Back to results
US 10,375,201 B2Granted
Identity and policy enforced inter-cloud and intra-cloud channel
AssigneeMicro Focus Software Inc.
InventorsBruce L. Bergeson, Carolyn B. McClain, Stephen R Carter, Vernon Roger Holm
Life of this patent
Estimating the term…
Abstract
Techniques for identity and policy enforced cloud communications are presented. Cloud channel managers monitor messages occurring within a cloud or between independent clouds. Policy actions are enforced when processing the messages. The policy actions can include identity-based restrictions and the policy actions are specific to the messages and/or clouds within which the messages are being processed.
Claims20
A method, comprising:
- resolving, by executable instructions that execute on a hardware processor from a non-transitory computer-readable storage medium, a channel identity for a communication channel for enforcing a policy by obtaining the channel identity as an identity-provider assigned channel identity from an identity provider that authenticates the communication channel in order to process the communication channel as a secure controlled and monitored communication channel and obtaining the policy based on the identity-provider assigned channel identity;
- enforcing, by the executable instructions that execute on the hardware processor, the policy for messages being passed:
- to, over, and from the communication channel based on the channel identity and the messages;
- and
- restricting select ones of the messages from being passed to, over, and from the communication channel and only permitting particular ones of the messages to be processed on the communication channel.
2 more elements
A method, comprising:
- intercepting, by executable instructions that execute on a hardware processor from a non-transitory computer-readable storage medium, a message within a cloud that is being attempted to be passed from a sender and is directed to a receiver;
- authenticating, by the executable instructions that execute on the hardware processor, the message based on at least:
- a message identity for the message, a sender identity for the sender, and a receiver identity for the receiver;
- and
- passing, by the executable instructions that execute on the hardware processor, the message over a pre-designated communication channel within the cloud for communication to the receiver when the message is successfully authenticated based on a channel identity assigned to the pre-designated communication channel, wherein only select messages are permitted to be processed over the pre-designated communication channel.
2 more elements
A system, comprising:
- a processor;
- a non-transitory computer-readable storage medium having executable instructions;
- the executable instructions execute on the processor from the non-transitory computer-readable storage medium to perform processing to:
- enforce identity-based authentication on intra-cloud messages and inter-cloud messages based on channel identities assigned to communication channels where the intra-cloud messages and inter-cloud messages are being passed and only permit select ones of the intra-cloud messages and the inter-cloud messages to be processed over the communication channels.
1 more element
Dependencies are inferred from the claim text.