Cloud Identity Power Scoring for Privilege Risk Prioritization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The traditional enterprise network security model, which relied on a well-defined perimeter, is no longer effective with the shift to cloud-based applications and the use of unsecured devices, leading to increased security risks for enterprise data and the need for improved identity management and risk assessment in cloud environments.
Innovation Solution
An identity power scoring system that assigns each identity in a cloud environment a score of 0-100, based on privileges, to identify and prioritize risks, using category power scores and global power scores for optimized protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional firewalls and perimeter-based security are used, then network security is maintained within defined boundaries, but security coverage is insufficient for mobile devices and cloud environments
Solution Approach 1:
The patent segments the enterprise network into multiple zones (corporate network, private network, guest network) with different security policies. Each zone has its own firewall rules and access controls, allowing security to be applied differently to on-premises resources, cloud resources, and mobile device access, thereby extending security coverage without compromising the core network perimeter.
Solution Approach 2:
The patent introduces a cloud-based security gateway as an intermediary between mobile devices and enterprise resources. This gateway provides secure access without requiring devices to join the internal network, acting as a mediator that extends security coverage to unmanaged devices while maintaining the integrity of the core network perimeter.
2Adaptability or versatility
If cloud-based security solutions are deployed, then security coverage extends to mobile devices and cloud environments, but complexity of security management increases
Solution Approach 1:
The patent implements a universal cloud-based security gateway that handles multiple functions: authentication, authorization, encryption, and threat detection. This single platform provides security coverage across on-premises networks, cloud environments, and mobile device access, reducing management complexity by consolidating multiple security functions into one system rather than deploying separate solutions for each environment.
3Reliability
If comprehensive access control is implemented, then security of credentials and privileges is improved, but ease of operation for users decreases
Solution Approach 1:
The patent implements preliminary authentication and authorization through the cloud security gateway before users access any enterprise resources. User credentials are verified and privileges are established in advance, allowing seamless access to approved resources without repeated authentication prompts, thereby maintaining credential security while preserving ease of operation for legitimate users.
Data Source
AI summary
Systems and methods for providing an identity power scoring system for cloud environments. Various embodiments include defining a plurality of admin categories associated with a cloud environment; deriving a category power score of an identity for each of the plurality of admin categories; and calculating a global power score of the identity based on the power score for each of the plurality of admin categories. The scoring system helps identify and prioritize risk associated with specific identities, allowing more optimized methods of protection for information in the cloud-based system.