Apparatus and method for administering user identities across on premise and third-party computation resources

• US 10,686,792 B1
• Filed: 05/12/2017
• Issued: 06/16/2020
• Est. Priority Date: 05/13/2016
• Status: Active Grant

• Current Assignee: Nuvolex, Inc.
• Original Assignee: Nuvolex, Inc.
• Inventors: Keefer, Joshua, Hamel, Brian
• Primary Examiner(s): Poltorak, Piotr
• Application Number:
  US15/594,406
• Time in Patent Office: 1,131 Days
• CPC Class Codes: H04L 43/04 Processing captured monitoring data, e.g. for logfile generation
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/53 using third party service providers
• CPC Class Codes: H04L 67/55 Push-based network services

Abstract

A machine has a network interface circuit to coordinate communications with a network. A processor is connected to the network interface circuit. A memory is connected to the processor and the network interface circuit. The memory stores instructions executed by the processor to collect network traffic from the network through the network interface circuit. The network traffic includes on premise identity service user object data and cloud service user object data. Merged user objects are derived from the network traffic. Each merged user object includes user object attributes from the on premise identity service user object data and user object attributes from the cloud service user object data. The merged user objects are utilized to administer access over the network to on premise computation resources and third-party computation resources.

Claims

1. A non-transitory computer readable storage medium, comprising instructions executed by a processor to:

collect network traffic from a network, the network traffic including on premise identity service user object data and cloud service user object data, wherein an on premise identification agent collects from an on premise identification service module the on premise identity service user object data, wherein a message queuing service module coordinates the collection of the on premise identity service user object data from on premise identification agents distributed across the network, and wherein an application program interface is used to access the cloud service user object data,

derive from the network traffic merged user objects, wherein each merged user object includes user object attributes from the on premise identity service user object data and user object attributes from the cloud service user object data,

utilize the merged user objects to administer access over the network to on premise computation resources and third-party computation resources, and

form updated merged user objects and push attributes of the updated merged user objects to nodes on the network.