Systems and methods of secure self-service access to content

• US 9,563,782 B1
• Filed: 04/10/2015
• Issued: 02/07/2017
• Est. Priority Date: 04/10/2015
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: Dell Software, Inc. (Dell Technologies Inc.)
• Inventors: Le Rudulier, Olivier, Brisebois, Michel Albert, Johnstone, Curtis T.
• Primary Examiner(s): Brown, Anthony
• Application Number:
  US14/683,462
• Time in Patent Office: 669 Days
• Field of Search: 726 26- 30
• US Class Current: 1/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

In an embodiment, a method includes receiving a request from a controlling user to publish particular content. The method also includes determining at least one topic of the particular content. The method further includes allowing the controlling user to select need-to-know criteria, the need-to-know criteria comprising one or more thresholds relating to a prevalence of the at least one topic in logged conversations of a requesting user. In addition, the method includes allowing a controlling user to select a trust threshold, wherein the trust threshold relates, at least in part, to a quantitative analysis of logged behavior of a requesting user on the communications platform. Further, the method includes generating based, at least in part, on the need-to-know criteria and the trust threshold, a self-service access policy for the particular content. Also, the method includes activating the self-service access policy as to the particular content.

Claims

1. A method comprising, by a computer system:

receiving a request from a controlling user to publish particular content for automated self-service access;

determining at least one topic of the particular content;

allowing the controlling user to select need-to-know criteria, the need-to-know criteria comprising one or more thresholds relating to a prevalence of the at least one topic in logged conversations of a requesting user on a communications platform;

allowing a controlling user to select a trust threshold, wherein the trust threshold relates, at least in part, to a quantitative analysis of logged behavior of a requesting user on the communications platform;

generating based, at least in part, on the need-to-know criteria and the trust threshold, a self-service access policy for the particular content; and

activating the self-service access policy as to the particular content.

2. The method of claim 1, comprising automatically processing access requests by users according to the self-service access policy.

3. The method of claim 2, comprising reporting to the controlling user each granted access to the particular content.

4. The method of claim 2, comprising reporting each granted access to a manager of a corresponding requesting user.

5. The method of claim 2, comprising:

receiving a request from the controlling user to revoke a granted access to the particular content; and

causing the granted access to be revoked.

6. The method of claim 1, wherein the determining the at least one topic comprises allowing the controlling user to select the at least one topic from a global set of topics.

7. The method of claim 1, wherein the determining the at least one topic comprises ingesting words and phrases of the particular content.

8. The method of claim 1, comprising:

allowing the controlling user to specify real-time access criteria related to a user context of a requesting user; and

wherein the self-service access policy is based, at least in part, on the real-time access criteria.

9. An information handling system comprising:

at least one processor, wherein the at least one processor is operable to implement a method comprising;

receiving a request from a controlling user to publish particular content for automated self-service access;

determining at least one topic of the particular content;

allowing the controlling user to select need-to-know criteria, the need-to-know criteria comprising one or more thresholds relating to a prevalence of the at least one topic in logged conversations of a requesting user on a communications platform;

allowing a controlling user to select a trust threshold, wherein the trust threshold relates, at least in part, to a quantitative analysis of logged behavior of a requesting user on the communications platform;

generating based, at least in part, on the need-to-know criteria and the trust threshold, a self-service access policy for the particular content; and

activating the self-service access policy as to the particular content.

10. The information handling system of claim 9, the method comprising automatically processing access requests by users according to the self-service access policy.

11. The information handling system of claim 10, the method comprising reporting to the controlling user each granted access to the particular content.

12. The information handling system of claim 10, the method comprising reporting each granted access to a manager of a corresponding requesting user.

13. The information handling system of claim 10, the method comprising:

receiving a request from the controlling user to revoke a granted access to the particular content; and

causing the granted access to be revoked.

14. The information handling system of claim 9, wherein the determining the at least one topic comprises allowing the controlling user to select the at least one topic from a global set of topics.

15. The information handling system of claim 9, wherein the determining the at least one topic comprises ingesting words and phrases of the particular content.

16. The information handling system of claim 9, the method comprising:

allowing the controlling user to specify real-time access criteria related to a user context of a requesting user; and

wherein the self-service access policy is based, at least in part, on the real-time access criteria.

17. A computer-program product comprising a non-transitory computer-usable medium having computer-readable program code embodied therein, the computer-readable program code adapted to be executed to implement a method comprising:

receiving a request from a controlling user to publish particular content for automated self-service access;

determining at least one topic of the particular content;

allowing the controlling user to select need-to-know criteria, the need-to-know criteria comprising one or more thresholds relating to a prevalence of the at least one topic in logged conversations of a requesting user on a communications platform;

allowing a controlling user to select a trust threshold, wherein the trust threshold relates, at least in part, to a quantitative analysis of logged behavior of a requesting user on the communications platform;

generating based, at least in part, on the need-to-know criteria and the trust threshold, a self-service access policy for the particular content; and

activating the self-service access policy as to the particular content.

18. The computer-program product of claim 17, the method comprising automatically processing access requests by users according to the self-service access policy.

19. The computer-program product of claim 18, comprising reporting to the controlling user each granted access to the particular content.

20. The computer-program product of claim 18, comprising reporting each granted access to a manager of a corresponding requesting user.