Client-Resident Agent for Centralized User Activity Auditing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems face challenges in efficiently capturing and extracting meaningful user activity data across multiple computer applications, requiring repetitive administrative processes and lacking comprehensive auditing capabilities, especially when users interact with numerous applications with varying access privileges.

Innovation Solution

A client-resident agent monitors user activities and creates records, which are then transmitted to a server for centralized logging, utilizing biometric authentication and user profiles to automate user identification and access management across multiple applications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If separate administrative functions are implemented for each application to track user activities, then auditing capabilities for each application are improved, but device complexity and administrative burden increase significantly

Engineering Contradiction:
Improveauditing capabilitiesVSAvoidadministrative complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple separate auditing functions into a single centralized auditing system that can track user activities across multiple applications simultaneously. The auditing module consolidates audit logs from different applications into a unified database, eliminating the need for separate administrative functions for each application and reducing overall system complexity.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The auditing system is designed as a universal platform that can monitor and track user activities across various types of applications (email, document control, financial applications, inventory management, etc.) using a single implementation. This multi-functional approach allows the system to handle diverse auditing requirements without requiring application-specific configurations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Loss of information

If comprehensive audit tracking is implemented across multiple applications, then information completeness is improved, but data extraction and processing time increase

Engineering Contradiction:
Improveinformation completenessVSAvoiddata extraction time
Core Design Contradiction:
Loss of informationVSLoss of time

Solution Approach 1:

The system performs preliminary actions by continuously collecting and storing audit logs in a centralized database as activities occur, rather than extracting data after the fact. Audit records are pre-processed and organized in advance, making subsequent data extraction and analysis operations faster and more efficient when comprehensive information is needed.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If biometric authentication is implemented for user identification, then security is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an identification module as an intermediary component that handles biometric authentication. This module acts as a mediator between the user and the auditing system, capturing biometric data, comparing it against stored templates, and verifying user identities. By isolating the biometric processing in a dedicated intermediary module, the overall system complexity is managed while maintaining enhanced security capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS7941849B2System and method for audit tracking
Publication Date: 2011.05.10 IMPRIVATA
  • US7941849B2 patent drawing
  • US7941849B2 patent drawing
  • US7941849B2 patent drawing

AI summary

User activities in various applications are audited using a client-resident agent. An alias for an individual is associated with a user profile for the individual user. The user profile may contain data pertaining to the user's activities within one or more applications. Data in the user profile may be used to determine which actions are audited, and how the audit data is used.