Granted Patent B2

US 7,941,849 · App. 10/395,034 · Granted May 10, 2011

Assignee: Imprivata, Inc.

Abstract

Claims (34)

1. A method of tracking and storing a record of user activities on a client computer, the method comprising the steps of:

a. authenticating the identity of the user;

b. in response to a valid authentication, receiving, from a server and storing on the client computer, a user profile comprising a set of auditable user actions to be monitored at the client computer, the set of auditable user actions being predetermined and based on the user's identity;

c. monitoring the set of user actions within multiple applications on the client computer;

d. creating a user-specific audit log based on the set of auditable user actions specified in the user profile; and

e. transmitting the audit log for storage on an external computer.

2. The method of claim 1 wherein a user profile specifying the monitored auditable user actions is stored on a server in communication with the client computer over a network.

3. The method of claim 2 wherein the authentication step further comprises:

a. storing, on the server, a user profile comprising the monitored auditable user actions and a reference set of biometric data identifying the user;

b. receiving, at the client computer, biometric data from the user;

c. transmitting the received biometric data from the client computer to the server over the network; and

d. if the received biometric data matches the reference biometric data, confirming the identity of the user and transmitting the monitored actions to the client computer.

4. The method of claim 1 wherein the auditable user actions are monitored as items are entered on the client computer by the user by means of at least one input device.

5. The method of claim 4 wherein auditable user actions are monitored based on recognition of screens displayed to the user.

6. The method of claim 5 wherein a recognized screen comprises a plurality of fields, the auditable user actions comprise entering information into at least some of the fields, and the transmitted audit log comprises at least some of the entered information.

7. A system for tracking and storing a record of user activities on a client computer, the system comprising:

a. a user profile stored on a server, and comprising a set of auditable user actions to be monitored at the client computer, the set of monitored auditable user actions being predetermined and based on the user's identity;

b. an active agent operating on a client computer and configured to (i) receive the user profile from the server in response to a valid authentication of the user (ii) monitor the set of user actions within multiple applications on the client computer and (iii) create a user-specific audit log based on the set of auditable user actions specified in the user profile; and

c. a client-resident communications module for transmitting the audit log for storage on an external computer.

8. The system of claim 7 further comprising an identification server for storing the user profile and, in response to a request to access one or more of the plurality of applications, transmitting the user profile to the client via the communications module.

9. The system of claim 8 wherein the user profile stored on the identification server comprises reference biometric data identifying the user, the system further comprising a biometric input device for receiving, at the client computer, biometric data from the user for transmission, by the communications module, to an authentication server.

10. The system of claim 9 further comprising an authentication server for (i) comparing the received biometric data to reference biometric data stored on the authentication server, and (ii) if the received biometric data matches the reference biometric data, confirming the identity of the user and causing the user profile to be transmitted to the client computer.

11. The system of claim 7 wherein the active agent monitors items entered on the client computer by the user by means of at least one input device.

12. The system of claim 10 wherein the active agent monitors actions based on recognition of screens displayed to the user.

13. The system of claim 12 wherein the screens comprise a plurality of fields and wherein the active agent further monitors information entered into at least some of the fields and the transmitted audit log comprises at least some of the entered information.

14. A server system for use in connection with a client computer capable of monitoring user actions within multiple applications operating thereon and transmitting a user-specific audit log based on the user actions, the system comprising:

a. a first server for storing a user profile comprising a set of auditable user actions to be monitored at the client computer, the set of monitored auditable user actions specified in the user profile being predetermined and based on the user's identity, and, in response to a valid authentication of the user, transmitting the user profile to the client computer; and

b. a second server for (i) comparing received biometric data to reference biometric data stored on the second server, and (ii) if the received biometric data matches the reference biometric data, confirming the identity of the user and causing the user profile to be transmitted to the client computer.

15. A system, operable on a user's client computer connected to a computer network, for tracking and storing a record of user activities on a client computer, the system comprising:

a. means for authenticating the user's identity;

b. means for receiving, from a server and in response to a valid authentication, a user profile comprising a set of auditable user actions to be monitored at the client computer, the set of monitored auditable user actions being predetermined and based on the user's identity;

c. means for monitoring the set of auditable user actions within multiple applications on the client computer;

d. means for creating a user-specific audit log based on the set of auditable user actions specified in the user profile; and

e. means for transmitting the audit log for storage on an external computer.

Assignments (8)

Continuity (1)