Patent ID: 9703952
Date: 2017-07-11
CPC Classifications: G06F

Claim:
1. An intent-based access control method comprising: receiving, from a user, one or more electronic signals representative of a request to obtain access to a protected resource; monitoring one of more physiological signals associated with the user, the one or more physiological signals including at least brain signals; presenting stimuli to the user, the stimuli adapted to evoke a physiological or behavioral response; measuring one or more event-related potentials in the monitored one or more physiological signals; processing the one or more event-related potentials to detect signals indicative of (i) a potential intention of the user and (ii) a potential motivation of the user to act on the potential intention; processing the one or more event-related potentials to assign (i) an intention score based at least on the detected signals indicative of the potential intention of the user and (ii) a motivation score based at least on the detected signals indicative of the potential motivation of the user to act on the potential intention; determining a risk score associated with the protected resource based at least on the intention score and motivation score in relation to an impact of malicious access to the protected resource; and determining whether the request to obtain access to the protected resource should be granted or denied based at least on a combination of the intention score, the motivation score, and the risk score.