System and method for cross-cloud identity matching

• US 10,033,737 B2
• Filed: 10/07/2014
• Issued: 07/24/2018
• Est. Priority Date: 10/10/2013
• Status: Active Grant

• Current Assignee: Harmon.ie R&d Ltd. (Harmon.ie, Inc.)
• Original Assignee: Harmon.ie R&d Ltd. (Harmon.ie, Inc.)
• Inventors: Sheinfeld, Roy
• Primary Examiner(s): Cervetti, David Garcia
• Application Number:
  US14/508,325
• Publication Number:
  US 20150106899A1
• Time in Patent Office: 1,386 Days
• Field of Search: 726 1, 726 2, 726 4, 726 8, 726 26, 726 27, 726 14, 726 23, 726 28, 726 6, 726 9
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A system and method for cross-cloud identity matching are provided. The method includes receiving at least one user identifier of a user of a client node; determining at least one cloud-based resource accessed by the client node; selecting a cloud-based resource of the at least one accessed cloud-based resource; extracting at least one possible user identity of the user from the selected cloud-based resource; identifying at least one user identifier of the extracted at least one possible user identity; matching between each identified user identifier and the at least one received user identifier; determining whether each possible user identity is associated with the user respective of the matching; and upon determining that at least one possible user identity is associated with the user, storing each associated user identity respective of the client node.

Claims

1. A method, implemented by one or more computers of a computer-based cloud environment in which there are implemented a plurality of cloud-based resources for at least two of which a user has a user identity, for cross-cloud identity matching, comprising:

receiving at least one user identifier of a user of a client node;

determining at least one of the cloud-based resources accessed by the client node;

selecting a cloud-based resource of the determined at least one cloud-based resource;

extracting at least one possible user identity of the user from the selected cloud-based resource;

identifying at least one user identifier of the extracted at least one possible user identity;

wherein one of the at least one received user identifier and one of the at least one identified user identifier is a profile photo;

matching between each identified user identifier and the at least one received user identifier;

determining whether each possible user identity is associated with the user based on the matching; and

upon determining that at least one possible user identity is associated with the user, storing each associated user identity for the client node.

2. The method of claim 1, wherein the at least one user identifier is received from an agent installed on the client node.

3. The method of claim 1, wherein the at least one of the determined cloud-based resources was previously accessed but is not currently accessed by the client node.

4. The method of claim 1, wherein each of the at least one received user identifier and the at least one identified user identifier is any one of:

a personal parameter, a professional parameter, an email address, and further wherein the personal parameter is any one of;

a name, an age, a gender, a hobby, and a hometown and the professional parameter is any one of;

a profession, a type of work, and a location of the user'"'"'s work.

5. The method of claim 1, wherein a possible user identity is determined to be associated with the user upon determining that the matching at least one identified user identifier and the at least one received user identifier exceeds a verification threshold.

6. The method of claim 5, wherein the verification threshold is any one of:

a number of user identifiers that demonstrate matching above a matching threshold, and a degree of matching between user identifiers.

7. The method of claim 1, wherein determining whether each possible user identity is associated with the user further comprises:

providing each associated user identity to a user; and

upon receiving a confirmation from the user that the associated user identity is associated with the user, determining that the associated user identity is associated with the user.

8. The method of claim 1, further comprising at least one of:

tokenizing the received at least one user identifier and parsing the received at least one user identifier.

9. A non-transitory computer readable medium having stored thereon instructions for causing one or more processing units to execute the method according to claim 1.

10. A system, implemented by one or more computers of a computer-based cloud environment in which there are implemented a plurality of cloud cloud-based resources for at least two of which a user has a user identity, for cross-cloud identity matching, comprising:

a processing system; and

a memory communicatively connected to the processing system, the memory containing instructions that, when executed by the processing system, configure the system to;

receive at least one user identifier of a user of a client node;

determine at least one of the cloud-based resources accessed by the client node;

select a cloud-based resource of the determined at least one cloud-based resource;

extract at least one possible user identity of the user from the selected cloud-based resource;

identify at least one user identifier of the extracted at least one possible user identity;

wherein one of the at least one received user identifier and one of the at least one identified user identifier is a profile photo;

match between each identified user identifier and the at least one received user identifier;

determine whether each possible user identity is associated with the user based on the matching; and

upon determining that at least one possible user identity is associated with the user, store each associated user identity for the client node.

11. The system of claim 10, wherein the at least one user identifier is received from an agent installed on the client node.

12. The system of claim 10, wherein the at least one of the determined cloud-based resources was previously accessed but is not currently accessed by the client node.

13. The system of claim 10, wherein each of the at least one received user identifier and the at least one identified user identifier is any one of:

a personal parameter, a professional parameter, an email address, and further wherein the personal parameter is any one of;

a name, an age, a gender, a hobby, and a hometown and the professional parameter is any one of;

a profession, a type of work, and a location of the user'"'"'s work.

14. The system of claim 10, wherein a possible user identity is determined to be associated with the user upon determining that the matching at least one identified user identifier and the at least one received user identifier exceeds a verification threshold.

15. The system of claim 14, wherein the verification threshold is any one of:

a number of user identifiers that demonstrate matching above a matching threshold, and a degree of matching between user identifiers.

16. The system of claim 10, wherein the system is further configured to:

provide each associated user identity to a user; and

upon receiving a confirmation from the user that the associated user identity is associated with the user, determine that the associated user identity is associated with the user.

17. The system of claim 10, wherein the system is further configured to perform at least one of:

tokenize the received at least one user identifier, and parse the received at least one user identifier.

18. The system of claim 10, wherein the client node further comprises an agent configured to collect the at least one user identifier of the user of the client node.