US 12,615,260 B1 · System for managing non-human identities

Abstract

Non-human identities (NHI) are present in many organizations. NHIs may be associated with automated processes, bots, devices, and so forth. NHIs may be involved in operations within an organization, as well as operations that interact with other organizations. The creation and management of NHIs differs from human identities. A system for managing NHIs ingests data from an existing system and determines the NHIs. Once determined, the system provides a single management point for NHIs, providing visibility and allowing management according to specified best practices appropriate to the organization. New NHIs may be provisioned as needed and with appropriate security permissions. Access credentials of NHIs may be rotated. Old, unused, or compromised NHIs may be quickly deprovisioned. Operations that are better performed by an NHI may be migrated from a human identity to the NHI, avoiding breakage due to changes in the human identity status.

Claims20

Dependent claims

A system comprising:

a memory, storing first computer-executable instructions;
and
a hardware processor to execute the first computer-executable instructions to:
instantiate a representation of an organization;
determine a first linked system that is associated with the organization;
establish a first connection with the first linked system;
retrieve, using the first connection, first ingested data, wherein the first ingested data comprises one or more of:
account data indicative of one or more user accounts, or
log data based on operation of the first linked system;
determine a first set of classification rules;
and
determine, based on a comparison of the first ingested data using the first set of classification rules, a first non-human identity (NHI) that is associated with the organization.

9 more elements

A system comprising:

a memory, storing first computer-executable instructions;
and
a hardware processor to execute the first computer-executable instructions to:
retrieve first ingested data;
determine a first identity based on the first ingested data;
determine, based on the first ingested data, that the first identity is a mixed identity comprising a human identity and a first non-human identity (NHI) that is associated with an organization;
determine a request to provision the first NHI that is associated with the organization;
create the first NHI in the memory;
determine a first linked system that is associated with the first NHI;
establish a first connection with the first linked system;
send, using the first connection, a first request to the first linked system to create a first account for the first NHI at the first linked system;
determine first credential data associated with first account;
store the first credential data in the memory;
and
associate the first credential data with the first NHI.

12 more elements

Dependencies are inferred from the claim text.

System for managing non-human identities

Life of this patent

System for managing non-human identities

Life of this patent

Abstract

Claims20