IP Library Granted Patent US 10,554,667
Granted Patent B2
US 10,554,667 · App. 15/002,120 · Granted Feb 4, 2020

Methods, apparatus, and systems for resource access permission management

Inventor: Xiaodong Wang (Chengdu, CN)
Assignee: ALIBABA GROUP HOLDING LIMITED
H04L63/105
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,554,667
App. No.
15/002,120
Granted
Feb 4, 2020
Kind
B2
Abstract

A resource permission management method is disclosed. The method includes monitoring, by a processor, a sensitivity of a target resource, and when the sensitivity of the target resource changes, adjusting, by the processor, a permission level of the target resource according to the sensitivity of the target resource.

Claims (92)

1. A resource permission management method, comprising:

periodically monitoring, by a processor, a sensitivity of a target resource; and

when the sensitivity of the target resource has determined to be changed, adjusting, by the processor, a permission level of the target resource according to the sensitivity of the target resource;

receiving a resource access request from a user terminal device;

determining whether the resource access request includes an authorization code associated with the permission level of the target resource;

determining that the user is not an authorized user in response to the resource access request being determined to not include the authorization code associated with the permission level of the target resource; and

refusing the user access to the target resource in response to the user not being determined as an authorized user.

2. A resource permission management method, comprising:

periodically monitoring, by a processor, a sensitivity of a target resource;

when the sensitivity of the target resource has determined to be changed, adjusting, by the processor, a permission level of the target resource according to the sensitivity of the target resource;

receiving a resource access request from a user terminal device;

determining whether the resource access request includes an authorization code associated with the permission level of the target resource;

determining that the user is an authorized user in response to the resource access request being determined to include the authorization code associated with the permission level of the target resource; and

allowing the user access to the target resource in response to the user being determined as an authorized user.

3. The method of claim 1 or 2 , wherein adjusting the permission level of the target resource according to the sensitivity of the target resource includes:

determining a sensitivity level corresponding to the sensitivity of the target resource; and

setting the permission level of the target resource to a permission level corresponding to the sensitivity level.

4. The method of claim 1 or 2 , wherein monitoring the sensitivity includes:

monitoring a number of pieces of sensitive information of the target resource and/or a type of the sensitive information; and

determining the sensitivity of the target resource according to the number of pieces and/or the type of the sensitive information.

5. The method of claim 1 or 2 , further comprising:

receiving an authorization request from the user terminal device;

verifying the user according to the authorization request and the permission level of the target resource; and

sending the authorization code associated with the permission level of the target resource to the user in response to the user passing the verification.

6. A resource permission management apparatus, comprising:

a monitoring module configured to periodically monitor a sensitivity of a target resource; and

an adjustment module configured to, when the sensitivity of the target resource has determined to be changed, adjust a permission level of the target resource according to the sensitivity of the target resources;

a first receiving module configured to receive a resource access request from a user terminal device;

a determination module configured to:

determine whether the resource access request includes n authorization code associated with the permission level of the target resource;

if the resource access request is determined to include an authorization code associated with the permission level of the target resource, determine that the user is an authorized user; and

if the resource access request is not determined to include an authorization code associated with the permission level of the target resource, determine that the user is not an authorized user; and

an access control module configured to:

if the user is determined to be an authorized user, allow the user access to the target resource; and

if the user is not determined to be an authorized user, refuse the user access to the target resource.

7. The apparatus of claim 6 , wherein the monitoring module is further configured to:

monitor a number of pieces and/or a type of the sensitive information of the target resource; and

determine the sensitivity of the target resource according to the number of pieces and/or the type of the sensitive information.

8. The apparatus of claim 6 , wherein the adjustment module is further configured to:

determine a sensitivity level corresponding to the sensitivity of the target resource; and

set the permission level of the target resource to a permission level corresponding to the sensitivity level.

9. The apparatus of claim 6 , further comprising:

a second receiving module configured to receive an authorization request from the user terminal device;

a verifying module configured to verify the user according to the authorization request and the permission level of the target resource; and

a sending module configured to, if the user passes the verification, send the authorization code associated with the permission level of the target resource to the user.

10. A webpage resource permission management method, comprising:

periodically monitoring a sensitivity of a webpage resource by a web browser on a terminal device; and

when the sensitivity of the webpage resource has determined to be changed, adjusting, by a server, a permission level of the webpage resource according to the sensitivity of the webpage resource;

receiving a webpage resource access request from a user terminal device;

determining whether the webpage resource access request includes an authorization code associated with the permission level of the target webpage resource;

determining the user as an authorized user in response to that the webpage resource access request is determined to include an authorization code associated with the permission level of the target webpage resource; and

allowing the user access to the target webpage resource in response to the user being determined as an authorized user.

11. A webpage resource permission management apparatus, comprising:

a monitoring module configured to periodically monitor a sensitivity of a webpage resource; and

an adjustment module configured to, when the sensitivity of the webpage resource has determined to be changed, adjust a permission level of the webpage resource according to the sensitivity of the webpage resource

a first receiving module configured to receive a webpage resource access request from a user terminal device;

a determination module configured to:

determine whether the webpage resource access request includes an authorization code associated with the permission level of the target webpage resource;

if the webpage resource access request is determined to include an authorization code associated with the permission level of the target webpage resource, determine that the user is an authorized user; and

if the webpage resource access request is not determined to include an authorization code associated with the permission level of the target webpage resource, determine that the user is not an authorized user; and

an access control module configured to:

if the user is determined to be an authorized user, allow the user access to the target webpage resource; and

if the user is not determined to be an authorized user, refuse the user access to the target webpage resource.

12. A non-transitory computer readable medium that stores a set of instructions that is executable by at least one processor of a resource permission management apparatus to cause the resource permission management apparatus to perform a method for resource permission management, the method comprising:

periodically monitoring sensitivity of a target resource; and

adjusting permission level of the target resource according to the sensitivity of the target resource in response to the sensitivity of the target resource has determined to be changed;

receiving a resource access request from a user terminal device;

determining whether the resource access request includes an authorization code associated with the permission level of the target resource;

determining that the user is an authorized user in response to that the resource access request being determined to include an authorization code associated with the permission level of the target resource;

determining that the user is not an authorized user in response to that the resource access request being determined not to include an authorization code associated with the permission level of the target resource;

allowing the user access to the target resource in response to the user being determined as an authorized user; and

refusing the user access to the target resource in response to the user not being determined as an authorized user.

13. A non-transitory computer readable medium of claim 12 , monitoring the sensitivity of a target resource includes:

monitoring number of pieces and type of the sensitive information of the target resource; and

determining the sensitivity of the target resource according to the number of pieces and the type of the sensitive information.

14. The non-transitory computer readable medium of claim 12 , wherein adjusting the permission level of the target resource according to the sensitivity of the target resource includes:

determining a sensitivity level corresponding to the sensitivity of the target resource; and

setting the permission level of the target resource to a permission level corresponding to the sensitivity level.

15. The non-transitory computer readable medium of claim 12 , wherein the set of instructions that is executable by the at least one processor of the resource permission management apparatus to cause the resource permission management apparatus to further perform:

receiving an authorization request from the user terminal device;

verifying the user according to the authorization request and the permission level of the target resource; and

sending the authorization code associated with the permission level of the target resource to the user in response to the user passing the verification.

16. A non-transitory computer readable medium that stores a set of instructions that is executable by at least one processor of a server to cause the server to perform a method comprising:

monitoring a sensitivity of a webpage resource by a web browser on a terminal device in a cyclic manner; and

when the sensitivity of the webpage resource has determined to be changed, adjusting a permission level of the webpage resource according to the sensitivity of the webpage resource;

receiving a webpage resource access request from a user terminal device;

determining whether the webpage resource access request includes an authorization code associated with the permission level of the target webpage resource;

determining that the user is an authorized user in response to that the webpage resource access request is determined to include an authorization code associated with the permission level of the target webpage resource;

determining that the user is not an authorized user in response to that the webpage resource access request is determined not to include an authorization code associated with the permission level of the target webpage resource;

allowing the user access to the target webpage resource in response to the user being determined as an authorized user; and

refusing the user access to the target webpage resource in response to the user not being determined as an authorized user.

17. The resource management method of claim 4 , wherein determining the sensitivity of the target resource includes adjusting a permission level associated with the target resource based on the number of pieces of sensitive information in the target resource.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 13, 2020
From: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
To: ADVANCED NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053761/0338 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 5, 2020
From: ALIBABA GROUP HOLDING LIMITED
To: ADVANTAGEOUS NEW TECHNOLOGIES CO., LTD.
Reel/Frame 053713/0665 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 20, 2016
From: WANG, XIAODONG
To: ALIBABA GROUP HOLDING LIMITED
Reel/Frame 037537/0993 →
Priority Claims (1)
CN 2015 1 0031127 · Jan 22, 2015 · national
Continuity (1)
Related Publication 20160219056A1 · Jul 28, 2016
Cited By (1)
US 12,231,436