System and method to associate a private user identity with a public user identity

摘要

The inventive system includes a host, a network including a security gateway, and a public application. Established are an access session between the network and the host and an application session between the public application and the network. An application session record is created for the application session, and includes the user's public user identity used to access the public application, the user's private user identity used to access the network, a host identity, and an application session time, To determine the private user identity for the application session, the security gateway sends a query with the host identity and the application session time. These are compared with the host identity and access session time in an access session record, if they match, then the private user identity in the access session record is returned, and it is stored as the private user identity in the application session record.

主权项

1. A processor-implemented method comprising:
provisioning an application session between a first host and an application server; providing to an identity server a first host identity associated with the first host, a first user identity associated with the application session, and an application session time associated with the application session; establishing an access session for a second host; furnishing to an identity server a second host identity associated with the second host, a second user identity associated with the access session, and an access session time associated with the access session; and receiving an indication from the identity server in response to the identity server comparing the access session time to the application session time and determining the first host identity corresponds to the second host identity and the access session time corresponds, determined in response to the application session time being between a starting time and an ending time associated with the access session, to the application session time, the indication associating the first and second user identities.