Slider Control for Security Grouping and Enforcement

• US 20110185166A1
• Filed: 01/28/2010
• Published: 07/28/2011
• Est. Priority Date: 01/28/2010
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: BILGEN, Ozan Eren, Satkunanathan, Lingan, CHANDRASEKARAN, Subramanian, IYER, Kannan C., Watson, Eric B.
• Application Number:
  US12/695,829
• Publication Number:
  US 20110185166A1
• Time in Patent Office: Days
• US Class Current: 713/100
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

A group of security functions may be configured and managed by organizing the security functions and their features into a ranked list and made available through an administrative console. The ranked list may represent various levels of security from which a user may select. Once selected, the security functions may be configured according to the selected level. The console may determine a current security level by analyzing the configuration or status of each of the security functions and presenting a single status level from the ranked list determined by the least secure setting of the various security functions.

Claims

1. A method for managing a plurality of security components, said method comprising:

identifying said plurality of security components;

defining a plurality of security levels, each of said security levels comprising a configuration for each of said security components, said security levels being organized on a progressive scale;

analyzing each of said security components to determine a current state for said security components;

determining a first security level based on a security level for which all of said security components are currently configured; and

presenting said first security level on a user interface.

2. The method of claim 1 further comprising:

receiving a selection for a second security level from said user interface;

determining a configuration for each of said plurality of security components, said configuration being defined for said second security level; and

causing each of said plurality of security components to be configured to match said configuration.

3. The method of claim 2 further comprising:

determining that each of said plurality of security components is configured according to said second configuration level; and

presenting said second security level on said user interface.

4. The method of claim 2 further comprising:

determining that a first security component has a configuration defined in a higher security level than said second security level and changing said first security component to said second security level; and

determining that a second security component has a configuration defined in a lower security level than said second security level and changing said second security component to said second security level.

5. The method of claim 1, said security components comprising at least one security application operable on a remote device.

6. The method of claim 5, said security components comprising a firewall device.

7. The method of claim 1, said security components comprising a security setting of an application.

8. The method of claim 7, said application being a web browser.

9. A system comprising:

a processor;

a network interface;

a user interface device;

a predefined security configuration definition for a set of security components comprising;

a plurality of security levels, each of said security levels being defined by a security function, said security function being performed by at least one security component; and

for each of said security components in said set, a configuration setting for each of said plurality of security functions;

a security collector that determines a current configuration setting for each of said plurality of security levels;

a security manager that communicates with each of said security components and determines a current security level from said current configuration setting for each of said plurality of security levels, said current security level being one of said security levels for which every one of said security components is configured; and

a security console that presents said current security level on said user interface, receives a user input from said user interface to change from said current security level to a second security level, and causes said security manager to change a configuration for each of said plurality of security components to meet said second security level.

10. The system of claim 9, said security components comprising applications operating on a gateway located between a local area network and a wide area network, said gateway being separate from said system.

11. The system of claim 10, said security components comprising a logging application operating on said gateway that logs incoming and outgoing communications between said local area network and said wide area network.

12. The system of claim 10, said security components comprising settings of a remote service accessible through said wide area network.

13. The system of claim 12, said settings of said remote service comprising authentication configuration for said remote service.

14. The system of claim 13, said authentication configuration comprising communication with an authentication server within said local area network.

15. The system of claim 10, said security components further comprising a firewall service operable on a client device within said local area network.

16. The system of claim 15, said security components further comprising a web browser setting operable on said client device.

17. A security management system operable on a computer processor of a device connected to a local area network, said security management system comprising:

a predefined security configuration definition for a set of security components comprising;

a plurality of security levels; and

for each of said security component in said set, a configuration setting for each of said plurality of security levels;

for each of said security components, an active connector that reads and sets configuration settings for said security components, said security components comprising;

an email monitoring application operating on an email server that receives email messages and stores said email messages in mailboxes;

a logging application operating on a gateway device through which communications are routed between said local area network and a wide area network; and

a web browser setting for a web browser operating on a client device, said web browser setting defining a set of security settings for said web browser;

a security collector that determines a current configuration setting for each of said plurality of security levels using said active connectors;

a security manager that communicates with each of said security components through said active connectors and determines a current security level from said current configuration setting for each of said plurality of security levels, said current security level being one of said security levels for which every one of said security components is configured; and

a security console that;

presents said current security level on said user interface by positioning a slider indicator on said user interface;

receives a user input from said user interface to change from said current security level to a second security level; and

causes said security manager to change a configuration for each of said plurality of security components to meet said second security level.

18. The security management system of claim 17, said email server being located outside said local area network.

19. The security management system of claim 17, said security manager that further:

receives an updated predefined security configuration from a remote server; and

updates said predefined security configuration to match said updated predefined security configuration.

20. The security management system of claim 17, said security manager that further detects that a first security component has a configuration that is at a different level than said current security setting, and said security console that indicates said first security component having a different setting than said current security level.