Computer-implemented identity and access management system, method, computer program and recording medium
AssigneeSiemens Aktiengesellschaft
InventorsHarald Herberth, Alexander Adam, Sebastian Friedrich
Life of this patent
Estimating the term…
Abstract
A computer-implemented identity and access management system that includes at least two domains that are each assigned to a user organization, wherein a first domain is an original equipment manufacturer (OEM) domain assigned to users of an OEM organization, and a second domain is an end customer domain assigned to users of an end customer organization, where each domain includes a function memory module and a memory module for data corresponding to the functions, and where the function memory module and the data memory module of the OEM domain are configured such that they grant access only to a user of the OEM organization.
Claims15
A computer-implemented identity and access management system comprising:
- at least one processor;
- and
- memory;
- at least two domains which are each assigned to a user organization;
- wherein a first domain of the at least two domains comprises an original equipment manufacturer (OEM) domain associated with users of an OEM organization;
- wherein a second domain of the at least two domains comprises an end customer domain associated with users of an end customer organization;
- wherein each domain comprises a module for storing functions and a module for storing data corresponding to the functions;
- wherein the module for storing functions and the module for storing data of the OEM domain are configured to only grant access to a user of the OEM organization;
- wherein the system is configured to grant a user of the end customer organization restricted access to the OEM domain to allow the user to block or release access of users of the OEM to the module for storing functions and the module for storing data of the OEM domain;
- wherein the module for storing functions and the module for storing data are implemented via the memory;
- and
- wherein the module for storing functions is configured to authenticate the user via a cryptographic credential prior to granting access to the module for storing data.
A computer-implemented method implemented utilizing at least one processor and memory for creating an identity and access management system including at least two domains which are each assigned to a user organization, a first domain being an original equipment manufacturer (OEM) domain assigned to users of an OEM organization, and a second domain being an end customer domain assigned to users of an end customer organization, the method comprising:
- creating, by an OEM, the identity and access management system;
- creating, by the OEM, the OEM domain and initializing and configuring a module for storing functions and a module for storing data in the OEM domain, wherein the module for storing functions and the module for storing data of the OEM domain being configured to each only allow access to a user of the organization of the OEM;
- and
- creating (S2), by one of the OEM and the end customer, the end customer domain in the system;
- wherein granting a user of the end customer organization restricted access to the OEM domain allows the user to block or release access of users of the OEM to the module for storing functions and the module for storing data of the OEM domain;
- wherein the module for storing functions and the module for storing data are implemented via the memory;
- and
- wherein configuring the module for storing functions comprises authenticating the user via a cryptographic credential prior to granting access to the module for storing data.
Dependencies are inferred from the claim text.