Policy-based auditing of identity credential disclosure by a secure token service

Abstract

A user defines an audit policy. The audit policy identifies one or more triggers that, when related information is included in a security token, trigger the performance of the audit. The audit can include notifying the user in some manner that the trigger occurred. The audit can require in-line confirmation of the audit, so that the security token is not transmitted until the user confirms the audit.

1 . An apparatus, comprising:
 a machine operative as an identity provider;   a receiver to receive a request for a security token;   a transmitter to transmit said security token responsive to said request;   at least one audit policy including a trigger based on said security token and an audit action; and   an audit operator operative to perform said audit action if said trigger occurs.