Risk-Based Access Control Patent for Resource Access Permissions

ChangeBridge: Patent Grants - Networking (H04L)

Published March 31st, 2026

Detected March 31st, 2026

Summary

USPTO granted Capital One Services, LLC Patent US12592933B2 for systems and methods managing resource access permissions using risk-based access control. The patent covers determining risk measures and inserting user identifiers into access control lists based on access level permissions.

View original document View source feed page

What changed

USPTO issued Patent US12592933B2 to Capital One Services, LLC on March 31, 2026, covering systems and methods for managing resource access permissions based on risk measures. The patent describes receiving a resource access request, determining a risk measure, and inserting user identifiers into access control lists based on permitted access levels. The system updates risk measures based on information regarding accessed resources.

This is a patent grant notice, not a regulatory requirement. No compliance actions are required. Companies developing access control systems may review this patent for potential licensing considerations or to understand existing prior art in risk-based authentication technologies.

Source document (simplified)

← USPTO Patent Grants

Systems and methods for managing resource access permissions

Grant US12592933B2 Kind: B2 Mar 31, 2026

Assignee

Capital One Services, LLC

Inventors

Dominic Joseph Cannizzaro

Abstract

Systems and methods for managing resource access permissions for users with unknown credentials are disclosed herein. A resource access request may be received. A measure of risk may be determined. In response to determining that a first access level is permitted, the first user identifier may be inserted in a first access control list. Based on information regarding resources accessed by the first user, an updated measure of risk may be determined. In response to determining that a second access level is permitted, the first user identifier may be inserted in a second access control list.