Dynamic enterprise security control based on user risk factors

Abstract

Aspects dynamically set enterprise-level security rules by assessing risk factors associated with a user. Risk values representing likelihoods of loss of enterprise secure data are determined for different attributes of a user, and added together to generate a user risk factor. If the risk factor does not meet one or more off-site access threshold value(s), additional security enhancements applicable to the user and not enabled within currently applied security are iteratively selected and used to revise the security settings, and the risk factor is revised by a risk abrogation value of each of the selected security enhancements, until either the revised risk factor meets the off-site access threshold value(s) (wherein access is granted to the secure data from the off-site location pursuant to the revised security settings), or until no additional applicable security enhancements are available (wherein user access to the secure data from the off-site location is denied).

Description

TECHNICAL FIELD[0001]Aspects of the present invention relate to computer and other programmable device security, and more particularly to enterprise level data security software implementations for controlling data access by users via remote-access, converged communications, cloud environment and mobile device and application domains.BACKGROUND[0002]An enterprise may generally refer to a corporation, organization, department or other corporate structure wherein a plurality of different individuals work and function together toward a common purpose. Enterprise workspaces may feature local area network (LAN) security configurations that enable the access and sharing of data between enterprise storage devices and the devices of individual data users (employees, team members, consultants, students, etc.) while providing robust protection to secure data from outside access by requests originating outside of the LAN. However, such users may work from home or other locations away from cont...

AI Technical Summary

Benefits of technology

The present invention provides a method for dynamically setting enterprise-level security rules as a function of assessing risk factors associated with a user. The method involves determining risk values for various attributes of the user, adding them together to generate a risk factor, and comparing it to off-site access threshold values. If the risk factor meets the threshold values, the method applies the security settings associated with the user and grants access to the enterprise secure data from an off-site location. If not, the method iteratively selects additional security enhancements and revises the security settings until either the risk factor meets the threshold values or the user is no longer considered a risk. The invention helps to ensure that only authorized users have access to enterprise secure data, reducing the risk of data loss and unauthorized access.

Problems solved by technology

The risk values each represent a likelihood of loss of secure data of an enterprise as a function of association of the respective attribute with the user.

The risk values each represent a likelihood of loss of secure data of an enterprise as a function of association of the respective attribute with the user.

The risk values each represent a likelihood of loss of secure data of an enterprise as a function of association of the respective attribute with the user.

The risk values each represent a likelihood of loss of secure data of an enterprise as a function of association of the respective attribute with the user.

Images