International Business Machines Corporation

Dinesh Tejmal Jain

Christopher John Hockings

Rohit U Satyanarayana

Vincent C Williams

Philip A J Nye

Leigh Doddy

A management component of a computing system evaluates end-users, end-user devices, and user accounts for access to provisioned-resources of the computing system. The management component utilizes device compliance attributes to form a device risk vector associated with an end-user device. The management component further utilizes resource compliance attributes to form a resource risk vector associated with a provisioned-resource. The management component forms a policy vector utilizing compliance attributes included in a compliance policy. The management component compares the device and resource risk vectors to the policy vector to determine a threat vector, and uses the threat vector to evaluate the end-users, end-user devices, and user accounts for risk of security breach, damage to, and/or loss of components of the computing system.

Threat-aware provisioning and governance

Risk-based credential management is provided. A request to checkout credentials is received. The credentials are associated with at least one managed resource. A risk value of the request is determined. The determination of the risk value is based, at least in part, on risk information of the requesting device. A determination is made whether to deny the request based, at least in part, on the risk value and a first predetermined threshold of a checkout policy.

Risk-based credential management

A computer implemented method and data processing system for authenticating a user. A control module receives a user authentication request. The control module retrieves a server's parameters, and uses the server's parameters to form a customized user authentication request. The control module sends the customized user authentication request to the server, and receives an authentication response from the server.

Growing community of inventors

Pune, India

Dinesh Tejmal Jain