US 2026/0291942 A1 · SECURITY CONTROL ENGINE(S) FOR DYNAMICALLY CONTROLLING REMOTE ACCESS TO PRIVILEGED AUTHENTICATION SYSTEMS

Abstract

Systems and methods herein provide a security control engine and its related functions. In an aspect, a security control engine is provided for controlling access to one or more privileged authentication systems, such as a domain controller. To control remote access to the privileged authentication systems, the security control engine identifies which network devices correspond to the privileged authentication systems. The security control engine also retrieves historical data of client devices within the network and identifies a subset of the client devices as authorized for privileged authentication systems access based on the historical data. The security control engine then determines a remaining subset of client devices as unauthorized to remotely access the privileged authentication systems and blocks the respective client devices from remotely accessing the one or more network devices corresponding to the privileged authentication systems.

Claims20

Dependent claims

A computing apparatus comprising:

a computer-readable storage media;
a security control engine comprising processor-executable instructions stored on the computer-readable storage media;
and
a processor coupled to the computer-readable storage media and configured to execute the processor-executable instructions, wherein the processor-executable instructions, when executed by the processor, direct the computing apparatus, to at least:
determine a plurality of client devices within a network;
determine historical data for the plurality of client devices, wherein the historical data comprises outgoing network connections for the plurality of client devices within the network;
classify a subset of client devices of the plurality of client devices into an unauthorized group for remotely accessing at least one domain controller using the historical data of the respective client devices;
and
apply an access policy to the subset of client devices based on the subset of client devices being classified in the unauthorized group, wherein the access policy blocks remote access to the at least one domain controller.

6 more elements

A method comprising:

determining, by a security control engine, a plurality of client devices for evaluation of domain controller access;
identifying, by the security control engine, one or more network devices within a network as one or more domain controllers;
retrieving, by the security control engine, historical data of the plurality of client devices;
identifying, by the security control engine, a subset of client devices of the plurality of client devices as authorized for domain controller access using the historical data of the respective client devices;
and
blocking, by the security control engine, a remaining subset of client devices of the plurality of client devices from remotely accessing the one or more network devices corresponding to the one or more domain controllers based on the historical data of the respective client devices.

3 more elements

A computer readable storage media comprising processor-executable instructions configured to cause a processor to:

determine, by a security control engine, a first client device from a plurality of client devices for evaluation of domain controller access;
determine, by the security control engine, first historical data associated with the first client device, wherein the first historical data comprises outgoing network connections for the first client device;
identify, by the security control engine, one or more network devices within a network as corresponding to one or more domain controllers;
classify, by the security control engine, the first client device into an authorized group for remotely accessing a first domain controller based on the first historical data, wherein the one or more domain controllers comprise the first domain controller;
and
grant, by a security control engine, an ability to remotely access the first domain controller for the first client device based on the classification of the first client device into the authorized group.

3 more elements

Dependencies are inferred from the claim text.

Security control engine(s) for dynamically controlling remote access to privileged authentication systems

Life of this patent

Security control engine(s) for dynamically controlling remote access to privileged authentication systems

Life of this patent

Abstract

Claims20