Access rule management

Inventors: Benjamin Scott Boding (Mountain View, CA); Christopher Holmes (San Jose, CA); Cory Siddens (Mountain View, CA); Henry Wong (Menlo Park, CA)

Assignee: VISA INTERNATIONAL SERVICE ASSOCIATION

H04L63/0263 H04L63/101 H04L63/105 H04L63/20

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,451,515
App. No.: 16/911,277
Granted: Sep 20, 2022
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Techniques managing access rules are provided. Access rules and their associated profiles are determined for evaluation. A triggering rate or a triggering percentage can be used to indicate efficacy of the rule. Recommendations can be provided based on a triggering percentage difference of the rule during a predetermined period of time. The recommendations can be provided in an interactive user interface.

Claims (63)

1. A method for managing a plurality of access rules performed by a computer device comprising a processor and a memory, the method comprising:

receiving a first access rule from the plurality of access rules for evaluation;

determining a first profile associated with the first access rule,

loading the first access rule and the first profile into the memory;

receiving a designated period of time for performing the evaluation of the first access rule;

initializing a counter associated with the first access rule for the first profile, wherein the counter tracks a triggering of the first access rule for the first profile during the designated period of time, wherein the counter stores a counter value;

receiving a plurality of access requests during the designated period of time;

determining whether one or more of the plurality of access requests trigger the first access rule;

incrementing the counter value for each instance that the first access rule is triggered by an access request of the plurality of access requests during the designated period of time;

calculating a first trigger percentage for the first access rule based on the counter value of the first access rule during a first subset of time of the designated period of time;

calculating a second trigger percentage for the first access rule based on the counter value of the first access rule during a second subset of time of the designated period of time;

determining a trigger percentage difference between the first trigger percentage and the second trigger percentage;

determining whether the trigger percentage difference is statistically significant; and

providing a recommendation regarding the first access rule for the first profile in response to determining that the trigger percentage difference is statistically significant.

2. The method according to claim 1 , wherein the trigger percentage difference is statistically significant when the trigger percentage difference is above a predetermined threshold.

3. The method according to claim 1 , wherein when the trigger percentage difference is in within a first range, provide a recommendation to remove the first access rule.

4. The method according to claim 3 , wherein when the trigger percentage difference is in within a second range that is less than the first range, provide a recommendation to check the first access rule.

5. The method according to claim 4 , wherein when the trigger percentage difference is in within a third range that is less than the second range, provide a recommendation to accept the first access rule.

6. The method according to claim 1 , wherein the recommendation comprises a report that is displayed on an interactive user interface.

7. The method according to claim 6 , wherein the report identifies whether the first access rule should be removed, checked or accepted.

8. The method according to claim 1 , wherein the first subset of time is earlier in time than the second subset of time.

9. The method according to claim 1 , wherein the plurality of access requests are received in real time.

10. The method according to claim 2 , wherein in response to determining that the trigger percentage difference is above the predetermined threshold, automatically removing the first access rule from the first profile.

11. A server computer comprising:

a processor;

a memory;

a computer readable medium coupled to the processor, the computer readable medium storing instructions executable by the processor for implementing a method comprising:

receiving a first access rule from a plurality of access rules for evaluation;