Authorization audit
AssigneeHewlett-Packard Development Company, L.P.
InventorsPaul Michael Anderson, Christopher Myers
Life of this patent
Estimating the term…
Abstract
In an example implementation according to aspects of the present disclosure, a system, method, and storage medium comprising a processor, memory, and instructions to send a request for authorization to a user wherein the authorization is limited to a subset of privileged information associated with the user, receive a response for authorization from the user. The instructions, responsive to the receipt of the response, access the subset of privileged information from a user data repository. The instructions, responsive to the access, send an audit record to an audit system, wherein the audit record comprises the request, the response, and a summary of the access and send the audit record to the user.
Claims15
A system comprising:
- a processor;
- and
- a memory communicatively coupled to the processor and storing machine readable instructions that when executed cause the processor to:
- send a request for authorization to a user wherein the authorization is limited to a subset of privileged information associated with the user;
- receive a response for authorization from the user;
- responsive to the receipt of the response, access the subset of privileged information from a user data repository;
- responsive to the access, send an audit record to an audit system, wherein the audit record comprises the request, the response, and a summary of the access;
- and
- send the audit record to the user.
A method comprising:
- receiving a context from a user;
- sending a request for authorization to a user wherein the authorization is limited to a subset of privileged information associated with the user within the context;
- receiving a response for authorization from the user;
- responsive to the receipt of the response, accessing the subset of privileged information from a user data repository;
- responsive to the access, sending an audit record to an audit system, wherein the audit record comprises the request, the response, and a summary of the access;
- and
- sending the audit record to the user.
A non-transitory computer readable medium comprising machine readable instructions that when executed cause a processor to:
- receive a context from a user;
- create a session corresponding to the context;
- send a request for authorization to the user wherein the authorization is limited to a subset of privileged information associated with the user within the session;
- receive a response for authorization from the user;
- responsive to the receipt of the response, access the subset of privileged information from a user data repository;
- responsive to the access, send an audit record to an audit system, wherein the audit record comprises the request, the response, and a summary of the access;
- detect a change in the context;
- responsive to detecting the change, close the session;
- and
- invalidate the authorization.
Dependencies are inferred from the claim text.