Patent ID: 9167047
Filing Date: 2015-10-20
Classification: H04L

Abstract:
1. A method for supporting privileged account management in a computing environment comprising a privileged account manager server and a target system wherein a plurality of users share access to a privileged account on the target system, the method comprising: providing a privileged account manager operating on the privileged account manager server; providing a recording agent operating on the target system; configuring one or more recording policies, using the privileged account manager, wherein said one or more recording policies operates to define detailed information on how user activities on the target system should be recorded; wherein configuring said one or more recording policies is performed using behavior analytics information that indicates when a suspicious command is input based on past user activities; receiving at the privileged account manager a request to access said privileged account on the target system from a particular user of the plurality of users which share access to a privileged account on the target system; providing said particular user with one-time access to a privileged account session for said privileged account on the target system in response to said request wherein said one-time access is terminated when said privileged account session is ended; detecting establishment of said privileged account session for said privileged account on the target system with the recording agent; providing said one or more recording policies from the privileged account manager to the recording agent on the target system in response to detecting establishment of said privileged account session; capturing with the recording agent a plurality of user session screens associated with said privileged account session to create a visual session record of activities of the particular user during the privileged account session on the target system in accordance with said one or more recording policies; and transmitting the visual session record from the recording agent to the privileged account manager.