Security compliance framework usage

Patent metadata

Field	Value
Publication number	US-9794297-B1
Application number	US-201615284005-A
Country	US
Kind code	B1
Filing date	Oct 3, 2016
Priority date	Oct 3, 2016
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

A method and system for improving usage of a security compliance framework is provided. The method includes authenticating a user for: access to the security compliance frame work, access to an authoritative source component of the compliance framework, and access to a data store component of the compliance framework. A functionality status of the security compliance framework and a request associated with contents of the data store are presented to a user via a dashboard interface. In response, the request is triggered and associated results are generated.

First claim

What is claimed is:

1. A security compliance framework usage improvement method comprising:
authenticating, by a processor of a security compliance framework, a user for access to said security compliance framework;
authenticating for said user, by said processor executing an application programming interface (API), access to an authoritative source component of said security compliance framework;
authenticating for said user, by said processor via said authoritative source component, access to a data store component of said security compliance framework;
presenting, by said processor via said dashboard interface, a functionality status of said security compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said security compliance framework and resolving associated hardware and software performance issues;
triggering, by said processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said processor, a request associated with contents of said data store;
presenting, by said processor executing a dashboard interface in response to said request, said contents of said data store;
triggering, by said processor in response to said presenting said contents, said request; and
generating, by said processor, results of said triggering said request.

2. The method of claim 1 , wherein said authenticating said user comprises authorizing said user for access to said security compliance frame work via said dashboard interface.

3. The method of claim 1 , wherein said authenticating said access to said data store component comprises:
recording an authentication attempt associated with said authenticating;
recording an authentication request associated with said authenticating; and
logging a status of said authentication request.

4. The method of claim 1 , further comprising:
generating, by said processor based on said authenticating said access to said data store, a secure profile for said user.

5. The method of claim 1 , wherein said generating said request associated with contents of said data store comprises:
authenticating said user with respect to said request; and
passing said request to said data store based on results of said authenticating said user with respect to said request.

6. The method of claim 1 , wherein said triggering said request comprises:
authenticating said request;
authorizing said user with respect to said request; and
passing said request, via said API, to software and hardware tools.

7. The method of claim 1 , wherein said authorizing said user with respect to said request comprises execution of security tokens.

8. The method of claim 1 , further comprising:
providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the hardware device, said code being executed by the computer processor to implement: said authenticating said user, said authenticating said access to said authoritative source component, said authenticating said access to said data store component, said presenting said functionality status, said triggering said associated actions, said generating said request, said presenting said contents of said data store, said triggering said request, and said generating said results of said triggering said request.

9. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a processor of a security compliance framework implements a security compliance framework usage improvement method, said method comprising:
authenticating, by said processor, a user for access to said security compliance frame work;
authenticating for said user, by said processor executing an application programming interface (API), access to an authoritative source component of said security compliance framework;
authenticating for said user, by said processor via said authoritative source component, access to a data store component of said security compliance framework;
presenting, by said processor via said dashboard interface, a functionality status of said security compliance framework, wherein said functionality status allows said user to request associated reports and trigger associated actions associated with monitoring a performance of servers associated with said security compliance framework and resolving associated hardware and software performance issues;
triggering, by said processor based on said functionality status, said associated actions thereby executing said monitoring said performance of said servers and said resolving said associated hardware and software performance issues;
generating, by said processor, a request associated with contents of said data store;
presenting, by said processor executing a dashboard interface in response to said request, said contents of said data store;
triggering, by said processor in response to said presenting said contents, said request; and
generating, by said processor, results of said triggering said request.

10. The computer program product of claim 9 , wherein said authenticating said user comprises authorizing said user for access to said security compliance frame work via said dashboard interface.

11. The computer program product of claim 9 , wherein said authenticating said access to said data store component comprises:
recording an authentication attempt associated with said authenticating;
recording an authentication request associated with said authenticating; and
logging a status of said authentication request.

12. The computer program product of claim 9 , wherein said method further comprises:
generating, by said processor based on said authenticating said access to said data store, a secure profile for said user.

13. The computer program product of claim 9 , wherein said generating said request associated with contents of said data store comprises:
authenticating said user with respect to said request; and
passing said request to said data store based on results of said authenticating said user with respect to said request.

14. The computer program product of claim 9 , wherein said triggering said request comprises:
authenticating said request;
authorizing said user with respect to said request; and
passing said request, via said API, to software and hardware tools.

15. The computer program product of claim 9 , wherein said authorizing said user with respect to said request comprises execution of security tokens.

16. A security compliance framework comprising a hardware processor coupled to a computer-readable memory unit, said memory unit comprising instructions that when executed by the processor implements a security compliance framework usage improvement method comprising:
authenticating, by said hardware processor, a user for access to said security compliance frame work;
authenticating for said user, by said hardware processor executing an application programming interface (API), access to an authoritative source component of said security compliance framework;
authenticating for said user, by said hardware processor via said authoritative source component, access to a data store component of said security compliance framework;
presenting

Assignees

• IBM

Inventors

• Hamilton Ii Rick A
• Hinton Heather M
• Moore Darren J
• Toussaint Neil

Classifications

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/102

  Entity profiles · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• H04L63/00

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title