Identity map creation

• US 8,539,568 B1
• Filed: 10/03/2008
• Issued: 09/17/2013
• Est. Priority Date: 10/03/2007
• Status: Active Grant

• Current Assignee: Ecrime Management Strategies, Inc.
• Original Assignee: Courion Corporation
• Inventors: Milas, Brian T.
• Primary Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US12/245,513
• Time in Patent Office: 1,810 Days
• Field of Search: None
• US Class Current: 726/8
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A method for creating an identity map, the method including determining, using a single sign on component, if a user is a presented with a logon screen related to a resource, capturing logon information, using the SSO component, wherein at least a portion of the logon information is received from the user, determining, using the SSO component, if the user successfully accessed the resource using the information received from the user, and determining if an identity map includes an entry corresponding to at least one of the user and the resource.

Claims

1. A computer readable storage device comprising computer readable instructions that, when executed by a computer, cause the computer to:

determine, using a silent single sign on (SSO) component, if a user is presented with a logon screen related to a resource;

wherein the silent SSO component operates in silent mode;

capture logon information received in response to the presented logon screen, using the silent SSO component, wherein at least a portion of the logon information is received from the user;

determine, using the silent SSO component, if the user successfully accessed the resource using the information received from the user in response to the presented logon screen thereby determining an identity map, wherein the identity map includes information relating to a relationship between the user and the resource, wherein the resource represents the identity of the user;

store the identity map in an identity map component; and

determine if the identity map, which is included in the identity map component, includes an entry corresponding to at least one of the user and the resource.

2. The computer readable storage device of claim 1 wherein the instructions are further configured to cause the computer to at least one of create and update an entry in the identity map in response to a determination that the user successfully accessed the resource.

3. The computer readable storage device of claim 1 wherein the instructions are further configured to cause the computer to create an entry in the identity map in response to a determination that the identity map does not include an entry corresponding to either of the user and the resource, the created entry corresponding to at least one of the user and the resource.

4. The computer readable storage device of claim 1 wherein the instructions are further configured to cause the computer to update an entry in the identity map in response to a determination that the identity map includes an entry corresponding to at least one of the user and the resource, the updated entry corresponding to at least one of the user and the resource.

5. The computer readable storage device of claim 1 wherein the instructions are further configured to cause the computer to receive a unique identifier relating to the user from an operating system.

6. The computer readable storage device of claim 1 wherein the logon information includes at least one of a username, a resource name, a resource type, and a password.

7. The computer readable storage device of claim 1 wherein the instructions are further configured to cause the computer to store in the identity map at least a portion of the captured logon information.

8. The computer readable storage device of claim 1 wherein the SSO component is an enterprise single sign on component.

9. The computer readable storage device of claim 1 wherein the instructions are further configured to cause the SSO component to post information, for use by other components, relating to at least a portion of the captured logon information, using at least one of an application programming interface and a web-based interface.

10. A method for creating an identity map, the method comprising:

determining, using a silent single sign on (SSO) component, if a user is a presented with a logon screen related to a resource;

wherein the silent SSO component is operating in silent mode;

capturing logon information received in response to the presented logon screen, using the silent SSO component, wherein at least a portion of the logon information is received from the user;

determining, using the silent SSO component, if the user successfully accessed the resource using the information received from the user in response to the presented logon screen thereby determining an identity map, wherein the identity map includes information relating to a relationship between the user and the resource, wherein the resource represents the identity of the user;

determining if an identity map component includes an entry corresponding to at least one of the user and the resource; and

storing the identity map in the identity map component.

11. The method of claim 10 further comprising at least one of creating and updating an entry in the identity map component in response to a determination that the user successfully accessed the resource.

12. The method of claim 10 further comprising causing the creation of an entry in the identity map component in response to a determination that the identity map component does not include an entry corresponding to either of the user and the resource, the created entry corresponding to at least one of the user and the resource.

13. The method of claim 10 further comprising updating an entry in the identity map component in response to a determination that the identity map includes an entry corresponding to at least one of the user and the resource, the updated entry corresponding to at least one of the user and the resource.

14. The method of claim 10 further comprising receiving a unique identifier relating to the user from an operating system.

15. The method of claim 10 wherein the logon information includes at least one of a username, a resource name, a resource type, and a password.

16. The method of claim 10 further comprising storing in the identity map component at least a portion of the captured logon information.

17. The method of claim 10 wherein the SSO component is an enterprise single sign on component.

18. The method of claim 10 further comprising posting information, for use by other components, relating to at least a portion of the captured logon information, using at least one of an application programming interface and a web-based interface.

19. A computer readable storage device comprising computer readable instructions that, when executed by a computer, cause the computer to:

receive an indication from a silent single sign on (SSO) component that a user was presented with a logon screen related to a resource, and that the user successfully logged onto the resource;

wherein the silent SSO component operates in silent mode;

receive logon information from the silent SSO component, wherein at least a portion of the logon information is received from the user in response to the presented logon screen; and

use the information received from the silent SSO component to develop an identity map, wherein the identity map includes information relating to a relationship between the user and the resource, wherein the resource represents the identity of the user.

20. The computer readable storage device of claim 19 wherein the computer readable instructions are further configured to cause the computer to create an entry in an identity map in response to at least one of receiving the indication from the SSO component and receiving the logon information from the SSO component.

21. The computer readable storage device of claim 19 wherein the computer readable instructions are further configured to cause the computer to determine, using the logon information received from the SSO component, if the identity map includes an entry corresponding to at least one of the user and the resource.

22. The computer readable storage device of claim 19 wherein the computer readable instructions are further configured to cause the computer to automatically retrieve at least one of the indication from the SSO component and the logon information from the SSO component.

23. The computer readable storage device of claim 22 wherein the computer readable instructions are further configured to cause the computer to automatically retrieve at least one of the indication from the SSO component and the logon information from the SSO component via at least one of an application program interface and a web-based service.