Risk assessment based data access

Patent metadata

Field	Value
Publication number	US-12591685-B2
Application number	US-202217735089-A
Country	US
Kind code	B2
Filing date	May 2, 2022
Priority date	Apr 30, 2021
Publication date	Mar 31, 2026
Grant date	Mar 31, 2026

Abstract

Apparatuses, methods, computer program products, and systems are disclosed for risk assessment based data access. A method includes determining security risks for each of a plurality of executable applications accessing an application programming interface. A method includes monitoring changes in the security risks for each of the plurality of executable applications. A method includes dynamically adjusting a scope of permissions for the plurality of executable applications with regard to the application programming interface based on the monitored changes in the security risks.

First claim

What is claimed is:

1 . An apparatus, comprising:
a processor; a memory that stores code executable by the processor to:
determine security risks for each of a plurality of executable applications accessing an application programming interface based on a live risk assessment of one or more third parties associated with the plurality of executable applications, wherein the security risks are determined based at least in part on which onboarding steps for the application programming interface have been taken with regard to the plurality of executable applications, the onboarding steps comprising one or more of submissions by the one or more third parties associated with the plurality of executable applications, registration steps, training steps, and interactions with a sandbox environment for the application programming interface;
monitor changes in the security risks for each of the plurality of executable applications, the security risks determined in response to live monitoring third-party computer readable data sources for information associated with the plurality of executable applications and the one or more third parties associated with the plurality of executable applications; and
dynamically adjust a scope of permissions for the plurality of executable applications with regard to the application programming interface based on the monitored changes in the security risks.

2 . The apparatus of claim 1 , wherein the third-party computer readable data sources comprise one or more of government filings, court documents, websites, and information leaked on a dark web.

3 . The apparatus of claim 1 , wherein the scope of permissions comprises a limit on a number of requests which one of the plurality of executable applications may make to the application programming interface during a predefined period of time.

4 . The apparatus of claim 1 , wherein the scope of permissions comprises a limit on a number of users for which one of the plurality of executable applications may access the application programming interface.

5 . The apparatus of claim 1 , wherein the scope of permissions comprises a limit on which data elements one of the plurality of executable applications is permitted to access from the application programming interface.

6 . The apparatus of claim 1 , wherein the scope of permissions comprises a limit on types of data elements one of the plurality of executable applications is permitted to access from the application programming interface.

7 . The apparatus of claim 1 , wherein the scope of permissions comprises blocking one of the plurality of executable applications from accessing the application programming interface.

8 . The apparatus of claim 1 , wherein the code is further executable by the processor to dynamically update a graphical user interface to display the adjusted scope of permissions for the plurality of executable applications on an electronic display screen of a hardware computing device for a user.

9 . A method, comprising:
determining security risks for each of a plurality of executable applications accessing an application programming interface based on a live risk assessment of one or more third parties associated with the plurality of executable applications, wherein the security risks are determined based at least in part on which onboarding steps for the application programming interface have been taken with regard to the plurality of executable applications, the onboarding steps comprising one or more of submissions by the one or more third parties associated with the plurality of executable applications, registration steps, training steps, and interactions with a sandbox environment for the application programming interface; monitoring changes in the security risks for each of the plurality of executable applications, the security risks determined in response to live monitoring third-party computer readable data sources for information associated with the plurality of executable applications and the one or more third parties associated with the plurality of executable applications; and dynamically adjusting a scope of permissions for the plurality of executable applications with regard to the application programming interface based on the monitored changes in the security risks.

10 . The method of claim 9 , wherein the third-party computer readable data sources comprise one or more of government filings, court documents, websites, and information leaked on a dark web.

11 . The method of claim 9 , wherein the scope of permissions comprises one or more of a limit on a number of requests which one of the plurality of executable applications may make to the application programming interface during a predefined period of time, a limit on a number of users for which one of the plurality of executable applications may access the application programming interface, a limit on which data elements one of the plurality of executable applications is permitted to access from the application programming interface, a limit on types of data elements one of the plurality of executable applications is permitted to access from the application programming interface, and blocking one of the plurality of executable applications from accessing the application programming interface.

12 . The method of claim 9 , further comprising dynamically updating a graphical user interface to display the adjusted scope of permissions for the plurality of executable applications on an electronic display screen of a hardware computing device for a user.

13 . An apparatus, comprising:
means for determining security risks for each of a plurality of executable applications accessing an application programming interface based on a live risk assessment of one or more third parties associated with the plurality of executable applications, wherein the security risks are determined based at least in part on which onboarding steps for the application programming interface have been taken with regard to the plurality of executable applications, the onboarding steps comprising one or more of submissions by the one or more third parties associated with the plurality of executable applications, registration steps, training steps, and interactions with a sandbox environment for the application programming interface; means for monitoring changes in the security risks for each of the plurality of executable applications, the security risks determined in response to live monitoring third-party computer readable data sources for information associated with the plurality of executable applications and the one or more third parties associated with the plurality of executable applications; and means for dynamically adjusting a scope of permissions for the plurality of executable applications with regard to the application programming interface based on the monitored changes in the security risks.

14 . The apparatus of claim 13 , wherein the third-party computer readable data sources comprise one or more of government filings, court documents, websites, and information leaked on a dark web.

15 . The apparatus of claim 13 , wherein the scope of permissions comprises a limit on a number of requests which one of the plurality of executable applications may make to the application programming interface during a predefined period of time.

16 . The apparatus of claim 13 , wherein the scope of permissions comprises a limit on a number of users for which one of the plurality of executable applications may access the application programming interface.

17 . The apparatus of claim 1

Assignees

• Mx Tech Inc

Inventors

• Whitcomb David
• Jones Daniel D
• Fromm Brian

Classifications

• G06F2221/033

  Test or assess software · CPC title

• G06F21/577 Primary

  Assessing vulnerabilities and evaluating computer system security · CPC title