Methods and apparatus for a unified identity management interface across internal and shared computing applications

• US 8,510,794 B1
• Filed: 10/19/2012
• Issued: 08/13/2013
• Est. Priority Date: 07/15/2012
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Identropy Corporation
• Inventors: Kaushik, Nishant, Villavicencio, Francisco, Motiwala, Ashraf, Hydak, Christopher
• Primary Examiner(s): LEWIS, LISA C
• Application Number:
  US13/656,340
• Time in Patent Office: 298 Days
• Field of Search: 726/1, 726/2, 726/6, 726/8, 726/11
• US Class Current: 726/1
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication

Abstract

Various embodiments of methods and apparatus for a unified management interface across internal and shared computing applications are disclosed. In some embodiments, one or more processors perform, responsive to receiving a plurality of access management requests at an identity management interface, transmitting an access management instruction to a customer internal application via an on-premise proxy, and transmitting another access management instruction to a shared computing system application via a multi-customer gateway on the shared computing system.

Claims

1. A method, comprising:

using one or more processors to perform, responsive to receiving a plurality of access management requests at an identity management interface of an identity management module,

transmitting an access management instruction to a customer internal application via an on-premise proxy; and

transmitting another access management instruction to a shared computing system application via a multi-customer gateway on the shared computing system, wherein

the on-premise proxy and the customer internal application are located internal to a firewall,

the shared computing system application and the multi-customer gateway on the shared computing system are located external to the firewall,

the identity management module is located external to the firewall, and

the identity management module comprises one or more tools for allowing a user to create and manage accounts on each of the shared computing system application and the customer internal application.

2. The method of claim 1, wherein

the transmitting the access management instruction to a customer internal application further comprises transmitting the access management instruction from an identity management module to the on premise proxy;

the transmitting the another access management instruction to the shared computing system application further comprises transmitting the access management instruction from the identity management module to the multi-customer gateway.

3. The method of claim 1, further comprising, monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction.

4. The method of claim 1, further comprising,

monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction;

diagnosing a present problem based at least in part on a failure of fulfillment of the access management instruction or the another access management instruction; and

suggesting a correction to the problem.

5. The method of claim 1, further comprising,

monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction as well as patterns of access management instructions and fulfillments;

diagnosing a present problem based at least in part on a pattern of failures of access management instruction and fulfillments; and

suggesting a correction to the problem.

6. The method of claim 1, further comprising,

monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction as well as patterns of access management instructions and fulfillments;

predicting a future problem based at least in part on a pattern of failures of access management instruction and fulfillments; and

suggesting a correction to the problem.

7. The method of claim 6, wherein the predicting further comprises predicting based at least in part on a neural networks learning based prediction engine accessing runtime-data to make predictions based on changes in usage patterns.

8. A system, comprising:

at least one processor; and

a memory comprising program instructions, wherein the program instructions are executable by the at least one processor to;

responsive to receiving a plurality of access management requests at an identity management interface of an identity management module, transmit an access management instruction to a customer internal application via an on-premise proxy; and

transmit another access management instruction to a shared computing system application via a multi-customer gateway on the shared computing system, wherein

the on-premise proxy and the customer internal application are located internal to a firewall,

the shared computing system application and the multi-customer gateway on the shared computing system are located external to the firewall,

the identity management module is located external to the firewall, and

the identity management module comprises program instructions executable by the at least one processor to allow a user to create and manage accounts on each of the shared computing system application and the customer internal application.

9. The system of claim 8, wherein

the program instructions executable by the at least one processor to transmit the access management instruction to a customer internal application further comprise program instructions executable by the at least one processor to transmitting the access management instruction from an identity management module to the on premise proxy;

the program instructions executable by the at least one processor to transmit the another access management instruction to the shared computing system application further comprise program instructions executable by the at least one processor to transmit the access management instruction from the identity management module to the multi-customer gateway.

10. The system of claim 8, further comprising, program instructions executable by the at least one processor to monitor the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction.

11. The system of claim 8, further comprising,

program instructions executable by the at least one processor to monitor the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction;

program instructions executable by the at least one processor to diagnose a present problem based at least in part on a failure of fulfillment of the access management instruction or the another access management instruction; and

program instructions executable by the at least one processor to suggest a correction to the problem.

12. The system of claim 8, further comprising,

program instructions executable by the at least one processor to monitor the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction as well as patterns of access management instructions and fulfillments;

program instructions executable by the at least one processor to diagnose a present problem based at least in part on a pattern of failures of access management instruction and fulfillments; and

program instructions executable by the at least one processor to suggest a correction to the problem.

13. The system of claim 12, wherein the program instructions executable by the at least one processor to diagnose further comprise program instructions executable by the at least one processor to diagnose based at least in part on a neural networks learning based prediction engine accessing runtime-data to make predictions based on changes in usage patterns.

14. The system of claim 8, further comprising,

monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction as well as patterns of access management instructions and fulfillments;

predicting a future problem based at least in part on a pattern of failures of access management instruction and fulfillments; and

suggesting a correction to the problem.

15. A non-transitory computer-readable storage medium storing program instructions, wherein the program instructions are computer-executable to implement:

responsive to receiving a plurality of access management requests at an identity management interface

transmitting an access management instruction to a customer internal application via an on-premise proxy; and

transmitting another access management instruction to a shared computing system application via a multi-customer gateway on the shared computing system, wherein

the on-premise proxy and the customer internal application are located internal to a firewall,

the shared computing system application and the multi-customer gateway on the shared computing system are located external to the firewall,

the identity management module is located external to the firewall, and

the identity management module comprises program instructions computer-executable to implement allowing a user to create and manage accounts on each of the shared computing system application and the customer internal application.

16. The non-transitory computer-readable storage medium of claim 15, wherein

the program instructions computer-executable to implement transmitting the access management instruction to a customer internal application further comprise program instructions computer-executable to implement transmitting the access management instruction from an identity management module to the on premise proxy;

the program instructions computer-executable to implement transmitting the another access management instruction to the shared computing system application further comprise program instructions computer-executable to implement transmitting the access management instruction from the identity management module to the multi-customer gateway.

17. The non-transitory computer-readable storage medium of claim 15, further comprising, program instructions computer-executable to implement monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction.

18. The non-transitory computer-readable storage medium of claim 15, further comprising,

program instructions computer-executable to implement monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction;

program instructions computer-executable to implement diagnosing a present problem based at least in part on a failure of fulfillment of the access management instruction or the another access management instruction; and

program instructions computer-executable to implement suggesting a correction to the problem.

19. The non-transitory computer-readable storage medium of claim 15, further comprising,

program instructions computer-executable to implement monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction as well as patterns of access management instructions and fulfillments;

program instructions computer-executable to implement diagnosing a present problem based at least in part on a pattern of failures of access management instruction and fulfillments; and

program instructions computer-executable to implement suggesting a correction to the problem.

20. The non-transitory computer-readable storage medium of claim 15, wherein the program instructions computer-executable to implement suggesting further comprise program instructions computer-executable to implement suggesting based at least in part on a neural networks learning based prediction engine accessing runtime-data to make predictions based on changes in usage patterns.

21. The non-transitory computer-readable storage medium of claim 15, further comprising,

program instructions computer-executable to implement monitoring the shared computing system and the customer internal application for fulfillment of the access management instruction and the another access management instruction as well as patterns of access management instructions and fulfillments;

program instructions computer-executable to implement predicting a future problem based at least in part on a pattern of failures of access management instruction and fulfillments; and

program instructions computer-executable to implement suggesting a correction to the problem.