Computer access control based on user behaviour

摘要

Access to a data processor is controlled by a two stage process. Firstly it is determined whether an access request conforms to a predefined permission set 22. Depending on the outcome, the request is either denied or passes to a second stage where it is determined whether the request conforms to a set of parameters 23, the set of parameters being derived from previous requests (i.e. a model of previous user or software behaviour). If the request does not conform to the set of parameters it is deemed to be an abnormal request, and the data processor is controlled to temporarily delay the execution of the request and/or prompt the user for a password 25. Otherwise the request is allowed without delays or user entry. In this way a malicious user may be prevented or delayed from gaining access to the computer system, whereas the genuine user is merely slightly inconvenienced. The set of parameters is automatically updated in accordance with requests 26.