Back to results
US 8,949,932 B2Granted
Techniques for credential auditing
AssigneeOracle International Corporation
InventorsLarry Hall Henderson, Brett A. Berger
Life of this patent
Estimating the term…
Abstract
Techniques for credential auditing are provided. Histories for credentials are evaluated against a principal credential policy for a user and an enterprise credential policy for an enterprise as a whole. An audit trail is produced within a report for the histories. The report indicates whether compliance with the principal and enterprise credential policies occulted and if not at least one reason is provided as to why compliance was not met within the histories.
Claims18
A system comprising:
- one or more processors;
- and
- a memory coupled with and readable by the processors and storing therein a set of instructions which, when executed by the processors, causes the processor to:
- maintain a credential store having credentials of principals for an enterprise along with histories for the credentials of the principals, each credential history comprising a log of previously used credentials for a principal identified by a hash value for each credential instead of the credential, and
- provide a credential auditing service, wherein the credential auditing service receives a request to audit a credential for a principal, inspects a credential history for the principal without accessing the credential, performs the audit of the credential of the principal based on said inspecting, wherein performing the audit includes making determinations regarding expiration and prior use of the credential, and generates a report for the credential based on said inspecting and performing the audit, wherein the report masks the credential and the credential history and includes an indication as to whether the credential complies with a policy for credential usage.
2 more elements
A method comprising:
- maintaining, by a credential management system, a credential store having credentials of principals for an enterprise along with histories for the credentials of the principals, each credential history comprising a log of previously used credentials for a principal identified by a hash value for each credential instead of the credential;
- receiving, by a credential auditing service, a request to audit a credential for a principal;
- inspecting, by the credential auditing service, a credential history for the principal without accessing the credential;
- performing, by the credential auditing service, the audit of the credential of the principal based on said inspecting, wherein performing the audit includes making determinations regarding expiration and prior use of the credential;
- and
- generating, by the credential auditing service, a report for the credential based on said inspecting and performing the audit, wherein the report masks the credential and the credential history and includes an indication as to whether the credential complies with a policy for credential usage.
3 more elements
A non-transitory computer-readable memory comprising a set of instructions stored therein which, when executed by a processor, causes the processor to audit credentials by:
- maintaining, by a credential management system, a credential store having credentials of principals for an enterprise along with histories for the credentials of the principals, each credential history comprising a log of previously used credentials for a principal identified by a hash value for each credential instead of the credential;
- receiving, by a credential auditing service, a request to audit a credential for a principal;
- inspecting, by the credential auditing service, a credential history for the principal without accessing the credential;
- performing, by the credential auditing service, the audit of the credential of the principal based on said inspecting, wherein performing the audit includes making determinations regarding expiration and prior use of the credential;
- and
- generating, by the credential auditing service, a report for the credential based on said inspecting and performing the audit, wherein the report masks the credential and the credential history and includes an indication as to whether the credential complies with a policy for credential usage.
3 more elements
Dependencies are inferred from the claim text.