Back to results
US 8,949,432 B2Granted
Identity management
AssigneeInternational Business Machines Corporation
InventorsJean-Marc Berthaud, Stephane Lebrun, Charles Manghini
Life of this patent
Estimating the term…
Abstract
An identity management method and system is disclosed. The method includes identity context management (ICM) clients monitoring access to Internet resources using dedicated Virtual Machines (VM). An ICM server monitors associations between Internet resource identifiers (IDs) and the Internet resources accessed by the VMs. The VMs register context for the ICM clients with the ICM server. An ICM client enables access to Internet resources and presentation of Webpages and Internet contents associated with the Internet resources within the associated Virtual Machine context.
Claims20
An identity management method comprising:
- registering, by a computer processor of a computing system, identity context management (ICM) clients of said computing system with an ICM server of said computing system;
- monitoring for a user, by an ICM client of said ICM clients, access to a first Internet resource;
- transmitting, by said ICM client to said ICM server, a notification indicating said access to said first Internet resource;
- transmitting, by said ICM server to said user, a first request for an ID associated with said first Internet resource;
- receiving, by said ICM server from said user in response to said first request, a first ID associated with said first Internet resource;
- recording, by said ICM server, an association describing said first ID associated with said first Internet resource;
- generating, by said ICM server in response to said receiving said first ID, a first virtual machine (VM) within said computing system;
- enabling, by said ICM client in response to a command from said ICM server, access to said first Internet resource;
- presenting, by said first VM to said user in response to said enabling said first Internet resource, first Webpages, and first Internet contents associated with said first Internet resource;
- transmitting, by said ICM server to said user, a fourth request for an ID associated with a fifth Internet resource associated with said first VM;
- receiving, by said ICM server from said user in response to said fourth request, a third ID associated with said fifth Internet resource, wherein said third ID is a lower ordered ID of said first ID;
- saving, by said ICM server, a first state of said first VM as a first reference thereby confirming said first ID;
- and
- generating, by said ICM server in response to said receiving said third ID and said saving said first state of said first VM, a third VM within said computing system, wherein said third VM comprises a first differential with respect to said first state of said first VM as said first reference.
11 more elements
A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a computer processor of a computing system implements a method comprising:
- registering, by said computer processor, identity context management (ICM) clients of said computing system with an ICM server of said computing system;
- monitoring for a user, by an ICM client of said ICM clients, access to a first Internet resource;
- transmitting, by said ICM client to said ICM server, a notification indicating said access to said first Internet resource;
- transmitting, by said ICM server to said user, a first request for an ID associated with said first Internet resource;
- receiving, by said ICM server from said user in response to said first request, a first ID associated with said first Internet resource;
- recording, by said ICM server, an association describing said first ID associated with said first Internet resource;
- generating, by said ICM server in response to said receiving said first ID, a first virtual machine (VM) within said computing system;
- enabling, by said ICM client in response to a command from said ICM server, access to said first Internet resource;
- presenting, by said first VM to said user in response to said enabling said first Internet resource, first Webpages, and first Internet contents associated with said first Internet resource;
- transmitting, by said ICM server to said user, a fourth request for an ID associated with a fifth Internet resource associated with said first VM;
- receiving, by said ICM server from said user in response to said fourth request, a third ID associated with said fifth Internet resource, wherein said third ID is a lower ordered ID of said first ID;
- saving, by said ICM server, a first state of said first VM as a first reference thereby confirming said first ID;
- and
- generating, by said ICM server in response to said receiving said third ID and said saving said first state of said first VM, a third VM within said computing system, wherein said third VM comprises a first differential with respect to said first state of said first VM as said first reference.
11 more elements
A computing system comprising a computer processor coupled to a computer-readable memory unit, said memory unit comprising instructions that when executed by the computer processor implements a method comprising:
- registering, by said computer processor, identity context management (ICM) clients of said computing system with an ICM server of said computing system;
- monitoring for a user, by an ICM client of said ICM clients, access to a first Internet resource;
- transmitting, by said ICM client to said ICM server, a notification indicating said access to said first Internet resource;
- transmitting, by said ICM server to said user, a first request for an ID associated with said first Internet resource;
- receiving, by said ICM server from said user in response to said first request, a first ID associated with said first Internet resource;
- recording, by said ICM server, an association describing said first ID associated with said first Internet resource;
- generating, by said ICM server in response to said receiving said first ID, a first virtual machine (VM) within said computing system;
- enabling, by said ICM client in response to a command from said ICM server, access to said first Internet resource;
- presenting, by said first VM to said user in response to said enabling said first Internet resource, first Webpages, and first Internet contents associated with said first Internet resource;
- transmitting, by said ICM server to said user, a fourth request for an ID associated with a fifth Internet resource associated with said first VM;
- receiving, by said ICM server from said user in response to said fourth request, a third ID associated with said fifth Internet resource, wherein said third ID is a lower ordered ID of said first ID;
- saving, by said ICM server, a first state of said first VM as a first reference thereby confirming said first ID;
- and
- generating, by said ICM server in response to said receiving said third ID and said saving said first state of said first VM, a third VM within said computing system, wherein said third VM comprises a first differential with respect to said first state of said first VM as said first reference.
11 more elements
Dependencies are inferred from the claim text.