Patent ID: 8495715
Filing Date: 2013-07-23
Classification: G06F,H04L

Abstract:
1. A method for credential auditing, the method comprising: receiving by a computer system executing a credential auditing service a request to audit a credential for a principal within a secure environment; inspecting, by the computer system, a credential history for the principal without accessing the credential by the credential auditing service, the credential history comprising a log of previously used credentials for the principal identified by a hash value for each credential instead of the credential; performing, by the computer system, the audit of the credential of the principal based on said inspecting, wherein performing the audit includes making determinations regarding expiration and prior use of the credential; and generating, by the computer system, a report for the credential based on said inspecting and performing the audit, wherein the report masks the credential and the credential history and includes an indication as to whether the credential complies with a policy for credential usage.