Back to results
US 12,598,188 B2Granted
System and method for describing and visualizing allowed, denied, chained and effective access to a system
AssigneeSailpoint Technologies, Inc.
InventorsKristopher A. Keller, Manoj K. Guglani
Life of this patent
Estimating the term…
Abstract
Systems and methods are disclosed relating to identity governance and privileged access control in a distributed networked computing environment for cloud based computing services. Embodiments disclosed include a logical model developed to describe the effective access of multiple cloud service providers (CSPs), each of which may be based on different access systems. The resulting system can then provide a singular experience across all CSPs used by users, giving users a clear picture of how access is achieved.
Claims20
An identity management system, comprising:
- a processor;
- a non-transitory, computer-readable storage medium, including computer instructions for:
- obtaining identity management data from a plurality of different cloud service providers, the identity management data from each respective cloud service provider comprising data relating to rights and permissions associated with users of the respective cloud service provider, wherein the identity management data from a respective cloud service provider uses different terminology and a different data model than other of the different cloud service providers;
- for each of the plurality of cloud service providers, normalizing the identity management data of the respective cloud service provider to match normalized terminology used by each of the plurality of cloud service providers;
- for each of the plurality of cloud service providers, evaluating the respective normalized identity management data to determine rights of users and groups associated with the respective cloud service provider;
- applying the determined rights of the plurality of cloud service providers to an access model to determine federated rights of users and groups across the plurality of different cloud service providers;
- and
- presenting over a graphical user interface a graphical representation of the federated rights of a user across the plurality of cloud service providers.
5 more elements
A method, comprising:
- obtaining identity management data from a plurality of different cloud service providers, the identity management data from each respective cloud service provider comprising data relating to rights and permissions associated with users of the respective cloud service provider, wherein the identity management data from a respective cloud service provider uses different terminology and a different data model than other of the different cloud service providers;
- for each of the plurality of cloud service providers, normalizing the identity management data of the respective cloud service provider to match normalized terminology used by each of the plurality of cloud service providers;
- for each of the plurality of cloud service providers, evaluating the respective normalized identity management data to determine rights of users and groups associated with the respective cloud service provider;
- applying the determined rights of the plurality of cloud service providers to an access model to determine federated rights of users and groups across the plurality of different cloud service providers;
- and
- presenting over a graphical user interface a graphical representation of the federated rights of a user across the plurality of cloud service providers.
3 more elements
A non-transitory computer readable medium, comprising instructions for:
- obtaining identity management data from a plurality of different cloud service providers, the identity management data from each respective cloud service provider comprising data relating to rights and permissions associated with users of the respective cloud service provider, wherein the identity management data from a respective cloud service provider uses different terminology and a different data model than other of the different cloud service providers;
- for each of the plurality of cloud service providers, normalizing the identity management data of the respective cloud service provider to match normalized terminology used by each of the plurality of cloud service providers;
- for each of the plurality of cloud service providers, evaluating the respective normalized identity management data to determine rights of users and groups associated with the respective cloud service provider;
- applying the determined rights of the plurality of cloud service providers to an access model to determine federated rights of users and groups across the plurality of different cloud service providers;
- and
- presenting over a graphical user interface a graphical representation of the federated rights of a user across the plurality of cloud service providers.
3 more elements
Dependencies are inferred from the claim text.