Multifactor authorization on accessing hardware resources
In an approach for multifactor authorization on hardware calls of resources, a processor receives a request for a hardware resource from a plurality of hardware resources being monitored. A processor calculates a risk level associated with the hardware resource of the request based on a respective risk level data repository. A processor, in response to a determination the risk level requires multifactor authorization, determines that a user associated with the request is logged in. A processor identifies a mechanism used by the user to log in. A processor determines whether a challenge associated with the multifactor authorization based on the mechanism is successful. A processor, in response to a determination the challenge associated with the multifactor authorization is successful, enables access to the hardware resource of the request.
1. A computer-implemented method comprising:
receiving, by one or more processors, a request for a hardware resource from a plurality of hardware resources being monitored;
calculating, by one or more processors, a risk level of accessing the hardware resource of the request based on a respective risk level data repository, wherein the risk level in the respective risk level data repository indicates an action executed on the hardware resource when a risk level condition is met, the risk level condition being based on at least a device status associated with activity status of the hardware resource;
in response to a determination that the risk level requires multifactor authorization, determining, by one or more processors, that a user associated with the request is logged in;
identifying, by one or more processors, a mechanism used by the user to log in;
determining, by one or more processors, whether a challenge associated with the multifactor authorization based on the mechanism is successful; and
in response to a determination that the challenge associated with the multifactor authorization is successful, enabling, by one or more processors, access to the hardware resource of the request.
2. The computer-implemented method of claim 1 , further comprising:
monitoring, by one or more processors, the request of accessing the plurality of hardware resources during runtime when the user is already logged in.
3. The computer-implemented method of claim 1 , wherein the risk level is a level that is used to define the action that will be executed in response to the risk level condition being met.
4. The computer-implemented method of claim 1 , wherein the risk level is further based on a factor selected from the group consisting of: application type, application metadata, user location, and user activity.
5. The computer-implemented method of claim 1 , further comprising:
in response to a determination that the risk level does not require the multifactor authorization, monitoring the plurality of hardware resources.
6. The computer-implemented method of claim 1 , further comprising:
in response to a determination that the mechanism used by the user to log in requires the multifactor authorization,
presenting the multifactor authorization,
determining a type of the multifactor authorization to be presented based on the mechanisms used by the user to log in, and
requesting a secondary factor to authorize the request to enable the hardware resource.
7. The computer-implemented method of claim 1 , further comprising:
in response to a determination that the challenge associated with the multifactor authorization is not successful, executing, by one or more processors, a set of predetermined security actions.
8. A computer program product comprising:
one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising:
program instructions to receive a request for a hardware resource from a plurality of hardware resources being monitored;
program instructions to calculate a risk level of accessing the hardware resource of the request based on a respective risk level data repository, wherein the risk level in the respective risk level data repository indicates an action executed on the hardware resource when a risk level condition is met, the risk level condition being based on at least a device status associated with activity status of the hardware resource;
program instructions to, in response to a determination that the risk level requires multifactor authorization, determine that a user associated with the request is logged in;
program instructions to identify a mechanism used by the user to log in;
program instructions to determine whether a challenge associated with the multifactor authorization based on the mechanism is successful; and
program instructions to, in response to a determination that the challenge associated with the multifactor authorization is successful, enable access to the hardware resource of the request.
9. The computer program product of claim 8 , further comprising:
program instructions to monitor the request of accessing the plurality of hardware resources during runtime when the user is already logged in.
10. The computer program product of claim 8 , wherein the risk level is a level that is used to define the action that will be executed in response to the risk level condition being met.
11. The computer program product of claim 8 , wherein the risk level is further based on a factor selected from the group consisting of: application type, application metadata, user location, and user activity.
12. The computer program product of claim 8 , further comprising:
program instructions to, in response to a determination that the risk level does not require the multifactor authorization, monitor the plurality of hardware resources.
13. The computer program product of claim 8 , further comprising:
program instructions to, in response to a determination that the mechanism used by the user to log in requires the multifactor authorization,
present the multifactor authorization,
determine a type of the multifactor authorization to be presented based on the mechanisms used by the user to log in, and
request a secondary factor to authorize the request to enable the hardware resource, wherein the mechanism used by the user to log in includes a PIN or password and the secondary factor includes validation from a secondary device.
14. The computer program product of claim 8 , further comprising:
program instructions to, in response to a determination that the challenge associated with the multifactor authorization is not successful, execute a set of predetermined security actions.
15. A computer system comprising:
one or more computer processors, one or more computer readable storage media, and program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising:
program instructions to receive a request for a hardware resource from a plurality of hardware resources being monitored;
program instructions to calculate a risk level of accessing the hardware resource of the request based on a respective risk level data repository, wherein the risk level in the respective risk level data repository indicates an action executed on the hardware resource when a risk level condition is met, the risk level condition being based on at least a device status associated with activity status of the hardware resource;
program instructions to, in response to a determination that the risk level requires multifactor authorization, determine that a user associated with the request is logged in;
program instructions to identify a mechanism used by the user to log in;
program instructions to determine whether a challenge associated with the multifactor authorization based on the mechanism is successful; and
program instructions to, in response to a determination that the challenge associated with the multifactor authorization is successful, enable access to the hardware resource of the request.
16. The computer system of claim 15 , further comprising:
program instructions to monitor the request of accessing the plurality of hardware resources during runtime when the user is already logged in.
17. The computer system of claim 15 , wherein the risk level is a level that is used to define the action that will be executed in response to the risk level condition being met.
18. The computer system of claim 15 , wherein the risk level is further based on a factor selected from the group consisting of: application type, application metadata, user location, and user activity.
19. The computer system of claim 15 , further comprising:
program instructions to, in response to a determination that the risk level does not require the multifactor authorization, monitor the plurality of hardware resources.
20. The computer system of claim 15 , further comprising:
program instructions to, in response to a determination that the mechanism used by the user to log in requires the multifactor authorization,
present the multifactor authorization,
determine a type of the multifactor authorization to be presented based on the mechanisms used by the user to log in, and
request a secondary factor to authorize the request to enable the hardware resource, wherein the mechanism used by the user to log in includes a fingerprint and the secondary factor includes a PIN or password.