Security compliance framework usage

Patent metadata

Field	Value
Publication number	US-10542048-B2
Application number	US-201816174451-A
Country	US
Kind code	B2
Filing date	Oct 30, 2018
Priority date	Oct 3, 2016
Publication date	Jan 21, 2020
Grant date	Jan 21, 2020

Abstract

A method and system for improving usage of a security compliance framework is provided. The method includes authenticating a user for: access to the security compliance frame work, access to an authoritative source component of the compliance framework, and access to a data store component of the compliance framework. A functionality status of the security compliance framework and a request associated with contents of the data store are presented to a user via a dashboard interface. In response, the request is triggered and associated results are generated.

First claim

What is claimed is:

1. A security compliance framework usage improvement method comprising:
enforcing, by a processor of a hardware/software compliance framework, usage of an installed and deployed application programming interface (API) for security compliance in a dynamic deployment environment;
authenticating, by said processor executing said API, each dynamically deployed component of said hardware/software compliance framework;
managing, by said processor executing said API, access to each said dynamically deployed component;
presenting, by said processor via a dashboard interface of said hardware/software compliance framework, a functionality status of said hardware/software compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said hardware/software compliance framework and resolving associated hardware and software performance issues;
triggering, by said processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said processor, a request associated with contents of a data store of said hardware/software compliance framework;
presenting, by said processor executing said dashboard interface in response to said request, said contents of said data store;
triggering, by said processor in response to said presenting said contents, said request; and
generating, by said processor, results of said triggering said request.

2. The method of claim 1 , wherein said dynamic deployment environment comprises a cloud environment.

3. The method of claim 2 , wherein said cloud environment supports multi-tenant access.

4. The method of claim 1 , wherein said API is configured to automatically prevent access by a user to each said dynamically deployed component of said hardware/software framework.

5. The method of claim 1 , wherein said user is removed from said API.

6. The method of claim 1 , further comprising:
generating, by said processor, a secure profile for said user.

7. The method of claim 1 , wherein said generating said request associated with contents of said data store comprises:
authenticating said user with respect to said request; and
passing said request to said data store based on results of said authenticating said user with respect to said request.

8. A hardware/software framework comprising a hardware processor coupled to a computer-readable memory unit, said memory unit comprising instructions that when executed by the processor implements a compliance framework usage improvement method comprising:
enforcing, by said hardware processor, usage of an installed and deployed application programming interface (API) for security compliance in a dynamic deployment environment;
authenticating, by said hardware processor executing said API, each dynamically deployed component of said hardware/software compliance framework;
managing, by said hardware processor executing said API, access to each said dynamically deployed component;
presenting, by said hardware processor via a dashboard interface of said hardware/software compliance framework, a functionality status of said hardware/software compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said hardware/software compliance framework and resolving associated hardware and software performance issues;
triggering, by said hardware processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said hardware processor, a request associated with contents of a data store of said hardware/software compliance framework;
presenting, by said hardware processor executing said dashboard interface in response to said request, said contents of said data store;
triggering, by said hardware processor in response to said presenting said contents, said request; and
generating, by said hardware processor, results of said triggering said request.

9. The hardware/software framework of claim 8 , wherein said generating said request associated with contents of said data store comprises:
authenticating said user with respect to said request; and
passing said request to said data store based on results of said authenticating said user with respect to said request.

10. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor of a hardware/software framework implements a security compliance framework usage improvement method, said method comprising:
enforcing, by said processor, usage of an installed and deployed application programming interface (API) for security compliance in a dynamic deployment environment;
authenticating, by said processor executing said API, each dynamically deployed component of said hardware/software compliance framework;
managing, by said processor executing said API, access to each said dynamically deployed component;
presenting, by said processor via a dashboard interface of said hardware/software compliance framework, a functionality status of said hardware/software compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said hardware/software compliance framework and resolving associated hardware and software performance issues;
triggering, by said processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said processor, a request associated with contents of a data store of said hardware/software compliance framework;
presenting, by said processor executing said dashboard interface in response to said request, said contents of said data store;
triggering, by said processor in response to said presenting said contents, said request; and
generating, by said processor, results of said triggering said request.

11. The computer program product of claim 10 , wherein said dynamic deployment environment comprises a cloud environment.

12. The computer program product of claim 11 , wherein said cloud environment supports multi-tenant access.

13. The computer program product of claim 10 , herein said API is configured to automatically prevent access by a user to each said dynamically deployed component of said hardware/software framework.

14. The computer program product of claim 10 , wherein said user is removed from said API.

15. The computer program product of claim 10 , wherein said method further comprises:
generating, by said processor, a secure profile for said user.

16. The computer program product of claim 10 , wherein said generating said request associated with contents of said data store comprises:
authenticating said user with respect to said request; and
passing said request to said data store based on results of said authenticating said user with respect to said request.

Assignees

• IBM

Inventors

• Hamilton Ii Rick A
• Hinton Heather M
• Moore Darren J
• Toussaint Neil

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/00

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title