BACKGROUND

The present disclosure generally relates to authorization management. Specifically, the present disclosure relates to methods, systems and products for managing permission for accessing a system.

Nowadays, the permission management is critical in almost every industry. For example, a user needs to input his/her account number, the password, or other required information so as to login to an account of a bank system. After the login, the user may be permitted to manipulate his/her account by performing operations such as transferring money, withdrawing money, and the like. For another example, an employee may be requested to use his/her badge and/or password for opening the doors of an office and performing other types of operations such as using printers, fax machines, etc. Accordingly, managing the permission to various types of operations in a system in a flexible and safe way becomes a focus.

SUMMARY

In one aspect, a computer-implemented method is disclosed. According to the method, a permission score may be determined for a user in response to an operation requested to a target system by the user. Whether to permit the operation may be determined based on the permission score. Here, the permission score may be determined based on an identity component of the user and at least one of following components of the user: a state component, and an environment component.

In another aspect, a computer-implemented system is disclosed. The computing system comprises a computer processor coupled to a computer-readable memory unit, where the memory unit comprises instructions that, when executed by the computer processor, implements a method. According to the method, a permission score may be determined for a user in response to an operation requested to a target system by the user. Whether to permit the operation may be determined based on the permission score. Here, the permission score may be determined based on an identity component of the user and at least one of following components of the user: a state component, and an environment component.

In another aspect, a computer program product is disclosed. The computer program product comprises a computer readable storage medium having program instructions embodied therewith. The program instructions is executable by an electronic device to cause the electronic device to perform actions of: determining a permission score for a user in response to an operation requested to a target system by the user; determining whether to permit the operation based on the permission score; wherein the permission score is determined based on an identity component of the user and at least one of following components of the user: a state component, and an environment component.

It is to be understood that the summary is not intended to identify key or essential features of implementations of the present disclosure, nor is it intended to be used to limit the scope of the present disclosure. Other features of the present disclosure will become easily comprehensible through the description below.

