US5748890A — Method and system for authenticating and auditing…

Claim 1

Independent Claim 233 words

For use in cooperation with an operating system having a native security system, a method for authenticating and auditing access by a user to non-natively secured applications, comprising: assigning a profile to the user to define the access rights to the non-natively secured applications; providing at least one datastore in communication with the operating system for storing the user's profile and account data relating to each of the non-natively secured applications, including an access control list defining authorized users and a set of pooled accounts authenticated for access to the respective non-natively secured application; generating a call from a launcher application to the native security system or an extension thereof in response to a request by the user to access a selected non-natively secured application; determining if the user is permitted access to the selected non-natively secured application; requesting an account from the set of pooled accounts in response to a determination that the user is permitted access to the selected non-natively secured application; determining if an account is available from the set of pooled accounts; assigning an account to the user in response to a determination that an account is available from the set of pooled accounts, the assigned account operative as the user's virtual identity to the selected non-natively secured application; forwarding account data to the launcher application; and generating an audit record to map the user to the assigned account.

Claim 2

Dependent Claim 233 words

For use in cooperation with an operating system having a native security system, a method for authenticating and auditing access by a user to non-natively secured applications, comprising: assigning a profile to the user to define the access rights to the non-natively secured applications; providing at least one datastore in communication with the operating system for storing the user's profile and account data relating to each of the non-natively secured applications, including an access control list defining authorized users and a set of pooled accounts authenticated for access to the respective non-natively secured application; generating a call from a launcher application to the native security system or an extension thereof in response to a request by the user to access a selected non-natively secured application; determining if the user is permitted access to the selected non-natively secured application; requesting an account from the set of pooled accounts in response to a determination that the user is permitted access to the selected non-natively secured application; determining if an account is available from the set of pooled accounts; assigning an account to the user in response to a determination that an account is available from the set of pooled accounts, the assigned account operative as the user's virtual identity to the selected non-natively secured application; forwarding account data to the launcher application; and generating an audit record to map the user to the assigned account.

Claim 3

Dependent Claim 40 words

A method as in claim 1, wherein the step of determining if the user is permitted access to the selected non-natively secured application comprises comparing the user's access rights with the access control list for the selected non-natively secured application.

Claim 4

Dependent Claim 32 words

A method as in claim 2, wherein the user profile includes a set of assigned roles and the access control list for each of the non-natively secured applications includes authorized user roles.

Claim 5

Dependent Claim 52 words

A method as in claim 3, wherein the step of determining if the user is permitted access to the selected non-natively secured application includes comparing the user's assigned roles with the authorized roles for the selected non-natively secured application to determine if at least one assigned role is valid for the request.

Claim 6

Dependent Claim 27 words

A method as in claim 4, further comprising decrypting the received account data negotiating a session on behalf of the user at the selected non-natively secured application.

Claim 7

Dependent Claim 24 words

A method as in claim 2, wherein the user profile includes the user's identity and the account data includes a set of authorized identities.

Claim 8

Dependent Claim 48 words

A method as in claim 6, wherein the step of determining if the user is permitted access to the selected non-natively secured application includes comparing the user's identity with the authorized identities for the selected non-natively secured application to determine if the user is valid for the request.

Claim 9

Dependent Claim 53 words

A method as in claim 1, further comprising: identifying to the operating system an account type to request from the datastore in response to the determination that the user is permitted access to the selected non-natively secured application; and sending the identified account type to the native security system or an extension thereof.

Claim 10

Dependent Claim 15 words

A method as in claim 1, wherein the operating system is Microsoft Windows® NT 4.0.

Claim 11

Dependent Claim 30 words

A method as in claim 1, wherein the account data forwarded to the launcher application in response to a determination that an account is available is sent in encrypted format.

Claim 12

Dependent Claim 44 words

A method as in claim 1, further comprising discontinuing processing, notifying the user of a failure, and writing an inappropriate request record to a security log in response to a determination that a user is not permitted access to the selected non-natively secured application.

Claim 13

Dependent Claim 38 words

A method as in claim 1, further comprising notifying the user of a failure and sending an alarm signal to an administrative monitoring platform in response to a determination that an account is not available from the pool.

Claim 14

Dependent Claim 193 words

For use in cooperation with an operating system having a native security system, a system for authenticating and auditing access by a user to non-natively secured applications, comprising: at least one datastore in communication with the operating system for storing: (a) a profile assigned to the user to define the user's access rights to the non-natively secured applications, (b) account data relating to each of the non-natively secured applications, including an access control list defining authorized users, and (c) a set of pooled accounts authenticated for access to the respective non-natively secured application; whereby the native security system is operative to: (a) request an account from the set of pooled accounts in response to a determination that the user is permitted access to a selected non-natively secured application; (b) determine if an account is available from the set of pooled accounts; (c) assign an account to the user in response to a determination that an account is available from the set of pooled accounts, the assigned account operative as the user's virtual identity to the selected non-natively secured application; and (d) generate an audit record to map the user to the assigned account.

Claim 15

Dependent Claim 193 words

For use in cooperation with an operating system having a native security system, a system for authenticating and auditing access by a user to non-natively secured applications, comprising: at least one datastore in communication with the operating system for storing: (a) a profile assigned to the user to define the user's access rights to the non-natively secured applications, (b) account data relating to each of the non-natively secured applications, including an access control list defining authorized users, and (c) a set of pooled accounts authenticated for access to the respective non-natively secured application; whereby the native security system is operative to: (a) request an account from the set of pooled accounts in response to a determination that the user is permitted access to a selected non-natively secured application; (b) determine if an account is available from the set of pooled accounts; (c) assign an account to the user in response to a determination that an account is available from the set of pooled accounts, the assigned account operative as the user's virtual identity to the selected non-natively secured application; and (d) generate an audit record to map the user to the assigned account.

Claim 16

Dependent Claim 44 words

A system as in claim 13, wherein the native security system or extension thereof determines if the user is permitted access to the selected non-natively secured application by comparing the user's access rights with the access control list for the selected non-natively secured application.

Claim 17

Dependent Claim 32 words

A system as in claim 14, wherein the user profile includes a set of assigned roles and the access control list for each of the non-natively secured applications includes authorized user roles.

Claim 18

Dependent Claim 56 words

A system as in claim 15, wherein the native security system or extension thereof determines if the user is permitted access to the selected non-natively secured application by comparing the user's assigned roles with the authorized roles for the selected non-natively secured application to determine if at least one assigned role is valid for the request.

Claim 19

Dependent Claim 24 words

A system as in claim 14, wherein the user profile includes the user's identity and the account data includes a set of authorized identities.

Claim 20

Dependent Claim 52 words

A system as in claim 17, wherein the native security system or extension thereof determines if the user is permitted access to the selected non-natively secured application by comparing the user's identity with the authorized identities for the selected non-natively secured application to determine if the user is valid for the request.

Claim 21

Dependent Claim 53 words

A system as in claim 13, wherein the native security system or extension thereof is further operative to discontinue processing, notify the user of a failure, and write inappropriate request record to a security log in response to a determination that a user is not permitted access to the selected non-natively secured application.

Claim 22

Dependent Claim 48 words

A system as in claim 13, wherein the native security system or extension thereof is further operative to notify the user of a failure and send an alarm signal to an administrative monitoring platform in response to a determination that an account is not available from the pool.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	2001-05-04	2001-11-03	2002-05-05	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2005-05-04	2005-11-03	2006-05-05	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2009-05-04	2009-11-03	2010-05-05	$7700.00	Window Closed / Lapsed

Method and system for authenticating and auditing access by a user to non-natively secured applications

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag