Back to results
US 9,961,112 B2Granted
Method and apparatus for enforcing realtime access controls for endpoints
AssigneeBomgar Corporation
InventorsDonald Warren Hasson, David William Durham, Dustin L. Majure
Life of this patent
Estimating the term…
Abstract
An approach is described for provisioning and enforcing realtime granular access controls for endpoints. The approach involves enforcing realtime access controls, via a privileged access management appliance, of a plurality of accessors, endpoints, and approvers, to provide for securing, controlling, auditing, and reporting of access to endpoints.
Claims20
A method comprising:
- detecting, via a privileged access management (PAM) appliance, an attempt to access an endpoint device by an accessor device, wherein the endpoint device is among a plurality of endpoint devices within a network, and wherein the PAM appliance manages access rights to the plurality of endpoint devices,
- establishing, via the PAM appliance, a session between the endpoint device and the accessor device based on an access policy assigned to the endpoint device;
- and
- transmitting a report of the session to an approver device based on the access policy,
- wherein network traffic among the plurality of endpoint devices, the accessor device, the approver device, other systems of the network, or a combination thereof is managed by the PAM appliance.
2 more elements
An apparatus comprising:
- at least one processor;
- and
- at least one non-transitory memory including computer program code,
- wherein the at least one non-transitory memory and the computer program code are configured to, with the at least one processor, cause the apparatus to perform at least the following:
- detect, via the apparatus, an attempt to access an endpoint device by an accessor device, wherein the endpoint device is among a plurality of endpoint devices within a network, and wherein the apparatus manages access rights to the plurality of endpoint devices,
- establish, via the apparatus, a session between the endpoint device and the accessor device based on an access policy assigned to the endpoint device;
- and
- transmit a report of the session to an approver device based on the access policy,
- wherein network traffic among the plurality of endpoint devices, the accessor device, the approver device, other systems of the network, or a combination thereof is managed by the apparatus.
6 more elements
Dependencies are inferred from the claim text.