IP Library › Granted Patent US 11,818,114

Granted Patent B2

US 11,818,114 · App. 17/344,585 · Granted Nov 14, 2023

Systems, methods, and storage media for synchronizing identity information across identity domains in an identity infrastructure

Inventors: Eric Olden (Niwot, CO); Christopher Marie (San Juan, OR); Carl Eric Leach (Piedmont, CA)

Assignee: Strata Identity, Inc.

H04L63/0815 H04L63/083 H04L63/20 H04L67/1095

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 11,818,114
App. No.: 17/344,585
Granted: Nov 14, 2023
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

Systems, methods, and storage media for synchronizing identity information across identity domains in an identity infrastructure are disclosed. Exemplary implementations may: identify at least one of first identity data and first identity metadata in a first identity domain; identify at least one of second identity data and second identity metadata in a second identity domain; receive a request to change the at least one of the first identity data and the first identity metadata for at least one user; and update the at least one of second identity data and second identity metadata for the at least one user based on the request to change the at least one of the first identity data and the first identity metadata for the at least one user.

Claims (84)

1. A system configured for synchronizing identity information across identity domains in an identity infrastructure, the system comprising:

one or more hardware processors configured by machine-readable instructions to:

identify at least one of first identity data and first identity metadata in a first identity domain;

identify at least one of second identity data and second identity metadata in a second identity domain;

receive a request to change the at least one of first identity data and first identity metadata for at least one user; and

update the at least one of second identity data and second identity metadata for the at least one user, wherein the updating is based at least in part on the request to change the at least one of the first identity data and the first identity metadata for the at least one user.

2. The system of claim 1 , wherein the identity infrastructure comprises a synchronizing agent; and

wherein receiving a request to change the at least one of the first identity data and first identity metadata further comprises using the synchronizing agent to:

intercept the request to change the at least one of the first identity data and the first identity metadata,

process the at least one of the first identity data and the first identity metadata,

identify one or more modifications in the at least one of the first identity data and the first identity metadata, and

evaluate a compatibility of the one or more modifications in the at least one of the first identity data and the first identity with respect to the second identity domain.

3. The system of claim 2 , wherein one or more first credentials, first attributes, and first policy rules are associated with the first identity domain;

wherein one or more second credentials, second attributes, and second policy rules are associated with the second identity domain;

wherein the one or more second credentials comprise one or more second credentials requirements;

wherein the one or more second attributes comprise one or more second attributes requirements;

wherein the one or more second policy rules comprise one or more second policy rules requirements;

wherein using the synchronizing agent to evaluate the compatibility of the one or more modifications comprises: comparing the requested changes to the at least one of the first identity data and the first identity metadata to the one or more second credentials requirements;

4. The system of claim 3 , wherein one or more of the first credentials and the second credentials comprise a respective password;

wherein the one or more second credential requirements comprise at least one of a credential length and a credential character set;

wherein the one or more second attributes requirements comprise one or more of an alphanumeric string and an identified user group associated with the at least one user;

wherein one or more of the first policy rules and the second policy rules comprise a respective time-based rule;

wherein the one or more second policy rules requirements comprise policy rules based on second identity domain requirements,

wherein the one or more hardware processors are further configured by machine-readable instructions to: ensure suitability of the requested changes to the at least one of the first identity data and the first identity metadata with respect to the second identity domain by confirming the requested changes meet the one or more second credentials requirements, second attributes requirements, and second policy rules requirements.

5. The system of claim 3 , wherein the one or more hardware processors are further configured by machine-readable instructions to transmit a request to the first identity domain to reverse the changes to the at least one of the first identity data and the first identity metadata, wherein the request to reverse the changes is based at least in part on the compatibility evaluation by the synchronizing agent.

6. The system of claim 3 , wherein the one or more hardware processors are further configured by machine-readable instructions to deny application of the request to change the at least one of the first identity data and the first identity metadata for the at least one user based in part on the compatibility evaluation by the synchronizing agent.

7. The system of claim 1 , wherein the one or more hardware processors are further configured by machine-readable instructions to:

change the at least one of the first identity data and the first identity metadata for the at least one user from one or more first identity domain first values to one or more first identity domain second values, wherein the one or more first identity domain first values and the one or more first identity domain second values are in a first identity domain format;

update the at least one of the second identity data and the second identity metadata, wherein the updating comprises changing the at least one of the second identity data and the second identity metadata from one or more second identity domain first values to one or more second identity domain second values by synchronizing the at least one of the second identity data and the second identity metadata to the one or more first identity domain second values, wherein the one or more second identity domain first values and one or more second identity domain second values are in a second identity domain format, and wherein the second identity domain format is different than the first identity domain format.

8. A method for synchronizing identity information across identity domains in an identity infrastructure, comprising:

identifying at least one of first identity data and first identity metadata in a first identity domain;

identifying at least one of second identity data and second identity metadata in a second identity domain;

receiving a request to change the at least one of first identity data and first identity metadata for at least one user; and

updating the at least one of second identity data and second identity metadata for the at least one user, wherein the updating is based at least in part on the request to change the at least one of the first identity data and the first identity metadata for the at least one user.

9. The method of claim 8 , wherein the identity infrastructure comprises a synchronizing agent; and

wherein receiving a request to change the at least one of the first identity data and then first identity metadata further comprises using the synchronizing agent to: intercept the request to change the at least one of the first identity data and the first identity metadata, process the at least one of the first identity data and the first identity metadata, identify one or more modifications in the at least one of the first identity data and the first identity metadata, and evaluate a compatibility of the one or more modifications in the at least one of the first identity data and the first identity metadata with respect to the second identity domain.

10. The method of claim 9 , wherein one or more first credentials, first attributes, and first policy rules are associated with the first identity domain;

wherein one or more second credentials, second attributes, and second policy rules are associated with the second identity domain;

wherein the one or more second credentials comprise one or more second credentials requirements;

wherein the one or more second attributes comprise one or more second attributes requirements;

wherein the one or more second policy rules comprise one or more second policy rules requirements;

wherein using the synchronizing agent to evaluate the compatibility of the one or more modifications comprises: comparing the requested changes to the at least one of the first identity data and first identity metadata to the one or more second credentials requirements;

11. The method of claim 10 , wherein one or more of the first credentials and the second credentials comprise a respective password;

wherein the one or more second credential requirements comprise at least one of a credential length and a credential character set;

wherein the one or more second attributes requirements comprise one or more of an alphanumeric string and an identified user group associated with the at least one user;

wherein one or more of the first policy rules and the second policy rules comprise a respective time-based rule;

and wherein the one or more second policy rules requirements comprise policy rules based on second identity domain requirements,

the method further comprising:

ensuring suitability of the requested changes to the at least one of the first identity data and the first identity metadata with respect to the second identity domain by confirming the requested changes meet the one or more second credentials requirements, second attributes requirements, and second policy rules requirements.

12. The method of claim 10 , further comprising transmitting a request to the first identity domain to reverse the changes to the at least one of the first identity data and the first identity metadata, wherein the request to reverse the changes is based at least in part on the compatibility evaluation by the synchronizing agent.

13. The method of claim 10 , further comprising denying application of the request to change the at least one of the first identity data and the first identity metadata for the at least one user based in part on the compatibility evaluation by the synchronizing agent.

14. The method of claim 8 , further comprising:

changing the at least one of the first identity data and the first identity metadata for at least one user from one or more first identity domain first values to one or more first identity domain second values, wherein the one or more first identity domain first values and the one or more first identity domain second values are in a first identity domain format;

updating the at least one of the second identity data and the second identity metadata, wherein the updating comprises changing the at least one of the second identity data and the second identity metadata from one or more second identity domain first values to one or more second identity domain second values by synchronizing the at least one of the second identity data and the second identity metadata to the one or more first identity domain second values, wherein

the one or more second identity domain first values and one or more second identity domain second values are in a second identity domain format, and wherein

the second identity domain format is different than the first identity domain format.

15. A non-transient computer-readable storage medium having instructions embodied thereon, the instructions being executable by one or more processors to perform a method for synchronizing identity information across identity domains in an identity infrastructure, the method comprising:

identifying at least one of first identity data and first identity metadata in a first identity domain;

identifying at least one of second identity data and second identity metadata in a second identity domain;

receiving a request to change the at least one of the first identity data and the first identity metadata for at least one user; and

updating the at least one of second identity data and the second identity metadata for the at least one user, wherein the updating is based at least in part on the request to change the at least one of the first identity data and the first identity metadata for the at least one user.

16. The computer-readable storage medium of claim 15 , wherein the identity infrastructure comprises a synchronizing agent; and

wherein receiving a request to change the at least one of the first identity data and first identity metadata further comprises using the synchronizing agent to: intercept the request to change the at least one of the first identity data and the first identity metadata, process the at least one of the first identity data and the first identity metadata, identify one or more modifications in the at least one of the first identity data and the first identity metadata, and evaluate a compatibility of the one or more modifications in the at least one of the first identity data and the first identity metadata with respect to the second identity domain.

17. The computer-readable storage medium of claim 16 , wherein one or more first credentials, first attributes, and first policy rules are associated with the first identity domain;

wherein one or more second credentials, second attributes, and second policy rules are associated with the second identity domain;

wherein the one or more second credentials comprise one or more second credentials requirements;

wherein the one or more second attributes comprise one or more second attributes requirements;

wherein the one or more second policy rules comprise one or more second policy rules requirements;

wherein using the synchronizing agent to evaluate the compatibility of the one or more modifications comprises: comparing the requested changes to the at least one of the first identity data and first identity metadata to the one or more second policy rules requirements.

18. The computer-readable storage medium of claim 17 , wherein one or more of the first credentials and the second credentials comprise a respective password;

wherein the one or more second credential requirements comprise at least one of a credential length and a credential character set;

wherein the one or more second attributes requirements comprise one or more of an alphanumeric string and an identified user group associated with the at least one user;

wherein one or more of the first policy rules and the second policy rules comprise a respective time-based rule;

wherein the one or more second policy rules requirements comprise policy rules based on second identity domain requirements,

the method further comprising:

19. The computer-readable storage medium of claim 17 , wherein the method further comprises transmitting a request to the first identity domain to reverse the changes to the at least one of the first identity data and the first identity metadata, wherein the request to reverse the changes is based at least in part on the compatibility evaluation by the synchronizing agent.

20. The computer-readable storage medium of claim 17 , wherein the method further comprises denying application of the request to change the at least one of the first identity data and the first identity metadata for the at least one user based in part on the compatibility evaluation by the synchronizing agent.

Assignments (4)

ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 20, 2026

From: STRATA IDENTITY, INC.

To: RUBRIK, INC.

Reel/Frame 075720/0060 →

RELEASE OF SECURITY INTEREST Recorded Jun 5, 2026

From: WESTERN ALLIANCE BANK

To: STRATA IDENTITY, INC.

Reel/Frame 074873/0123 →

INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Apr 7, 2025

From: STRATA IDENTITY, INC.

To: WESTERN ALLIANCE BANK