Patent ID: 8601531
Filing Date: 2013-12-03
Classification: G06F

Abstract:
1. In an authorization device, a method for authenticating access to a resource, comprising: receiving, by an authorization device, an authorization request to authorize a client device to perform an operation on the resource associated with a data system; comparing, by the authorization device, an access characteristic associated with the resource with a policy associated with the resource; testing, when a result of comparing indicates that the client device is authorized to perform the operation on the resource, whether a risk score associated with the client device performing the operation on the resource exceeds a predetermined risk threshold associated with a policy of the resource; generating, by the authorization device, a first message when both the result of comparing indicates that the client device is authorized to perform the operation on the resource and the testing indicates that the risk score does not exceed the predetermined risk threshold; and generating, by the authorization device, a second message when the result of the comparison indicates that the client device is unauthorized to perform the operation on the resource, wherein comparing, by the authorization device, the access characteristic associated with the resource with the policy associated with the resource comprises: wherein testing whether the risk score associated with the client device performing the operation on the resource exceeds the predetermined risk threshold includes: wherein transmitting, by the authorization device, the set of identification factors associated with the request to the pattern analysis component comprises transmitting, by the authorization device, the set of identification factors associated with the request to the pattern analysis component, the set of identification factors including the classification characteristic identifying a privacy grade of the resource.