US6513039B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Profile inferencing through automated access control list analysis heuristics
Assignee: Trend Micro Inc
•
Filing: 1999-06-24
•
Granted: 2003-01-28
•
Expires: 2019-06-24
Abstract
Abstract A system, method, and computer readable medium for generating a profile of a network user based on a user's access privileges stored in an access control list (ACL). The system may include an accessible objects determining object for determining objects that are accessible by a particular user. An access privilege determining object may be used to determine a user's access privileges for each accessible object. The system may also include an object topic determining object for determining the subject matter of the object. The subject matter of the object may be used to generate a profile indicating a user's affinity (e.g., experience, knowledge, interest, etc.). A user affinity object may be used to determine a user's affinity based on, for example, the accessible objects, the user's access privileges, and the subject matter of the accessible objects. The system may also include a profile compiling/updating object that generates a user profile based on the user's affinity determined by the user affinity object. Preferably, the system includes editing and updating objects. An editing object may permit a user to edit the profile generated and an updating permits the system to update the profile (e.g., periodically or as desired).
Inventors
- 👤 Carl J. Kraenzel
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 22:43
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/604; H; H04; H04L; H04L63/00; H04L63/10; H04L63/101; Y; Y10; Y10S; Y10S707/00; Y10S707/953; Y10S707/955; Y10S707/959; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 33
Claim 1
Independent Claim
86 words
A method for generating a profile of a system user comprising the steps of: (a) searching an access control list for objects that the user has permission to access; (b) determining a user affinity for objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and (c) generating a user profile based on the user affinity.
Claim 2
Independent Claim
86 words
A method for generating a profile of a system user comprising the steps of: (a) searching an access control list for objects that the user has permission to access; (b) determining a user affinity for objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and (c) generating a user profile based on the user affinity.
Claim 3
Dependent Claim
30 words
The method of claim 1 , wherein the step of determining a user affinity determines the user affinity based on user access privileges for the objects accessible by the user.
Claim 4
Dependent Claim
29 words
The method of claim 1 , wherein the step of determining a user affinity determines the user affinity based on a topic of the objects accessible by the user.
Claim 5
Dependent Claim
16 words
The method of claim 1 , further comprising the step of updating the user profile periodically.
Claim 6
Dependent Claim
16 words
The method of claim 1 , further comprising the step of updating the user profile incrementally.
Claim 7
Dependent Claim
26 words
The method of claim 1 , further comprising the step of inserting keywords into the user profile based on the access privileges and the user affinity.
Claim 8
Dependent Claim
24 words
The method of claim 6 , wherein the step of inserting keywords inserts one or more keywords based on one or more inferencing rules.
Claim 9
Independent Claim
115 words
A system for generating a profile of a system user comprising: storing means for storing an access control list; accessing means for accessing the list; accessible object determining means for determining the objects in the list that the user has permission to access; affinity determining means, responsive to the accessible object determining means, for determining a user affinity for the objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and profile generating means, responsive to the affinity determining means, for generating a user profile.
Claim 10
Independent Claim
115 words
A system for generating a profile of a system user comprising: storing means for storing an access control list; accessing means for accessing the list; accessible object determining means for determining the objects in the list that the user has permission to access; affinity determining means, responsive to the accessible object determining means, for determining a user affinity for the objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and profile generating means, responsive to the affinity determining means, for generating a user profile.
Claim 11
Dependent Claim
23 words
The system of claim 8 , further comprising access privilege determining means for determining user access privileges for objects accessible by the user.
Claim 12
Dependent Claim
22 words
The system of claim 8 , further comprising topic determining means for determining a topic of the objects accessible by the user.
Claim 13
Dependent Claim
15 words
The system of claim 8 , further comprising updating means for updating the user profile.
Claim 14
Dependent Claim
27 words
The system of claim 8 , further comprising keyword inserting means for inserting keywords into the user profile based on the access privileges and the user affinity.
Claim 15
Dependent Claim
24 words
The system of claim 12 , wherein the keyword inserting means uses one or more inferencing rules for selecting the one or more keywords.
Claim 16
Dependent Claim
19 words
The system of claim 8 , further comprising searching means for enabling the user to search the user profile.
Claim 17
Dependent Claim
19 words
The system of claim 8 , further comprising editing means for enabling the user to edit the user profile.
Claim 18
Independent Claim
110 words
A system for generating a profile of a system user comprising: an accessing object that accesses an access control list that stores a list of objects; an access determining object that determines the objects in the list that the user has permission to access; an affinity determining object that determines a user affinity for the objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and a generating object, responsive to the affinity determining object, that generates a user profile.
Claim 19
Independent Claim
110 words
A system for generating a profile of a system user comprising: an accessing object that accesses an access control list that stores a list of objects; an access determining object that determines the objects in the list that the user has permission to access; an affinity determining object that determines a user affinity for the objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and a generating object, responsive to the affinity determining object, that generates a user profile.
Claim 20
Dependent Claim
27 words
The system of claim 16 , further comprising an access privilege determining object that determines access privileges of the user for the objects accessible by the user.
Claim 21
Dependent Claim
23 words
The system of claim 16 , further comprising a topic determining object that determines a topic of the objects accessible by the user.
Claim 22
Dependent Claim
31 words
The system of claim 16 , further comprising a keyword inserting object that inserts one or more keywords into the user profile based on the access privileges and the user affinity.
Claim 23
Dependent Claim
24 words
The system of claim 19 , wherein the keyword inserting means uses one or more inferencing rules for selecting the one or more keywords.
Claim 24
Dependent Claim
16 words
The system of claim 16 , further comprising an updating object that updates the user profile.
Claim 25
Dependent Claim
20 words
The system of claim 16 , further comprising a searching object that enables the user to search the user profile.
Claim 26
Dependent Claim
20 words
The system of claim 16 , further comprising an editing object that enables the user to edit the user profile.
Claim 27
Dependent Claim
125 words
A computer usable medium having computer readable program code embodied therein for generating a user profile, the computer readable program code comprising: computer readable program code that causes a computer to search an access control list for objects that the user has permission to access; computer readable program code that causes a computer to determine a user affinity for the objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and computer readable program code, responsive to the computer readable code for determining a user affinity, that causes a computer to generate a user profile.
Claim 28
Dependent Claim
125 words
A computer usable medium having computer readable program code embodied therein for generating a user profile, the computer readable program code comprising: computer readable program code that causes a computer to search an access control list for objects that the user has permission to access; computer readable program code that causes a computer to determine a user affinity for the objects based on series of plurality of rules, the rules comprising the permissions assigned to the user for each of the user accessible objects, wherein the affinity is determined regardless of whether the user has actually ever accessed the objects; and computer readable program code, responsive to the computer readable code for determining a user affinity, that causes a computer to generate a user profile.
Claim 29
Dependent Claim
32 words
The computer usable medium of claim 24 , further comprising computer readable program code that causes a computer to determine access privileges of the user for the objects accessible by the user.
Claim 30
Dependent Claim
29 words
The computer usable medium of claim 24 , further comprising computer readable program code that causes a computer to determine a topic of the objects accessible by the user.
Claim 31
Dependent Claim
36 words
The computer usable medium of claim 24 , further comprising computer readable program code that causes a computer to insert one or more keywords into the profile based on the access privileges and the user affinity.
Claim 32
Dependent Claim
32 words
The computer usable medium of claim 27 , further comprising computer readable program code that causes a computer to insert the one or more keywords based on one or more inferencing rules.
Claim 33
Dependent Claim
23 words
The computer usable medium of claim 24 , further comprising computer readable program code that causes a computer to update the user profile.
References Cited (Backward Citations)
US5008853A
Cited
US5263157A
Cited
US5539665A
Cited
US5724521A
Cited
US5797001A
Cited
US5754939A
Cited
US5761662A
Cited
US5710884A
Cited
US5907836A
Cited
US5796395A
Cited
US5768508A
Cited
US5748890A
Cited
US5796952A
Cited
US20010011264A1
Cited
US6199067B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-01-27 | 2006-07-29 | 2007-01-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-01-27 | 2010-07-29 | 2011-01-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-01-27 | 2014-07-29 | 2015-01-28 | $7700.00 | Window Closed / Lapsed |