Permission management
View Patent ↗Implementations of the present disclosure relate to methods, systems, and computer program products for permission management. In one implementation, a computer-implemented method is disclosed. In the method, a permission score may be determined for a user in response to an operation requested to a target system by the user. Whether to permit the operation may be determined based on the permission score. Here, the permission score may be determined based on an identity component of the user and at least one of following components of the user: a state component, and an environment component. In other implementations, a computer-implemented system and a computer program product for permission management are disclosed.
1. A method for managing permissions, the method comprising:
determining a permission score for a user, in response to an operation requested to a target system by the user; and
determining whether to permit the operation based on the permission score, wherein the permission score is determined based on an identity component of the user and a combination of the following components of the user:
a state component determined by obtaining at least one dimension of the user to determine a biological state, and
an environment component obtained by:
obtaining at least one environment feature of the user by monitoring a combination of: a reality feature relating to a reality environment around the user, a device feature relating to a device from which the user sends the request, and a network feature relating to a network to which the device is connected; and
determining the environment component based on the obtained at least one environment feature.
2. The method of claim 1 , wherein determining whether to permit the operation based on the permission score comprises:
determining a permission level associated with at least one operation provided in the target system for the user based on the permission score; and
determining whether to permit the operation based on the permission level.
3. The method of claim 1 , wherein the identity component is obtained by:
obtaining at least one identity feature from the user; and
determining the identity component based on the obtained at least one identity feature, wherein the at least one identity feature includes at least one of following features: a password, a fingerprint, a palm print, a voiceprint, a facial recognition, a retinal recognition, an iris recognition, and a signature recognition.
4. The method of claim 1 , further comprising:
permitting the user to perform a first operation, in response to a permission being determined, and
forbidding the user from performing a second operation, in response to a rejection being determined.
5. The method of claim 4 , further comprising:
providing the user with tips, in response to forbidding the user from performing the second operation.
6. The method of claim 1 , wherein the method is implemented in response to at least one of following conditions:
an expiration of a predefined time period; and
a receipt of an invocation.
7. The method of claim 3 , wherein each identity feature is given a score, and the identity component is determined based on a weighted sum of the scores for the identity features.
8. A system for managing permissions, the system comprising a computer processor coupled to a computer-readable memory unit, the memory unit comprising instructions that when executed by the computer processor implements a method, the method comprising:
determining a permission score for a user in response to an operation requested to a target system by the user; and
determining whether to permit the operation based on the permission score, wherein the permission score is determined based on an identity component of the user and a combination of the following components of the user:
a state component determined by obtaining at least one dimension of the user to determine a biological state, and
an environment component obtained by:
obtaining at least one environment feature of the user by monitoring a combination of: a reality feature relating to a reality environment around the user, a device feature relating to a device from which the user sends the request, and a network feature relating to a network to which the device is connected; and
determining the environment component based on the obtained at least one environment feature.
9. The system of claim 8 , wherein determining whether to permit the operation based on the permission score comprises:
determining a permission level associated with at least one operation provided in the target system for the user based on the permission score; and
determining whether to permit the operation based on the permission level.
10. The system of claim 8 , wherein the identity component is obtained by:
obtaining at least one identity feature from the user; and
determining the identity component based on the obtained at least one identity feature, wherein the at least one identity feature includes at least one of following features: a password, a fingerprint, a palm print, a voiceprint, a facial recognition, a retinal recognition, an iris recognition, and a signature recognition.
11. The system of claim 8 , further comprising: permitting the user to perform a first operation, in response to a permission being determined, and forbidding the user from performing a second operation, in response to a rejection being determined.
12. A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by an electronic device to cause the electronic device to perform the actions of:
determining a permission score for a user in response to an operation requested to a target system by the user; and
determining whether to permit the operation based on the permission score, wherein the permission score is determined based on an identity component of the user and a combination of the following components of the user:
a state component determined by obtaining at least one dimension of the user to determine a biological state, and
an environment component obtained by:
obtaining at least one environment feature of the user by monitoring a combination of: a reality feature relating to a reality environment around the user, a device feature relating to a device from which the user sends the request, and a network feature relating to a network to which the device is connected; and
determining the environment component based on the obtained at least one environment feature.
13. The computer program product of claim 12 , wherein the determining whether to permit the operation based on the permission score comprises:
determining a permission level associated with at least one operation provided in the target system for the user based on the permission score; and
determining whether to permit the operation based on the permission level.
14. The computer program product of claim 12 , wherein the identity component is obtained by:
obtaining at least one identity feature from the user; and
determining the identity component based on the obtained at least one identity feature, wherein the at least one identity feature includes at least one of following features: a password, a fingerprint, a palm print, a voiceprint, a facial recognition, a retinal recognition, an iris recognition, and a signature recognition.
15. The computer program product of claim 12 , wherein the program instructions further cause the device to perform the actions of: permitting the user to perform a first operation, in response to a permission being determined, and forbidding the user from performing a second operation, in response to a rejection being determined.