Avaya Inc.

Robert Rhea Seibel

Ronald S Rozensky

Christopher Chu

Mukund Sundararajan

Adonny William Raphael

Subrata Mazumdar

Merlon Odell Clemmons, Ii

Tk Srinivas

Sriram Chittur Viswanathan

Merlon Odell Clemmons

An alarm access controller is operative to control access to an enterprise network of a communication system responsive to alarms generated by products that are part of a set of internal resources of the enterprise network. In one aspect, the alarm access controller is implemented by a server or other processing element comprising a processor coupled to a memory. The alarm access controller is configured to receive an alarm from one of the products, to identify an external service provider for handling the alarm, and to provide temporary authenticated access of the service provider to the product. By limiting service provider access to an alarm-generating product in accordance with specified time periods or other conditions determined based at least in part on the alarm itself, system security is considerably improved and access control is made more flexible and efficient.

Alarm-driven access control in an enterprise network

An entry in an authentication database of an enterprise network is activated responsive to generation of an alarm by a corresponding product that is part of a set of internal resources of the enterprise network. A dynamic URL or other resource identifier based on the activated entry is supplied to an external service provider associated with the product. The external service provider is granted access to the product responsive to submission of the resource identifier by the service provider.

Resource identifier based access control in an enterprise network

An SSL VPN gateway or other type of secure gateway is operative to control access to an enterprise network of a communication system. The gateway in accordance with an aspect of the invention comprises an alarm manager. The alarm manager receives an alarm from a vendor product that is part of a set of internal resources of the enterprise network, and routes the alarm to an external service provider for processing. The gateway receives from the service provider, responsive to the alarm, a federated identity which encompasses a plurality of technicians, expert systems or other servicing elements of the service provider. The gateway may grant one or more particular servicing elements of the service provider access to the alarm-generating vendor product based on the federated identity.

Secure gateway with alarm manager and support for inbound federated identity

A system for controlling network access to products. The system includes a security appliance connected to a product under operational control of a first entity, a product connection platform and a user terminal under operational control of a second entity, the product connection platform being accessed by the user terminal, and a trust relationship established between the first entity and the second entity based on predetermined criteria between the first entity and the second entity, the trust relationship being represented by a certificate or public/private key exchange. Authentication of access by a user of the user terminal of the second entity to the product of the first entity is deferred to the product connection platform of the second entity based on the predetermined criteria of the trust relationship, whereupon if authentication is granted, the user is provided access to the product.

Growing community of inventors

Waretown, NJ, United States of America

Robert Rhea Seibel