Method and system for managing user identities on a network

• US 20070174903A1
• Filed: 01/26/2006
• Published: 07/26/2007
• Est. Priority Date: 01/26/2006
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Neogent, Inc. (Oracle Corporation)
• Inventors: Greff, Daniel
• Application Number:
  US11/340,124
• Publication Number:
  US 20070174903A1
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226

Abstract

A method and system for managing user identities on a network is disclosed. form independent model for managing user identities on a network is disclosed which translated to one or more platform-specific models for the actual implementation. An trator is provided with the ability to add, modify and delete actors on the network. or, such as a help desk, is ascribed use cases, such as enabling passwords, resetting s, and disenabling passwords, that are appropriate for that actor. The administrator modify each use case, such as by unlocking a user'"'"'s account before resetting the d or providing an email notification to a user prior to resetting a password, to the desired by the administrator. As a result, an actor with no or little programming skills form sophisticated identity management functions resulting in improved efficiency and lower cost to the company.

Claims

1. A method for managing user identities on a network comprising:

allowing a network administrator within an enterprise to add, modify or delete at least one actor to be involved in the management of user identities on a network;

permitting said at least one actor to perform at least one use case;

modifying said at least one use case as desired by said network administrator; and

implementing said at least one use case on said network by said at least one actor.

2. The method of claim 1 wherein said enterprise is a corporation, a company, a venture or an operation, whether governmental or private.

3. The method of claim 1 wherein said at least one actor is one or more of a human user, a file, or a software file assigned to share a resource.

4. The method of claim 1 wherein the network is a local area network, a wide area network, or the Internet.

5. The method of claim 1 wherein said at least one use case is one or more of enabling a password, disabling a password, resetting a password, changing a password and changing a user'"'"'s manager.

6. The method of claim 1 wherein said modification is synchronizing the password, unlocking an account or providing security notification.

7. The method of claim 1 wherein said implementation is platform independent.

8. A system for managing user identities on a network comprising:

a network in an enterprise managed by a network administrator, wherein said network administrator can add, modify or delete at least one actor to be involved in the management of user identities on said network;

said at least one actor being permitted to perform at least one use case, wherein said at least one use case is modified as desired by said network administrator; and

implementing said at least one use case on said network by said at least one actor.

9. The system of claim 8 wherein said enterprise is a corporation, a company, a venture or an operation, whether governmental or private.

10. The system of claim 8 wherein said at least one actor is one or more of a human user, a file, or a software file assigned to share a resource.

11. The system of claim 8 wherein the network is a local area network, a wide area network, or the Internet.

12. The system of claim 8 wherein said at least one use case is one or more of enabling a password, disabling a password, resetting a password, changing a password and changing a user'"'"'s manager.

13. The system of claim 8 wherein said modification is synchronizing the password, unlocking an account or providing security notification.

14. The system of claim 8 wherein said implementation is platform independent.

15. A method for managing user identities on a network comprising:

means for a network administrator within an enterprise to add, modify or delete at least one actor to be involved in the management of user identities on a network;

means for said at least one actor to perform at least one use case;

means for modifying said at least one use case as desired by said network administrator; and

means for implementing said at least one use case on said network by said at least one actor.

16. The method of claim 15 wherein said enterprise is a corporation, a company, a venture or an operation, whether governmental or private.

17. The method of claim 15 wherein said at least one actor is one or more of a human user, a file, or a software file assigned to share a resource.

18. The method of claim 15 wherein the network is a local area network, a wide area network, or the Internet.

19. The method of claim 15 wherein said at least one use case is one or more of enabling a password, disabling a password, resetting a password, changing a password and changing a user'"'"'s manager.

20. The method of claim 15 wherein said modification is synchronizing the password, unlocking an account or providing security notification.

21. The method of claim 15 wherein said implementation is platform independent.