Computing Identity Ownership Scoring for Fluid Reassignment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge of tracking ownership of computing identities in modern computing environments, where identities change frequently and are reassigned to different users or machine users, has become more complex due to fluid identity usage.
Innovation Solution
A method and system for determining identity ownership by aggregating interactions with computing identities, analyzing identity management actions, and generating ownership scores based on factors such as type of action, recency, frequency, and explicit indicators to identify potential owners, which can be used for tasks like remediation and secrets rotation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If identities are reassigned frequently to different users and machine users, then identity usage becomes more fluid and adaptable, but tracking ownership of computing identities becomes more challenging
Solution Approach 1:
The patent segments the ownership determination process into distinct components: identifying interactions, aggregating interaction data, analyzing identity management actions, and generating ownership scores. This segmentation allows the system to handle fluid identity usage by processing different types of interactions separately and combining them systematically, thereby managing the complexity of tracking ownership across multiple users and machine users.
Solution Approach 2:
The patent introduces an intermediary ownership determination system that acts as a mediator between fluid identity usage and ownership tracking. This intermediary analyzes interaction data and generates ownership scores to determine current owners, thereby resolving the complexity of tracking ownership in a fluid identity environment without restricting identity reassignment flexibility.
2Measurement precision
If comprehensive interaction data is collected and aggregated to determine identity ownership, then ownership determination accuracy is improved, but data processing complexity and computational resources increase
Solution Approach 1:
The patent applies local quality by weighting different types of interactions and identity management actions differently in the ownership determination process. Not all interactions contribute equally to ownership determination - the system assigns different weights to various interaction types and management actions, thereby improving accuracy while managing computational complexity through selective emphasis on more significant data points.
Solution Approach 2:
The patent changes parameters by generating ownership scores based on multiple factors including type of action, recency, frequency, and explicit indicators. By transforming raw interaction data into standardized ownership scores with different weightings, the system improves determination accuracy while simplifying the overall processing through parameter transformation and normalization.
3Measurement precision
If multiple factors are considered in ownership determination (type of action, recency, frequency, explicit indicators), then ownership determination accuracy is improved, but the determination process becomes more complex
Solution Approach 1:
The patent creates a simplified representation (ownership score) that copies and aggregates the information from multiple complex factors. Instead of manually analyzing each interaction type, recency, frequency, and explicit indicator separately, the system generates an ownership score that encapsulates all these factors, thereby improving accuracy while maintaining operational simplicity through this aggregated representation.
Data Source
AI summary
A system and method for determining identity ownership. A method includes identifying a plurality of interactions performed with respect to a plurality of computing identities, wherein each interaction is performed by a respective entity of a plurality of entities and with respect to a respective computing identity of the plurality of computing identities; aggregating the plurality of interactions in order to create at least one set of aggregated interactions, wherein each set of aggregated interactions includes a subset of the plurality of interactions performed with respect to one of the plurality of computing identities, wherein the plurality of interactions includes a plurality of modifications of data used to manage access activities of the plurality of computing identities; and determining an owner of each computing identity based on the at least one set of aggregated interactions, wherein the owner of each computing identity is one of the plurality of entities.