Patent ID: 9529993
Filing Date: 2016-12-27
CPC Classification: G06F,H04L

Claim Text:
1. A method to manage privileged accounts associated with an enterprise, comprising: determining that an entity is attempting to logon to a privileged account that enables administrative control over a computing resource, wherein a privileged account is a non-personal account accessible using a shared privileged account credential; in response to determining that the entity is attempting to logon to the privileged account, initiating a second factor of authentication by prompting the entity to provide additional identifying information; determining, using software executing in a hardware element, that the entity is authorized to login to the privileged account by verifying the additional identifying information to identify the entity; in response to determining that the entity is authorized to login to the privileged account, verifying, using an access control policy, that the entity that has been identified by verifying the additional identifying information also is allowed, per the access control policy, to logon to the privileged account using the shared privileged account credential; providing the entity access to the privileged account when according to the access control policy the entity that has been identified by verifying the additional identifying information also is allowed to logon to the privileged account; and logging information about the entity access to the privileged account, the information logged identifying the entity based on the additional identifying information provided in response to the prompting.