than the first organization, or the first user forming a second new association with a second user, wherein the second user is affiliated with the organization other than the first organization; and

cause an access decision rating to be calculated based upon the determined change in the first user'"'"'s reputation information.

14. The computer system of claim 13, wherein the instructions further cause the computer system to access the access decision rating when an access decision is necessary.

15. The computer system of claim 13, wherein the instructions further cause the computer system to store the access decision rating calculated based upon the determined change in the first user'"'"'s reputation information.

16. The computer system of claim 13, wherein the instructions further cause the computer system to calculate an initial access decision rating based upon the first user'"'"'s collected reputation information prior to calculating the access decision rating based upon the determined change in the first user'"'"'s reputation information.

17. The computer system of claim 16, wherein the instructions further cause the computer system to store the initial access decision rating that is based upon the first user'"'"'s collected reputation information.

18. The computer system of claim 13, wherein the second user has a familial relationship with the first user.

19. The computer system of claim 13, wherein the second user is the first user'"'"'s spouse.