摘要:
An information processing system in a computer network comprising an edge system, an identity provider, a relying party and a tracing service, in which the tracing service relays a queue of information of authorized user activity from a relying party to an identity provider, which then can provide that activity information to the user.
摘要:
An information processing system comprising a translation from a directory or individuals input source to a state database containing resource description triples, a mapping of the triples in the state database from one ontology class to another, and a translation from the triples in the state database to a directory or individuals output sink.
摘要:
An information processing system for remote access computing comprising a network access server and a local authentication server is augmented with the capability for relaying authentication requests by tunneling interactions between the requesting client and an identity provider.
摘要:
An information processing system for remote access computing comprising a network access server and a local authentication server is augmented with the capability for forwarding authentication requests by tunneling interactions between the requesting client and an identity provider.
摘要:
An information processing system for providing a social network service to clients on a computer network is augmented with the ability to authenticate users by their ability to recognize digital photograph images of other users of the system with whom the user being authenticated has an affiliation, in which the user being authenticated will be presented with a set of photographs and will be required to correctly supply to the system the names of the individuals represented in those photographs.
摘要:
An access control system is augmented with the ability to categorize access requests as anomalous, by correlating the time and location of the requesting user with information provided by the requesting user's calendar entries. These entries provide the dates and times that a user is anticipated to be located in a particular geographic region.
摘要:
A distributed information processing system comprising a collection of servers providing a directory service with a shared view of a directory information tree is augmented with the ability to determine whether one or more of those directory servers have had their view of the directory information tree replaced with one restored from an earlier version of the directory information tree.
摘要:
An information processing system comprising a translation from a directory or individuals input source to a state database containing resource description triples, a mapping of the triples in the state database from one ontology class to another, and a translation from the triples in the state database to a directory or individuals output sink.
摘要:
An access control system is augmented with the ability to categorize access requests as anomalous, by correlating the time and location of the requesting user with information provided by the requesting user's calendar entries. These entries provide the dates and times that a user is anticipated to be located in a particular geographic region.
摘要:
Aspects of the subject matter described herein relate to managing access rights. In aspects, projects may be created from templates. The projects indicate one or more roles and one or more resources. The roles indicate access rights of entities associated with the roles. The projects may include events at which access rights change. Using the projects and independent role information, effective access rights to various resources may be determined for one or more entities. These effective access rights may be exported to one or more access control components to control access to the resources. The project and role information may also be used for auditing.