US 2026/0303671 A1 · CENTRALIZED COMPLIANCE MANAGEMENT PLATFORM FOR SECURITY OBJECTS

Abstract

A centralized compliance platform usable to manage security policies associated with security objects, such as keys, secrets, and certificates. Such a centralized compliance platform performs discovery across the enterprise to obtain information about the varying security objects used by that organization, for example via application programming interface (API) connections to enterprise key and secret vaults, as well as certificate storage locations. The platform may generate a user interface at which compliance with enterprise policies may be monitored, which individual compliance issues for specific security objects able to the sorted, searched, and filtered. The platform may also generate one or more actions that may be taken in response to detected compliance issues, for example to generate alerts in response to noncompliant security objects or storage locations.

Claims19

Dependent claims

A security object compliance management platform comprising:

a computing system including a processor and memory, the memory storing instructions executable by the processor to:
connect to a plurality of heterogeneous security object storage locations via an application programming interface exposed by the respective security object storage location;
obtain, from each of the plurality of heterogeneous security object storage locations, metadata describing security objects maintained at the respective security object storage location;
receive, via an administrative user interface of the security object compliance management platform, a platform-defined policy associated with the plurality of heterogeneous security object storage locations;
generate, for each of the plurality of heterogeneous security object storage locations, a compliance status with the platform-defined policy based on the obtained metadata, wherein the security objects from the plurality of heterogeneous security object storage locations are not retrieved;
and
display, on the administrative user interface, the compliance status for at least one of the heterogeneous security object storage locations.

4 more elements

A method of managing compliance for security objects maintained across a plurality of heterogeneous security object storage locations, the method comprising:

connecting, by a compliance management platform, to a plurality of heterogeneous security object storage locations via an application programming interface exposed by the respective security object storage location;
obtaining, from each of the plurality of heterogeneous security object storage locations, metadata describing security objects maintained at the respective security object storage location;
receiving, via an administrative user interface of the compliance management platform, a platform-defined policy associated with the plurality of heterogeneous security object storage locations;
generating, for each of the heterogeneous security object storage locations, a compliance status with the platform-defined policy based on the obtained metadata, wherein the security objects from the plurality of heterogeneous security object storage locations are not retrieved;
and
displaying, on the administrative user interface, the compliance status for at least one of the heterogeneous security object storage locations.

3 more elements

A non-transitory computer-readable medium comprising computer-executable instructions installed thereon, the computer-executable instructions being executable by a computing system to cause the computing system to perform a method of managing compliance for security objects maintained across a plurality of heterogeneous security object storage locations, the method comprising:

connecting, via an application programming interface exposed by the respective security object storage location, to a plurality of heterogeneous security object storage locations;
obtaining, from each of the plurality of heterogeneous security object storage locations, metadata describing security objects maintained at the respective security object storage location;
receiving, via an administrative user interface, a platform-defined policy associated with the plurality of heterogeneous security object storage locations;
generating, for each of the plurality of heterogeneous security object storage locations, a compliance status with the platform-defined policy based on the obtained metadata, wherein the security objects from the plurality of heterogeneous security object storage locations are not retrieved;
and
displaying, on the administrative user interface, the compliance status for at least one of the heterogeneous security object storage locations.

3 more elements

Dependencies are inferred from the claim text.

Centralized compliance management platform for security objects

Life of this patent

Centralized compliance management platform for security objects

Life of this patent

Abstract

Claims19