Identity-to-account correlation and synchronization

Patent metadata

Field	Value
Publication number	US-9942321-B2
Application number	US-201614988982-A
Country	US
Kind code	B2
Filing date	Jan 6, 2016
Priority date	Jan 6, 2016
Publication date	Apr 10, 2018
Grant date	Apr 10, 2018

Abstract

A method, program product, and apparatus for managing profiles in an access management domain. In an embodiment, attribute field mapping rules are generated for an identity profile schema applied to a plurality of identity profiles and an account profile schema applied to a plurality of account profiles. Each of the identity profiles includes one or more identity attribute fields and each of the plurality of account profiles includes one or more account attribute fields. As part of generating attribute field mapping rules, a synchronization manager iteratively compares data in each of the identity attribute fields with data in one or more of each of the account attribute fields. In response to detecting a match between data in a given identity attribute field and data in a given account attribute field, the synchronization manager increments an attribute correlation value that is associated with the given identity attribute field and the given account attribute field. The synchronization manager compares attribute correlation values that are each associated with a same identity attribute field and identifies a dominant attribute correlation value based on said comparing attribute correlation values.

First claim

What is claimed is:

1. A method for managing profiles in an access management domain, said method comprising:
generating attribute field mapping rules for an identity profile schema applied to a plurality of identity profiles and an account profile schema applied to a plurality of account profiles, wherein each of the identity profiles includes one or more identity attribute fields and each of the plurality of account profiles includes one or more account attribute fields, wherein said generating attribute field mapping rules includes,
iteratively comparing data in each of the identity attribute fields with data in one or more of each of the account attribute fields;
in response to detecting a match between data in a given identity attribute field and data in a given account attribute field, incrementing an attribute correlation value that is uniquely logically associated with the given identity attribute field and the given account attribute field;
comparing attribute correlation values that are each associated with a same identity attribute field; and
identifying a dominant attribute correlation value based on said comparing attribute correlation values.

2. The method of claim 1 , wherein said identifying a dominant attribute correlation value comprises, for multiple attribute correlation values that are each logically associated with a different account attribute field and are all associated with a same identity attribute field, determining a largest attribute correlation value.

3. The method of claim 2 , wherein said identifying a dominant attribute correlation value further comprises determining whether the largest attribute correlation value meets a specified threshold value.

4. The method of claim 1 , wherein said determining attribute field mapping rules further includes logically associating multiple identity attribute field identifiers with respective account attribute field identifiers in accordance with identified dominant attribute correlation values that are each uniquely logically associated with respective pairs of identity attribute fields and account attribute fields.

5. The method of claim 1 , further comprising logically associating each of the identity profiles with one or more of the account profiles based on the determined attribute field mapping rules.

6. The method of claim 5 , wherein the one or more account profiles have a specified account profile schema, and wherein said logically associating each of the identity profiles with one or more of the account profiles includes:
for each of one or more identity attribute fields within an identity profile,
applying at least one of the attribute field mapping rules to identity a corresponding account attribute field identifier for the specified account profile schema;
comparing data in each of one or more account attribute fields that correspond to the identified account attribute field identifier for the account profiles with data in the identity attribute field; and
for each comparison, and in response to a determining a match between data in the account attribute field and data in the identity attribute field, incrementing a profile correlation value that is logically associated with the account profile and the identity profile.

7. The method of claim 6 , further comprising synchronizing data between the identity attribute fields in the identity profiles and the account attribute fields in the account profiles based, at least in part, on one or more profile correlation values.

8. The method of claim 6 , further comprising:
generating and storing logical mapping relations from each of one or more identity attribute field identifiers to a corresponding each of one or more account attribute field identifiers; and
in response to detecting a modification to data stored within the at least one identity profile,
identifying one or more account profiles based on one or more profile correlation values; and
for each of the identified account profiles,
identifying a related account attribute field in accordance with a logical mapping relation associated with an attribute field mapping rule; and
modifying data in the related account attribute field based on the modification to the data stored within the at least one identity profile.

9. One or more machine-readable storage media having program code for managing profiles in an access management domain, the program code comprising instructions to:
generate attribute field mapping rules for an identity profile schema applied to a plurality of identity profiles and an account profile schema applied to a plurality of account profiles, wherein each of the identity profiles includes one or more identity attribute fields and each of the plurality of account profiles includes one or more account attribute fields, wherein said generating attribute field mapping rules includes,
iteratively compare data in each of the identity attribute fields with data in one or more of each of the account attribute fields;
in response to detecting a match between data in a given identity attribute field and data in a given account attribute field, increment an attribute correlation value that is uniquely logically associated with the given identity attribute field and the given account attribute field;
compare attribute correlation values that are each associated with a same identity attribute field; and
identify a dominant attribute correlation value based on said comparing attribute correlation values.

10. The machine-readable storage media of claim 9 , wherein said identifying a dominant attribute correlation value comprises, for multiple attribute correlation values that are each logically associated with a different account attribute field and are all associated with a same identity attribute field, determining a largest attribute correlation value.

11. The machine-readable storage media of claim 10 , wherein said identifying a dominant attribute correlation value further comprises determining whether the largest attribute correlation value meets a specified threshold value.

12. The machine-readable storage media of claim 9 , further comprising logically associating each of the identity profiles with one or more of the account profiles based on the determined attribute field mapping rules.

13. The machine-readable storage media of claim 12 , wherein the one or more account profiles have a specified account profile schema, and wherein said logically associating each of the identity profiles with one or more of the account profiles includes:
for each of one or more identity attribute fields within an identity profile,
applying at least one of the attribute field mapping rules to identity a corresponding account attribute field identifier for the specified account profile schema;
comparing data in each of one or more account attribute fields that correspond to the identified account attribute field identifier for the account profiles with data in the identity attribute field; and
for each comparison, and in response to a determining a match between data in the account attribute field and data in the identity attribute field, incrementing a profile correlation value that is logically associated with the account profile and the identity profile.

14. The machine-readable storage media of claim 13 , further comprising synchronizing data between the identity attribute fields in the identity profiles and the account attribute fields in the account profiles based, at least in part, on one or more profile correlation values.

15. The machine-readable storage media of claim 14 , further comprising:
generating an

Assignees

• Ca Inc

Inventors

• Versteeg Steven Cornelis
• Hastings Nathan Allin
• Yao Xien
• Bird John Sinclair

Classifications

• H04L67/16

  Electricity · mapped topic

• H04L63/102

  Entity profiles · CPC title

• H04L67/1095 Primary

  Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes · CPC title

• G06F17/30702

  Physics · mapped topic

• H04L67/306

  User profiles · CPC title