Security compliance framework usage

Patent metadata

Field	Value
Publication number	US-10542047-B2
Application number	US-201816151901-A
Country	US
Kind code	B2
Filing date	Oct 4, 2018
Priority date	Oct 3, 2016
Publication date	Jan 21, 2020
Grant date	Jan 21, 2020

Abstract

A method and system for improving usage of a security compliance framework is provided. The method includes authenticating a user for: access to the security compliance frame work, access to an authoritative source component of the compliance framework, and access to a data store component of the compliance framework. A functionality status of the security compliance framework and a request associated with contents of the data store are presented to a user via a dashboard interface. In response, the request is triggered and associated results are generated.

First claim

What is claimed is:

1. A security compliance framework usage improvement method comprising:
presenting via a dashboard interface, by a processor of a security compliance framework executing an application programming interface (API), a functionality status of said security compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said security compliance framework and resolving associated hardware and software performance issues;
triggering, by said processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said processor, a request associated with contents of a data store component of said security compliance framework;
presenting, by said processor executing a dashboard interface in response to said request, said contents of said data store component;
triggering, by said processor in response to said presenting said contents, said request; and
generating, by said processor, results of said triggering said request.

2. The method of claim 1 , wherein authenticating said user comprises authorizing said user for access to said security compliance frame work via said dashboard interface.

3. The method of claim 1 , wherein authenticating access to said data store component comprises:
recording an authentication attempt associated with said authenticating said access to said data store component;
recording an authentication request associated with said authenticating said access to said data store component; and
logging a status of said authentication request.

4. The method of claim 1 , further comprising:
generating, by said processor based on authenticating access to said data store component, a secure profile for said user.

5. The method of claim 1 , wherein said generating said request associated with said contents of said data store component comprises:
authenticating said user with respect to said request; and
passing said request to said data store component based on results of said authenticating said user with respect to said request.

6. The method of claim 1 , wherein said triggering said request comprises:
authenticating said request;
authorizing said user with respect to said request; and
passing said request, via said API, to software and hardware tools.

7. The method of claim 1 , wherein authorizing said user with respect to said request comprises execution of security tokens.

8. The method of claim 1 , further comprising:
providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the hardware device, said code being executed by the computer processor to implement: said presenting said functionality status, said triggering said associated actions, said generating said request, said presenting said contents of said data store component, said triggering said request, and said generating said results of said triggering said request.

9. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a hardware processor of a security compliance framework implements a security compliance framework usage improvement method, said method comprising:
presenting via a dashboard interface, by said hardware processor executing an application programming interface (API), a functionality status of said security compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said security compliance framework and resolving associated hardware and software performance issues;
triggering, by said hardware processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said hardware processor, a request associated with contents of a data store component of said security compliance framework;
presenting, by said hardware processor executing a dashboard interface in response to said request, said contents of said data store component;
triggering, by said hardware processor in response to said presenting said contents, said request; and
generating, by said hardware processor, results of said triggering said request.

10. The computer program product of claim 9 , wherein authenticating said user comprises authorizing said user for access to said security compliance frame work via said dashboard interface.

11. The computer program product of claim 9 , wherein authenticating access to said data store component comprises:
recording an authentication attempt associated with said authenticating said access to said data store component;
recording an authentication request associated with said authenticating said access to said data store component; and
logging a status of said authentication request.

12. The computer program product of claim 9 , wherein said method further comprises:
generating, by said hardware processor based on authenticating access to said data store component, a secure profile for said user.

13. The computer program product of claim 9 , wherein said generating said request associated with said contents of said data store component comprises:
authenticating said user with respect to said request; and
passing said request to said data store based on results of said authenticating said user with respect to said request.

14. The computer program product of claim 9 , wherein said triggering said request comprises:
authenticating said request;
authorizing said user with respect to said request; and
passing said request, via said API, to software and hardware tools.

15. The computer program product of claim 9 , wherein said authorizing said user with respect to said request comprises execution of security tokens.

16. A security compliance framework comprising a hardware processor coupled to a computer-readable memory unit, said memory unit comprising instructions that when executed by the processor implements a security compliance framework usage improvement method comprising:
presenting via a dashboard interface, by said hardware processor executing an application programming interface (API), a functionality status of said security compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said security compliance framework and resolving associated hardware and software performance issues;
triggering, by said hardware processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said hardware processor, a request associated with contents of a data store component of said security compliance framework;
presenting, by said hardware processor executing a dashboard interface in response to said request, said contents of said data store component;
triggering, by said hardware processor in response to said presenting said co

Assignees

• IBM

Inventors

• Hamilton Ii Rick A
• Hinton Heather M
• Moore Darren J
• Toussaint Neil

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/00

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title