Method and apparatus for merging user accounts from a source security domain into a target security domain

Claim 1

A method for merging a source security domain having a plurality of source domain user accounts into a target security domain having a plurality of target domain user accounts in a network, wherein the set of source domain user accounts are provided access to protected source domain network resources based upon source user account identification information associated with each of the source domain user accounts and the set of target domain user accounts are provided access to protected target domain network resources based upon target user account identification information associated with each of the target domain user accounts, the method comprising the steps of: creating a set of new target domain user accounts within the target security domain corresponding to the set of source domain accounts; and transferring information for the set of source domain user accounts from a source domain security database into the set of new target domain user accounts in a target domain security database, including storing source user account identification information associated with at least one merged source domain user account within a corresponding new target domain user account, wherein the corresponding new target domain user account is provided access to protected source domain network resources based upon at least a subset of the source user account identification information stored within the corresponding new target domain account, wherein the source user account identification information includes a source domain account user name and a source domain user account identification.

Claim 2

A method for merging a source security domain having a plurality of source domain user accounts into a target security domain having a plurality of target domain user accounts in a network, wherein the set of source domain user accounts are provided access to protected source domain network resources based upon source user account identification information associated with each of the source domain user accounts and the set of target domain user accounts are provided access to protected target domain network resources based upon target user account identification information associated with each of the target domain user accounts, the method comprising the steps of: creating a set of new target domain user accounts within the target security domain corresponding to the set of source domain accounts; and transferring information for the set of source domain user accounts from a source domain security database into the set of new target domain user accounts in a target domain security database, including storing source user account identification information associated with at least one merged source domain user account within a corresponding new target domain user account, wherein the corresponding new target domain user account is provided access to protected source domain network resources based upon at least a subset of the source user account identification information stored within the corresponding new target domain account, wherein the source user account identification information includes a source domain account user name and a source domain user account identification.

Claim 12

A method for servicing, by a protected network resource associated with a first domain having a plurality of first domain user accounts, a request by an individual entity having a user account within a second domain having a plurality of second domain user accounts, the method comprising the steps of: receiving, by the protected network resource, the request from the individual entity associated with the second domain; identifying a security identification, corresponding to a third domain, within the request facilitating access by the individual entity to the protected network resource in order to fulfill the request; and verifying, by reading a certificate accompanying the request, the authenticity of the security identification, and in response processing, by the protected network resource, the request.

Claim 13

A method for servicing, by a protected network resource associated with a first domain having a plurality of first domain user accounts, a request by an individual entity having a user account within a second domain having a plurality of second domain user accounts, the method comprising the steps of: receiving, by the protected network resource, the request from the individual entity associated with the second domain; identifying a security identification, corresponding to a third domain, within the request facilitating access by the individual entity to the protected network resource in order to fulfill the request; and verifying, by reading a certificate accompanying the request, the authenticity of the security identification, and in response processing, by the protected network resource, the request.

Claim 15

A method for transferring a first user account from a source domain having a plurality of source domain user accounts into a target domain having a plurality of target domain user accounts in a network, wherein the first user account is provided access to protected network resources based upon a source domain security identification assigned to the first user account and stored in an account security database serving the first user account, the method comprising the steps of: designating a user account name for the first user account distinct from the set of user account names associated with target domain accounts; replacing the source domain security identification in the account security data structure for the first user account, by a target domain security identification associated with the target domain; and adding the first security identification to a field within the account security data structure designated for listing security identifications previously assigned to the first user account.

Claim 16

A method for transferring a first user account from a source domain having a plurality of source domain user accounts into a target domain having a plurality of target domain user accounts in a network, wherein the first user account is provided access to protected network resources based upon a source domain security identification assigned to the first user account and stored in an account security database serving the first user account, the method comprising the steps of: designating a user account name for the first user account distinct from the set of user account names associated with target domain accounts; replacing the source domain security identification in the account security data structure for the first user account, by a target domain security identification associated with the target domain; and adding the first security identification to a field within the account security data structure designated for listing security identifications previously assigned to the first user account.

Claim 17

A method for merging a source domain having a plurality of source domain user accounts into a target domain having a plurality of target domain user accounts in a network, wherein user accounts associated with the source domain are provided access to protected network resources based upon a source domain security identification assigned to each of the source domain user accounts and stored in an account security data structure, the method comprising the steps of: generating a set of unique names corresponding to the user accounts associated with the source domain and the target domain; and creating a set of new account security data structures in the target domain security database for user accounts transferred from the source domain to the target domain, the creating step comprising the sub-steps of: assigning within each of the set of new account security data structures a target domain security identification associated with the target domain; and adding, for each of the set of new account security data structures, the source domain security identification to a field designated for listing security identifications previously assigned to the account.

Claim 18

A method for merging a source domain having a plurality of source domain user accounts into a target domain having a plurality of target domain user accounts in a network, wherein user accounts associated with the source domain are provided access to protected network resources based upon a source domain security identification assigned to each of the source domain user accounts and stored in an account security data structure, the method comprising the steps of: generating a set of unique names corresponding to the user accounts associated with the source domain and the target domain; and creating a set of new account security data structures in the target domain security database for user accounts transferred from the source domain to the target domain, the creating step comprising the sub-steps of: assigning within each of the set of new account security data structures a target domain security identification associated with the target domain; and adding, for each of the set of new account security data structures, the source domain security identification to a field designated for listing security identifications previously assigned to the account.

Claim 19

A method for merging a set of source domain accounts into a target domain in a network, wherein the set of source domain accounts are provided access to protected source domain network resources based upon identification information associated with each of the accounts, the method comprising the steps of: creating a set of new domain accounts within the target domain corresponding to the set of source domain accounts; identifying a source domain account name matching a target domain account name; first modifying an account name for at least one of the matching account names in order to maintain a set of distinct account names associated with the source domain and target domain accounts, wherein the account name modified during the first modifying step corresponds to a constituent account of a group account including a list of constituent account names; second modifying an account name, in the list of constituent account names, in accordance with a new name assigned to the account name modified during the first modifying step; and transferring information for the set of source domain accounts from a source domain security database into the set of new domain accounts in a target domain security database, the transferring information step comprising performing for each merged source domain account within the set of source domain accounts the steps of: storing an account name corresponding to the merged source domain account; and storing a source domain account identification associated with the merged source domain account.

Claim 20

A method for merging a set of source domain accounts into a target domain in a network, wherein the set of source domain accounts are provided access to protected source domain network resources based upon identification information associated with each of the accounts, the method comprising the steps of: creating a set of new domain accounts within the target domain corresponding to the set of source domain accounts; identifying a source domain account name matching a target domain account name; first modifying an account name for at least one of the matching account names in order to maintain a set of distinct account names associated with the source domain and target domain accounts, wherein the account name modified during the first modifying step corresponds to a constituent account of a group account including a list of constituent account names; second modifying an account name, in the list of constituent account names, in accordance with a new name assigned to the account name modified during the first modifying step; and transferring information for the set of source domain accounts from a source domain security database into the set of new domain accounts in a target domain security database, the transferring information step comprising performing for each merged source domain account within the set of source domain accounts the steps of: storing an account name corresponding to the merged source domain account; and storing a source domain account identification associated with the merged source domain account.

Claim 21

A method for merging a set of source domain accounts into a target domain in a network, wherein the set of source domain accounts are provided access to protected source domain network resources based upon identification information associated with each of the accounts, wherein the set of source domain accounts includes a group account, and the group account includes a list of identifications corresponding to constituent accounts of the group account, the method comprising the steps of: creating a set of new domain accounts within the target domain corresponding to the set of source domain accounts; assigning target domain account identifications to each account within the set of new domain accounts; storing target domain account identifications, within the list of identifications, corresponding to new target domain account identifications assigned to the constituent accounts during the assigning step; and transferring information for the set of source domain accounts from a source domain security database into the set of new domain accounts in a target domain security database, the transferring information step comprising performing for each merged source domain account within the set of source domain accounts the steps of: storing an account name corresponding to the merged source domain account; and storing a source domain account identification associated with the merged source domain account.

Claim 22

A method for merging a set of source domain accounts into a target domain in a network, wherein the set of source domain accounts are provided access to protected source domain network resources based upon identification information associated with each of the accounts, wherein the set of source domain accounts includes a group account, and the group account includes a list of identifications corresponding to constituent accounts of the group account, the method comprising the steps of: creating a set of new domain accounts within the target domain corresponding to the set of source domain accounts; assigning target domain account identifications to each account within the set of new domain accounts; storing target domain account identifications, within the list of identifications, corresponding to new target domain account identifications assigned to the constituent accounts during the assigning step; and transferring information for the set of source domain accounts from a source domain security database into the set of new domain accounts in a target domain security database, the transferring information step comprising performing for each merged source domain account within the set of source domain accounts the steps of: storing an account name corresponding to the merged source domain account; and storing a source domain account identification associated with the merged source domain account.