US 12,587,519 B2 · Identity access management systems and methods with enforceable compliance

Abstract

Systems and methods for enforcing compliance-program conformity during authorization-token generation are presented. Applications may be registered with an identity and access management (IAM) system. The registration of the application may include whether the application is subject to one or more compliance program(s). When an authorization token is requested from the IAM system, the IAM system may (a) determine the set of authorization information needed in the token, and (b) determine whether the application is subject to a compliance program. The IAM system may then check an approval source of record to determine whether the user was legitimately approved for the required authorization prior to granting an authorization token. If there is a mismatch between the approval source of record and the authorization information associated with the user identity, then the mismatch may cause certain mitigation actions to be performed.

Claims18

Dependent claims

An identity and access management system comprising:

at least one processor;
and
memory comprising instructions that, when executed by the at least one processor, cause the at least one processor to:
receive a request for an authorization token to authorize at least one function associated with a target application;
determine identity information from the request;
determine authorization information associated with the identity information;
determine that the target application is subject to a compliance program;
determine, based on determining that the target application is subject to the compliance program, whether an approval record associated with the authorization information satisfies the compliance program;
when the approval record is determined to satisfy the compliance program, generate the authorization token according to the authorization information, wherein the authorization token includes an attribute indicating that the approval record satisfies the compliance program;
and
transmit the authorization token in response to the request.

8 more elements

A method, comprising:

receiving a request for an authorization token to authorize at least one function associated with a target application;
determining identity information from the request;
determining authorization information associated with the identity information;
determining that the target application is subject to a compliance program;
determining, based on determining that the target application is subject to the compliance program, whether an approval record associated with the authorization information satisfies the compliance program;
when the approval record is determined to satisfy the compliance program, generating the authorization token according to the authorization information, wherein the authorization token includes an attribute indicating that the approval record satisfies the compliance program;
and
transmitting the authorization token in response to the request.

5 more elements

Dependencies are inferred from the claim text.

Identity access management systems and methods with enforceable compliance

Life of this patent

Identity access management systems and methods with enforceable compliance

Life of this patent

Abstract

Claims18