System and Method to Associate a Private User Identity with a Public User Identity

A computer-implemented method for associating a user identity used to access a network through a host, comprising:

• creating an application session record for an application session between a network and an application via a security gateway, wherein the application session record comprises the user identity used for accessing the network through the host, a host identity for the host, and an application session time, wherein the creating comprises:
• sending a query including the host identity and the application session time from the application session record;
• receiving, in response to the query, information about an access session between a second host and the network, wherein the information about the access session comprises a second user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time;
• and
• storing the second user identity as the user identity used for accessing the network in the application session record if the host identity in the application session record matches the second host identity and the access session time matches the application session time.

A computer-implemented method for associating a user identity used to access a network, comprising:

• recording, via a security gateway, information about an application session between a first host and an application over a network, wherein the information about the application session comprises a first host identity for the first host used to access the application and an application session time;
• acquiring information about an access session between a second host and the network, wherein the information about the access session comprises a user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time;
• and
• recording the user identity used for accessing the network, if the first host identity matches the second host identity and the application session time matches the access session time.

A security gateway configured to

• receive a first host identity for a first host and a first user identity used in an application session conducted through the first host;
• receive an application session time associated with the application session;
• acquire a second host identity for a second host and a second user identity used in an access session conducted through the second host;
• acquire an access session time associated with the access session;
• and
• associate the first and second user identities if the first host identity corresponds to the second host identity and the access session time corresponds to the application session time.

A security gateway configured to

• create an application session record for an application session between a network and an application via a security gateway, wherein the application session record comprises the user identity used for accessing the network through the host, a host identity for the host, and an application session time,
• wherein the security gateway creates the application session record by:
• sending a query including the host identity and the application session time from the application session record;
• receiving, in response to the query, information about an access session between a second host and the network, wherein the information about the access session comprises a second user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time;
• and
• storing the second user identity as the user identity used for accessing the network in the application session record if the host identity in the application session record matches the second host identity and the access session time matches the application session time.

A security gateway configured to:

• record, via a security gateway, information about an application session between a first host and an application over a network, wherein the information about the application session comprises a first host identity for the first host used to access the application and an application session time;
• acquire information about an access session between a second host and the network, wherein the information about the access session comprises a user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time;
• and
• record the user identity used for accessing the network, if the first host identity matches the second host identity and the application session time matches the access session time.

A non-transitory computer-readable medium storing instructions that, when executed, cause a computer to perform a method for associating first and second user identities, the method comprising:

• receiving a first host identity for a first host and a first user identity used in an application session conducted through the first host;
• receiving an application session time associated with the application session;
• acquiring a second host identity for a second host and a second user identity used in an access session conducted through the second host;
• acquiring an access session time associated with the access session;
• and
• associating the first and second user identities if the first host identity corresponds to the second host identity and the access session time corresponds to the application session time.

A non-transitory computer-readable medium storing instructions that, when executed, cause a computer to perform a method for associating a user identity used to access a network through a host, the method comprising:

• creating an application session record for an application session between a network and an application via a security gateway, wherein the application session record comprises the user identity used for accessing the network through the host, a host identity for the host, and an application session time, wherein the creating comprises:
• sending a query including the host identity and the application session time from the application session record;
• receiving, in response to the query, information about an access session between a second host and the network, wherein the information about the access session comprises a second user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time;
• and
• storing the second user identity as the user identity used for accessing the network in the application session record if the host identity in the application session record matches the second host identity and the access session time matches the application session time.

A non-transitory computer-readable medium storing instructions that, when executed, cause a computer to perform a method for associating a user identity used to access a network, the method comprising:

• recording, via a security gateway, information about an application session between a first host and an application over a network, wherein the information about the application session comprises a first host identity for the first host used to access the application and an application session time;
• acquiring information about an access session between a second host and the network, wherein the information about the access session comprises a user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time;
• and
• recording the user identity used for accessing the network, if the first host identity matches the second host identity and the application session time matches the access session time.