IP Library › Granted Patent US 10,581,861
Granted Patent B2
US 10,581,861 · App. 15/701,564 · Granted Mar 3, 2020

Endpoint access manager

Inventors: Yunfei Bai (Singapore, SG); Ken Yian Chow (Singapore, SG); Christopher Hockings (Burleigh Waters, AU); Guoguang Jason Lu (Singapore, SG); Codur S. Pranam (London, GB); Roy Soumyajit (Singapore, SG); Chuxin Zhao (Singapore, SG)
Assignee: International Business Machines Corporation
H04L63/102H04L41/0893H04L63/0823H04L63/20H04W12/0609H04W12/1008
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,581,861
App. No.
15/701,564
Granted
Mar 3, 2020
Kind
B2
Abstract

Aspects of the present invention disclose a method, computer program product, and system for determining whether an endpoint meets compliance standards. The method includes one or more processors receiving an endpoint certificate associated with an endpoint device that is requesting to access a resource, wherein the endpoint certificate includes a device fingerprint. The method further includes one or more processors determining compliance level of the endpoint device. The method further includes one or more processors validating credentials of the endpoint device. The method further includes one or more processors determining whether the endpoint device meets compliance standards based on the endpoint certificate, the determined compliance level, and the credentials of the endpoint device.

Claims (63)

1. A method for determining whether an endpoint meets compliance standards, the method comprising:

receiving, by one or more processors, an endpoint certificate associated with an endpoint device that is requesting to access a resource, wherein the endpoint certificate includes a device fingerprint;

determining, by one or more processors, a network that the endpoint device is utilizing to request access to the resource;

identifying, by one or more processors, at least one deployment requirement dictated by the network;

determining, by one or more processes, compliance level of the endpoint device;

validating, by one or more processors, credentials of the endpoint device;

determining by one or more processors, that the endpoint device does not meet compliance standards based on the endpoint certificate, the determined compliance level, and the credentials of the endpoint device; and

denying, by one or more processors, the endpoint device access to the resource.

2. The method of claim 1 , wherein determining the compliance level of the endpoint device further comprises:

accessing, by one or more processors, a database to retrieve a compliance standard;

identifying, by one or more processors, at least one deployment requirement dictated by the compliance standard;

determining, by one or more processors, an amount of the identified at least one deployment requirements that the endpoint device meets based on the received endpoint certificate and information associated with the endpoint device; and

determining, by one or more processors, the compliance level of the endpoint device based on the determined amount of the identified at least one deployment requirements that the endpoint device meets.

3. The method of claim 1 , wherein validating credentials for the endpoint device further comprises:

identifying, by one or more processors, a user of the endpoint device; and

determining, by one or more processors, whether the user is an approved user of the endpoint device.

4. The method of claim 1 , further comprising:

receiving, by one or more processors, a second endpoint certificate associated with the endpoint device that is requesting access to a second resource;

determining, by one or more processors, that the second resource is publically available; and

granting, by one or more processors, the endpoint device access to the second resource.

5. A computer program product for determining whether an endpoint meets compliance standards, the computer program product comprising:

one or more computer readable tangible storage media and program instructions stored on at least one of the one or more computer readable storage media, the program instructions readable/executable by one or more computer processors and further comprising:

program instructions to receive an endpoint certificate associated with an endpoint device that is requesting to access a resource, wherein the endpoint certificate includes a device fingerprint;

program instructions to determine a network that the endpoint device is utilizing to request access to the resource;

program instructions to identify at least one deployment requirement dictated by the network:

program instructions to determine compliance level of the endpoint device;

program instructions to validate credentials of the endpoint device;

program instructions to determine that the endpoint device does not meet compliance standards based on the endpoint certificate, the determined compliance level, and the credentials of the endpoint device: and

program instructions to deny the endpoint device access to the resource.

6. The computer program product of claim 5 wherein determining the compliance level of the endpoint device further comprises program instructions, stored on the one or more computer readable storage media, which when executed by a processor, cause the processor to:

access a database to retrieve a compliance standard;

identify at least one deployment requirement dictated by the compliance standard;

determine an amount of the identified, at least one deployment requirements that the endpoint device meets based on the received endpoint certificate and information associated with the endpoint device; and

determine the compliance level of the endpoint device based on the determined amount of the identified at least one deployment requirements that the endpoint device meets.

7. The computer program product of claim 5 wherein validating credentials for the endpoint device further comprises program instructions, stored on the one or more computer readable storage media, which when executed by a processor, cause the processor to:

identify a user of the endpoint device; and

determine whether the user is an approved user of the endpoint device.

8. The computer program product of claim 5 , further comprising program instructions, stored on the one or more computer readable storage media, which when executed by a processor, cause the processor to:

receive a second endpoint certificate associated with the endpoint device that is requesting access to a second resource;

determine that the second resource is publically available; and

grant the endpoint device access to the second resource.

9. A computer system comprising:

one or more computer processors;

one or more computer readable storage media; and

program instructions stored on the computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising:

program instructions to receive an endpoint certificate associated with an endpoint device that is requesting to access a resource, wherein the endpoint certificate includes a device fingerprint;

program instructions to determine a network that the endpoint device is utilizing to request access to the resource;

program instructions to identify at least one deployment requirement dictated by the network;

program instructions to determine compliance level of the endpoint device;

program instructions to validate credentials of the endpoint device;

program instructions to determine that the endpoint device does not meet compliance standards based on the endpoint certificate, the determined compliance level, and the credentials of the endpoint device; and program instructions to deny the endpoint device access to the resource.

10. The computer system of claim 9 , wherein determining the compliance level of the endpoint device further comprises program instructions, stored on the one or more computer readable storage media, which when executed by a processor, cause the processor to:

program instructions to access a database to retrieve a compliance standard;

program instructions to identify at least one deployment requirement dictated by the compliance standard;

program instructions to determine an amount of the identified at least one deployment requirements that the endpoint device meets based on the received endpoint certificate and information associated with the endpoint device; and

program instructions to determine the compliance level of the endpoint device based on the determined amount of the identified at least one deployment requirements that the endpoint device meets.

11. The computer system of claim 9 wherein validating credentials for the endpoint device further comprises program instructions, stored on the one or more computer readable storage media, which when executed by a processor, cause the processor to:

identify a user of the endpoint device; and

determines whether the user is an approved user of the endpoint device.

12. The computer system of claim 9 , further comprising program instructions, stored on the one or more computer readable storage media, which when executed by a processor, cause the processor to:

receive a second endpoint certificate associated with the endpoint device that is requesting access to a second resource;

determine that the second resource is publically available; and

grant the endpoint device access to the second resource.

Assignments (5)
RELEASE OF SECURITY INTEREST Recorded Mar 28, 2025
From: BLUE OWL CREDIT INCOME CORP (F/K/A OWL ROCK CORE INCOME CORP.), AS COLLATERAL AGENT
To: AVALARA, INC.; EDISON VAULT, LLC
Reel/Frame 070671/0486 →
SECURITY INTEREST Recorded Mar 28, 2025
From: AVALARA, INC.; EDISON VAULT, LLC
To: MORGAN STANLEY SENIOR FUNDING, INC., AS COLLATERAL AGENT
Reel/Frame 070671/0097 →
SECURITY INTEREST Recorded Oct 20, 2022
From: AVALARA, INC.; EDISON VAULT, LLC
To: OWL ROCK CORE INCOME CORP., AS COLLATERAL AGENT
Reel/Frame 061728/0201 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 18, 2020
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: EDISON VAULT, LLC
Reel/Frame 054693/0269 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 12, 2017
From: BAI, YUNFEI; CHOW, KEN YIAN; HOCKINGS, CHRISTOPHER; LUI, GUOGUANG JASON; PRANAM, CODUR S.; SOUMYAJIT, ROY; ZHAO, CHUXIN
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 043552/0791 →
Continuity (1)
Related Publication 20190081953A1 · Mar 14, 2019