Entitlement-Based Identity Power Scoring for Cloud Privilege Risk
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The traditional enterprise network security model, which relied on well-defined perimeters, is inadequate for the modern cloud-based environment where mobile users access sensitive information from unsecured devices and networks, leading to increased security risks.
Innovation Solution
An entitlement-based identity power scoring system that assigns each identity in a cloud environment a score of 0-100, indicating its privilege level, enabling risk identification and prioritization, and providing optimized protection methods.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional perimeter-based firewalls are deployed in on-premises networks, then network security is improved, but security coverage is limited to within the corporate perimeter and cannot protect mobile devices accessing sensitive information from unsecured networks
Solution Approach 1:
The patent segments the traditional monolithic firewall into distributed cloud-based security functions. Instead of a single perimeter firewall, security enforcement is segmented across multiple cloud-based access points and policies that follow users and devices anywhere in the cloud environment, enabling both reliable security and broad adaptability.
Solution Approach 2:
The patent introduces cloud-based security services as intermediaries between users/devices and cloud resources. These intermediary services enforce security policies, authenticate identities, and control access without requiring traditional on-premises firewalls, thus extending security coverage to mobile devices while maintaining security reliability.
2Adaptability or versatility
If cloud-based security solutions are implemented to protect mobile devices, then security coverage is improved, but complexity of security management increases due to the need to assess and manage risks across diverse identities and entitlements
Solution Approach 1:
The patent transforms the complex security management problem into a simplified scoring model. By changing the parameter representation from detailed entitlement assessments to a single power score (0-100), the system maintains broad security coverage while dramatically reducing management complexity. Security administrators can quickly identify and prioritize risks using the score without analyzing complex entitlement structures.
3Measurement precision
If comprehensive entitlement information is collected and analyzed for each identity, then risk identification accuracy is improved, but processing time and computational resources increase
Solution Approach 1:
The patent applies partial action by collecting and analyzing only the most relevant entitlement information needed to compute the power score, rather than comprehensively analyzing all possible entitlement details. This selective approach maintains sufficient risk identification accuracy while significantly reducing processing time and computational overhead.
Data Source
AI summary
Systems and methods for providing an identity power scoring system for cloud environments. Various embodiments include collecting entitlement information associated with a user of a cloud environment; deriving a global power score of the identity, the global power score being based on the identity's entitlements in the cloud environment; and providing the global power score to security administrators of the cloud environment by way of a Graphical User Interface (GUI).