Collecting account access statistics from information provided by presence of client certificates
AssigneeRed Hat, Inc.
InventorJames P. Schneider
Life of this patent
Estimating the term…
Abstract
A method and system for collecting account access statistics from information provided by client certificates. In one embodiment, the method comprises requesting client certificates from remote terminals that request to access a computing resource. The method further comprises updating the account access statistics based on information provided by presence or absence of the client certificates and contents of the client certificates for the client certificates that are present.
Claims14
A method comprising:
- requesting, by a computer system, a client certificate from a remote terminal that requests to access a computing resource, the client certificate identifying the remote terminal and an authorized user of the remote terminal, wherein the client certificate is not used by the computer system to determine access to the computing resource;
- receiving, by the computer system, access credentials of a user from the remote terminal, wherein the access credentials are used by the computer system to grant access to the computer resource;
- determining whether the client certificate is provided by the remote terminal, and if so, determining whether information of the authorized user in the client certificate matches the access credentials of the user;
- and
- updating account access statistics to show whether the access of the computing resource was associated with a client certificate and whether such client certificate matched the access credentials of the user.
A system comprising:
- data storage to store a collection of statistics;
- and
- a computing entity coupled to the data storage, the computing entity to request a client certificate from a remote terminal that requests to access a computing resource, wherein the client certificate identifies the remote terminal and an authorized user of the remote terminal and is not used by the computer system to determine access to the computing resource, the computer entity to:
- receive access credentials of a user from the remote terminal, wherein the access credentials are used by the computer system to grant access to the computer resource,
- determining whether the client certificate is provided by the remote terminal, and if so, determining whether information of the authorized user in the client certificate matches the access credentials of the user, and
- update account access statistics to show whether the access of the computing resource was associated with a client certificate and whether such client certificate matched the access credentials of the user.
A non-transitory computer readable storage medium including instructions that, when executed by a processing system, cause the processing system to perform a method comprising:
- requesting a client certificate from a remote terminal that requests to access a computing resource, the client certificate identifying the remote terminal and an authorized user of the remote terminal, wherein the client certificate is not used by the computer system to determine access to the computing resource;
- receiving access credentials of a user from the remote terminal, wherein the access credentials are used by the computer system to grant access to the computer resource;
- determining whether the client certificate is provided by the remote terminal, and if so, determining whether information of the authorized user in the client certificate matches the access credentials of the user;
- and
- updating account access statistics to show whether the access of the computing resource was associated with a client certificate and whether such client certificate matched the access credentials of the user.
Dependencies are inferred from the claim text.