Identity Directory User Presence Tracking via Session Unlock
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Microsoft Windows-based environments lack mechanisms to comprehensively determine and monitor user presence, specifically whether a user is active and at which workstation, due to the emphasis on resource access rather than user/client control.
Innovation Solution
A method using an identity directory platform to capture user presence by detecting unlock events, generating arrays of processes associated with session IDs, comparing these arrays, and performing LDAP queries to update user records with the latest location information in the Active Directory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If Windows-based systems use controls to associate a user with a single client workstation, then user presence can be determined, but users are prevented from logging on to another client without administrative backend updates
Solution Approach 1:
The patent segments user presence monitoring into multiple independent process arrays (logonui.exe instances and explorer.exe instances), each tracked separately with their own session IDs. This allows the system to monitor multiple user sessions simultaneously without requiring administrative updates, resolving the contradiction between precise user presence determination and login flexibility.
Solution Approach 2:
The patent introduces an intermediary identity directory platform that acts as a mediator between the operating system components and the user presence monitoring framework. This intermediary coordinates the embedded OS components to comprehensively determine user presence without preventing users from logging on to multiple clients, thus resolving the contradiction.
2Ease of operation
If Windows-based systems lack inherent mechanisms to monitor user presence, then resource access is simplified, but user location tracking becomes impossible
Solution Approach 1:
The patent performs preliminary actions by detecting unlock events and immediately generating process arrays with session IDs before user location information is needed. This preliminary monitoring of logonui.exe and explorer.exe processes ensures user location information is captured and stored in the identity directory without interfering with resource access operations.
Solution Approach 2:
The patent implements a feedback mechanism where the system continuously monitors process instances, compares arrays to identify missing session IDs, queries the identity directory for user accounts, and updates user presence information. This closed-loop feedback system maintains accurate user location tracking while preserving simplified resource access.
3Measurement precision
If the system compares process arrays to identify missing session IDs, then user presence accuracy is improved, but system complexity increases
Solution Approach 1:
The patent makes the identity directory platform universal by having it perform multiple functions: storing user accounts, tracking session IDs, monitoring process instances, and updating user presence information. This multi-functional approach improves user presence accuracy without proportionally increasing system complexity, as a single platform handles all these tasks.
Data Source
AI summary
Capturing user presence at a workstation of a local network using an identity directory comprises detecting an unlock event, generating first and second arrays of all instances of respective first and second processes currently occurring in the local network, each instance being associated with a session ID, comparing the first and second arrays to ascertain whether any of the session IDs present in the second array are missing from the first array, performing a query in the identity directory to locate a user account associated with any session ID present in the first array and missing from the second array, and updating a record of the user accounts found in the query in regard to the user presence having been captured in association with the detected unlock event.