Secure audit log access for federation compliance
AssigneeInternational Business Machines Corporation
InventorsTimothy James Hahn, Heather Maria Hinton, Patrick Ryan Wardrop
Life of this patent
Estimating the term…
Abstract
A computer implemented method, data processing system, and computer program product for allowing limited access to a federation partner's audit logs in a secure, controlled manner, for the purposes of compliance demonstration. A request for audit data is received by a partner in the federated environment. The partner validates the request and requests a local report using local parameters against a local audit log store. The partner then builds a response based on the local report.
Claims20
A computer implemented method for providing audit log information across different security domains in a federated environment, the computer implemented method comprising:
- receiving, at a first partner in the federated environment, a request for audit data from a second partner in the federated environment to form a received request, wherein the first partner is in a first security domain and the second partner is in a second security domain different from the first security domain;
- validating the received request to form a validated request;
- refining the validated request to comply with an audit data policy of the first partner;
- requesting a local report based on the refined validated request;
- and
- building a response based on the local report.
A data processing system for providing audit log information across different security domains in a federated environment, the data processing system comprising:
- a bus;
- a storage device connected to the bus, wherein the storage device contains computer usable code;
- at least one managed device connected to the bus;
- a communications unit connected to the bus;
- and
- a processing unit connected to the bus, wherein the processing unit executes the computer usable code to receive, at a first partner in the federated environment, a request for audit data from a second partner in the federated environment to form a received request, wherein the first partner is in a first security domain and the second partner is in a second security domain different from the first security domain, validate the received request to form a validated request, refine the validated request to comply with an audit data policy of the first partner, request a local report based on the refined validated request, and build a response based on the local report.
A computer program product for providing audit log information across different security domains in a federated environment, the computer program product comprising:
- a non-transitory computer usable storage medium having computer usable program code stored thereon, the computer usable program code comprising:
- computer usable program code for receiving, at a first partner in the federated environment, a request for audit data from a second partner in the federated environment to form a received request, wherein the first partner is in a first security domain and the second partner is in a second security domain different from the first security domain;
- computer usable program code for validating the received request to form a validated request;
- computer usable program code for refining the validated request to comply with an audit data policy of the first partner;
- computer usable program code for requesting a local report based on the refined validated request;
- and
- computer usable program code for building a response based on the local report.
Dependencies are inferred from the claim text.