Back to results
US 9,071,645 B2Granted
Techniques for credential auditing
AssigneeOracle International Corporation
InventorsLarry Hall Henderson, Brett A. Berger
Life of this patent
Estimating the term…
Abstract
Techniques for credential auditing are provided. Histories for credentials are evaluated against a principal credential policy for a user and an enterprise credential policy for an enterprise as a whole. An audit trail is produced within a report for the histories. The report indicates whether compliance with the principal and enterprise credential policies occurred and if not at least one reason is provided as to why compliance was not met within the histories.
Claims12
A system comprising:
- one or more processors;
- and
- a memory coupled with and readable by the processors and storing therein a set of instructions which, when executed by the processors, cause the processors to:
- provide a password management service maintaining passwords for users of an enterprise along with histories for the passwords for the users within a secure enterprise environment, each password history comprising a log of previously used passwords for the user, wherein each password represented in the password history is replaced with substitute text masking the password, and wherein the password management service does not permit the passwords to be exposed outside the secure enterprise environment, and
- provide a password audit service interacting with the password management service, the password audit service receiving a request to audit the passwords, inspecting the password histories without accessing the passwords, performing the audit for the passwords for compliance with a policy without accessing the passwords, and generating reports, based on said auditing, to demonstrate whether particular users have complied or not complied with the policy, wherein the report masks the passwords and includes an indication as to whether the password complies with the policy and, when non-compliance is detected, a reason for the non-compliance.
2 more elements
A method comprising:
- maintaining, by a password management service, passwords for users of an enterprise along with histories for the passwords for the users within a secure enterprise environment, each password history comprising a log of previously used passwords for the user, wherein each password in the password history is replaced with substitute text masking the password, and wherein the password management service does not permit the passwords to be exposed outside the secure enterprise environment;
- receiving, by a password audit service, a request to audit the passwords;
- inspecting, by the password audit service, the password histories without accessing the passwords;
- performing, by the password audit service, the audit for the passwords for compliance with a policy without accessing the passwords;
- and
- generating, by the password audit service based on said auditing, reports to demonstrate whether particular users have complied or not complied with the policy, wherein the reports mask the passwords and includes an indication as to whether the password complies with the policy and, when non-compliance is detected, a reason for the non-compliance.
3 more elements
A non-transitory computer-readable memory comprising a set of instructions stored therein which, when executed by a processor, causes the processor to audit passwords by:
- maintaining, by a password management service, passwords for users of an enterprise along with histories for the passwords for the users within a secure enterprise environment, each password history comprising a log of previously used passwords for the user, wherein each password in the password history is replaced with substitute text masking the password, and wherein the password management service does not permit the passwords to be exposed outside the secure enterprise environment;
- receiving, by a password audit service, a request to audit the passwords;
- inspecting, by the password audit service, the password histories without accessing the passwords;
- performing, by the password audit service, the audit for the passwords for compliance with a policy without accessing the passwords;
- and
- generating, by the password audit service based on said auditing, reports to demonstrate whether particular users have complied or not complied with the policy, wherein the reports mask the passwords and includes an indication as to whether the password complies with the policy and, when non-compliance is detected, a reason for the non-compliance.
3 more elements
Dependencies are inferred from the claim text.