System and method for data access management based on environmental risk assessment

Abstract

Methods and systems for managing access to data stored in data storage systems are disclosed. To prevent malicious parties from gaining access to sensitive data stored in a data storage system, an access control system may be implemented. The access control system may include monitoring of the physical environment and a registration process that assigns cryptographic key pairs to registered combinations of users and devices. When an end device requests sensitive data, the registered user-device combinations may be authenticated using the key pairs generated during registration. To protect sensitive data in the physical environment during access, environmental data (e.g., collected by sensing devices located in the physical environment) may be analyzed using trained inference models that generate predictions regarding the security risk present in environment. Provided the physical environment is secure, the sensitive data may be made accessible to the registered user.