	US 12,255,894 B2
	Method and system for running an identity and access management system
Jürgen Biermann, Grünwald (DE); Daniel Deckers, Stuttgart (DE); Timothy Clayton Hobbs, Barcelona (ES); Tobias Hülsken, Stuttgart (DE); Heiko Hütter, Hochdorf (DE); and Andre Priebe, Ostfildern (DE)
Assigned to Service Layers GmbH, Munich (DE)
Appl. No. 17/774,523
Filed by Service Layers GmbH, Munich (DE)
PCT Filed Oct. 6, 2020, PCT No. PCT/DE2020/100870 § 371(c)(1), (2) Date May 5, 2022, PCT Pub. No. WO2021/089083, PCT Pub. Date May 14, 2021.
Claims priority of application No. 20 2019 106 136.7 (DE), filed on Nov. 5, 2019; and application No. 102019129762.1 (DE), filed on Nov. 5, 2019.
Prior Publication US 2022/0394030 A1, Dec. 8, 2022
Int. Cl. G06F 8/61 (2018.01); H04L 9/40 (2022.01)

CPC H04L 63/0876 (2013.01) [G06F 8/61 (2013.01)]

25 Claims

1. A method for implementing an identity and access management system, in which at least one layer is provided and a master computer communicates with at least one slave computer,

wherein the master computer comprises at least one component which is designed as a computing device and/or as a memory device and/or as a further working component respectively, wherein

respective units of functionality of the computing device and/or of the memory device and/or of the further working component of the master computer are generated, and

the respective units of the functionality of the computing device and/or of the memory device and/or the further working component are converted into a code and are transmitted in coded form from the master computer to the slave computer,

wherein the master computer is controlled with the aid of the computing device, and for control at least one software program product operates,

wherein units of functionality of the software program product respectively are converted into a code and are transmitted in coded form from the master computer to the slave computer,

wherein the computing device and/or the memory device and/or the further working component and/or the software program product of the master computer are configured in dependence of at least one parameter of the at least one slave computer, and

a respective configuration is converted into a code and transmitted in coded form from the master computer to the slave computer,

wherein data and/or information of a user are stored in a memory device of the slave computer, and

a personal profile for identification and/or authentication and/or authorisation of the user is created from the data and/or information in the computing device of the slave computer,

wherein the units of the functionality of the computing device and/or of the memory device converted into a code and/or the units of the functionality of the further working component and/or of the software program product converted into a code and/or the configuration are transferred from the master computer into the computing device and/or into the memory device and/or into the further working component as well as into at least one runtime environment of the slave computer,

wherein the data and/or information of the user in the computing device and/or in the memory device and/or in the further working component of the slave computer are processed and/or edited with the transmitted functionalities of the software program product,

the converted code and/or units of the respective functionalities transferred from the master computer to the slave computer act on the computing device and/or on the memory device and/or on the further working component and/or on the software program product of the slave computer,

wherein at least one layer is part of a layered architecture and the components and/or a code storage facility of the master computer and/or of the slave computer are structured in at least two layers that differ from each other, and

a first layer refers to the software program product of the master computer,

a second layer comprises configuration of hardware components of the slave computer and/or configuration of the software program product, and

a third layer concerns units of functionality of the hardware components, which are transmitted from the master computer to the slave computer as respective units of functionality in coded form.