Amadeus S.a.s.

Jeremie Barlet

Virginie Amar

Olivier Thonnard

Jihane Zouaoui

Mathieu Morino Baquetto

Romain Peicle

Marc Campora

Alexandre Barras

Joseph El Hayek

Ayoub Choukouk

Julien Romuald René Bruguier

Maria Assunta Domanico

Alessandro De Troia

Access control is performed in an information technology system comprising a normalized access control database and a denormalized access control database. In response to an update request from a client to change the access rights of a higher hierarchy level entity, the access rights of the higher hierarchy level entity are updated in the normalized database. Furthermore, updated access control rights for one or more corresponding lower hierarchy level entities related to the higher hierarchy level entity are computed and stored in a denormalized database. An access request from one of the one or more lower hierarchy level entities is served on the basis of the updated access rights at the lower hierarchy level stored in the denormalized database.

Access control management

A computer network () adapted to provide secured access to online applications hosted on application servers () to a requesting user (U). The network () comprises a login security server () configured for deciding access for the user based on data contained in a central generic access control file () and in the access request. The network () further comprises a centralized user identification component () configured for receiving identification data from user through a central login panel () and for sending an access grant or denial command to the application servers ().

Computer network for a secured access to online applications

Systems and methods for monitoring user authenticity during user activities in a user session on an application server is provided. The method being carried out in a distributed manner by a distributed server system. The method comprises a user modeling-process and a user-verification process. The user-modeling process is performed on a user-model server in which a user model is adapted session-by-session to user activity data received from the application server. The user-verification process is performed on the application server on the basis of the user model adapted on the user-model server. The user-verification process comprises comparing the user model with features extracted from user activity in the user session on the application server and determining a total risk-score value based on the comparison. If the total risk-score value is greater than a given threshold, a corrective action is performed.

Monitoring user authenticity in distributed system

Systems and methods for monitoring user authenticity according to user activities on an application server. A user-modeling process and a user-verification process are performed. In the user-modeling process, a user model is adapted session-by-session to user activities in which the user model includes a plurality of adaptive feature-specific user-behavior models. The user-verification process includes determining a plurality of feature-specific risk-score values, comparing the at least one of the adaptive feature-specific user-behavior models with a respective feature extracted from user activity in the user session on the application server, and determining a total risk-score value indicative of user authenticity by weighting and combining the plurality of feature-specific risk-score values. If the total risk-score value is greater than a given threshold, a corrective action is performed.

Monitoring user authenticity

Growing community of inventors

Nice, France

Jeremie Barlet