Managing policies
A method, system and computer program product for use in managing policies is disclosed. Policies associated with a communications device are correlated with respective locations. The location of the communications device is determined. The policy correlated with the determined location is applied to the communications device.
1. A computer-implemented method, comprising:
providing, by processing circuitry, a plurality of policies, including a first policy related to a work location, a second policy related to a non-work location, and a third policy related to a non-visited location;
storing, by processing circuitry, a location history in connection with a user, wherein the location history identifies one or more locations visited by the user and/or one or more locations never visited by the user;
receiving, by processing circuitry, an authentication request originating from the user to access a computerized resource;
determining, by processing circuitry, a current location in connection with the authentication request;
assigning, by processing circuitry, a risk score to the authentication request based on one or more risk factors, wherein the risk factors include a first risk factor based on an analysis of the current location and the location history, wherein the risk factors include a second risk factor based on a determination of whether the current location is associated with a location of a greater threat, wherein the risk factors include a third risk factor based on a determination of whether there has been or will be a temporary influx of people into an area comprising the current location;
selecting, by processing circuitry, one of the plurality of policies based on the current location;
based on the risk score and the selected policy, determining, by processing circuitry, a level of user access to provide to the computerized resource; and
providing, by processing circuitry, user access to the computerized resource in accordance with the said level of user access.
2. A system, comprising:
memory; and
processing circuitry coupled to the memory, the memory storing instructions which, when executed by the processing circuitry, cause the processing circuitry to:
provide a plurality of policies, including a first policy related to a work location, a second policy related to a non-work location, and a third policy related to a non-visited location;
store a location history in connection with a user, wherein the location history identifies one or more locations visited by the user and/or one or more locations never visited by the user;
receive an authentication request originating from the user to access a computerized resource;
determine a current location in connection with the authentication request;
assign a risk score to the authentication request based on one or more risk factors, wherein the risk factors include a first risk factor based on an analysis of the current location and the location history, wherein the risk factors include a second risk factor based on a determination of whether the current location is associated with a location of a greater threat, wherein the risk factors include a third risk factor based on a determination of whether there has been or will be a temporary influx of people into an area comprising the current location;
select one of the plurality of policies based on the current location;
based on the risk score and the selected policy, determine a level of user access to provide to the computerized resource; and
provide user access to the computerized resource in accordance with the said level of user access.
3. A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising instructions for:
providing a plurality of policies, including a first policy related to a work location, a second policy related to a non-work location, and a third policy related to a non-visited location;
storing a location history in connection with a user, wherein the location history identifies one or more locations visited by the user and/or one or more locations never visited by the user;
receiving an authentication request originating from the user to access a computerized resource;
determining a current location in connection with the authentication request;
assigning a risk score to the authentication request based on one or more risk factors, wherein the risk factors include a first risk factor based on an analysis of the current location and the location history, wherein the risk factors include a second risk factor based on a determination of whether the current location is associated with a location of a greater threat, wherein the risk factors include a third risk factor based on a determination of whether there has been or will be a temporary influx of people into an area comprising the current location;
selecting one of the plurality of policies based on the current location;
based on the risk score and the selected policy, determining a level of user access to provide to the computerized resource; and
providing user access to the computerized resource in accordance with the said level of user access.