The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Sep. 09, 2014
Filed:
Jul. 12, 2012
John William Court, Carrara, AU;
Simon Gilbert Canning, Upper Coomera, AU;
Simon Winston Gee, Varsity Lakes, AU;
Shane Bradley Weeden, Paradise Point, AU;
John William Court, Carrara, AU;
Simon Gilbert Canning, Upper Coomera, AU;
Simon Winston Gee, Varsity Lakes, AU;
Shane Bradley Weeden, Paradise Point, AU;
International Business Machines Corporation, Armonk, NY (US);
Abstract
A method, apparatus and computer program product for detecting that a computing device may not be secure based on inconsistent identity associations identified during Federated Single Sign-On (F-SSO). A detection proxy detects when a user with a particular session is accessing an identity provider (IdP) that is associated with an account that is not the current user's account. When a user performs a login to an F-SSO-enabled IdP, the proxy performs an F-SSO, and the results are compared with known aliases for that particular federation partner. If an anomaly is detected (e.g., the in-line device sees that a user logs into a web site as someone else), a workflow is initiated to perform a given action, such as blocking access, issuing an alert, or the like.