# US 10,771,469 B1 · Cloud service account management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,469 B1 - Document ID: US10771469B1 - Status: Granted - Kind: B1 - Application number: 15/419,874 - Filed: 2017-01-30 - Granted: 2020-09-08 - Earliest claimed: 2017-01-30 - Assignees: Skyhigh Networks, Inc. - Applicants: Skyhigh Networks, LLC - Inventors: Sekhar Sarukkai; Kaushik Narayan; Rajiv Gupta - Web page: https://patentgrep.com/patent/US10771469B1 ## CPC - H04L 63/102: {Entity profiles} - H04L 41/02: Standardisation; Integration - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A cloud service account management method identifies unauthorized or unmanaged accounts making administration console access or API access at a cloud computing service and triggers a work flow to place the accounts under management. In one embodiment, the user device is directed to a registration portal to provide credentials of the unauthorized account. Once the accounts are made managed, the cloud service account management method can monitor the activities of the accounts and can apply compliance or security policies to the managed accounts. ## Claims ### Claim 1 A method of implementing cloud service account management by an enterprise, the method comprising: identifying, using a hardware processor, traffic, wherein the traffic is associated with an access at a cloud computing service, the access made using an unmanaged account that is not managed by the enterprise; generating, using the hardware processor, a request to obtain credentials associated with the unmanaged account; receiving the credentials associated with the unmanaged account; in response to receiving the credentials associated with the unmanaged account, placing, using the hardware processor, the unmanaged account in a management mode so that the unmanaged account becomes a managed account; and monitoring, using the hardware processor, the managed account at the cloud computing service. ### Claim 2 (depends on 1) The method of claim 1, further comprising: storing, using the hardware processor, an account identifier associated with the managed account and the credentials in a managed account database. ### Claim 3 (depends on 2) The method of claim 2, wherein identifying, using the hardware processor, the traffic associated with the access at the cloud computing service using the unmanaged account comprises: comparing the account identifier to a list of managed accounts in the managed account database. ### Claim 4 (depends on 1) The method of claim 1, wherein identifying, using the hardware processor, the traffic associated with the access at the cloud computing service using the unmanaged account comprises: identifying, using the hardware processor, an administration console access at the cloud computing service using the unmanaged account. ### Claim 5 (depends on 1) The method of claim 1, wherein identifying, using the hardware processor, the traffic associated with the access at the cloud computing service using the unmanaged account comprises: identifying, using the hardware processor, an application program interface (API) access at the cloud computing service using the unmanaged account. ### Claim 6 (depends on 1) The method of claim 1, wherein generating, using the hardware processor, the request to obtain credentials associated with the unmanaged account comprises: generating, using the hardware processor, a request to obtain a security key associated with the unmanaged account. ### Claim 7 (depends on 1) The method of claim 1, wherein generating, using the hardware processor, the request to obtain credentials associated with the unmanaged account comprises: generating, using the hardware processor, a request to obtain an access token associated with the unmanaged account. ### Claim 8 (depends on 1) The method of claim 1, wherein generating, using the hardware processor, the request to obtain credentials associated with the unmanaged account comprises: providing, using the hardware processor, a registration portal requesting the credentials associated with the unmanaged account; and receiving the credentials entered onto the registration portal. ### Claim 9 (depends on 1) The method of claim 1, wherein monitoring, using the hardware processor, the managed account at the cloud computing service comprises: using the credentials of the managed account to access the managed account at the cloud computing service; and performing an audit of the managed account at the cloud computing service. ### Claim 10 (depends on 9) The method of claim 9, wherein performing the audit of the managed account at the cloud computing service comprises: performing a configuration audit to assess the configuration of application instances created by the managed account at the cloud computing service to determine compliance with security policies of the enterprise. ### Claim 11 (depends on 9) The method of claim 9, wherein performing the audit of the managed account at the cloud computing service comprises: performing a user activity audit at the cloud computing service to assess user activities associated with the managed account to determine compliance with security policies of the enterprise. ### Claim 12 (depends on 1) The method of claim 1, further comprising: in response to the credentials associated with the unmanaged account not being received, generating an alert to the enterprise concerning the access by the unmanaged account. ### Claim 13 A system for implementing cloud service account management by an enterprise, the system comprising: a hardware processor; and a memory coupled with the hardware processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to: identify traffic, wherein the traffic is associated with an access at a cloud computing service, the access made using an unmanaged account that is not managed by the enterprise; generate a request to obtain credentials associated with the unmanaged account; receive the credentials associated with the unmanaged account; in response to receiving the credentials associated with the unmanaged account, place the unmanaged account in a management mode so that the unmanaged account becomes a managed account; and monitor the managed account at the cloud computing service. ### Claim 14 (depends on 13) The system of claim 13, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: store an account identifier associated with the managed account and the credentials in a managed account database. ### Claim 15 (depends on 14) The system of claim 14, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: compare the account identifier to a list of managed accounts in the managed account database. ### Claim 16 (depends on 13) The system of claim 13, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: identify an administration console access or an application program interface (API) access at the cloud computing service using the unmanaged account. ### Claim 17 (depends on 13) The system of claim 13, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: generate a request to obtain a security key or an access token associated with the unmanaged account. ### Claim 18 (depends on 13) The system of claim 13, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: provide a registration portal requesting the credentials associated with the unmanaged account; and receiving the credentials entered onto the registration portal. ### Claim 19 (depends on 13) The system of claim 13, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: monitor the managed account at the cloud computing service by using the credentials to access the account at the cloud computing service and performing an audit at the cloud computing service. ### Claim 20 (depends on 19) The system of claim 19, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: perform a configuration audit at the cloud computing service to assess the configuration of application instances created by the managed account. ### Claim 21 (depends on 19) The system of claim 19, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: perform a user activity audit at the cloud computing service to determine user activities associated with the managed account are in compliance with security policies of the enterprise. ### Claim 22 (depends on 13) The system of claim 13, wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to: in response to the credentials associated with the unmanaged account not being received, generating an alert to the enterprise concerning the administration console access by the unmanaged account.