US 11,637,830 B2 · Authentication, authorization and accounting in managed cloud computing services

Abstract

In an embodiment, a computer implemented method comprises receiving, at a first computing device associated with a managing entity, a request to perform an operation of a managed service; publishing to a first block of a distributed ledger system, by the first computing device associated with the managing entity, identification information of the managing entity; identifying, by a second computing device associated with the managed service, the identification information published to the first block of the distributed ledger system; publishing to a second block of the distributed ledger system, by the second computing device associated with the managed service, acknowledgement information comprising an indication that the identification information of the managing entity published to the first block was received and verified; publishing to a third block of the distributed ledger system, by the second computing device associated with the managed service, management request information comprising an operation request for the managing entity; identifying, by the first computing device associated with the managing entity, the management request information published to the third block of the distributed ledger system; publishing to a fourth block of the distributed ledger system, by the first computing device associated with the managing entity, management request acknowledgment information comprising an indication that the management request information of the third block was received; and in response to a performance of an operation included in the management request information published to the third block, publishing to a fifth block of the distributed ledger system, by the first computing device associated with the managing entity, management operation record information including a history of operations performed by the managing entity.

Claims17

Dependent claims

A method performed at least partly by a first node of a plurality of nodes of a distributed ledger system, the method comprising:

publishing, by the first node, one or more first blocks to a ledger associated with the plurality of nodes of the distributed ledger system, the one or more first blocks including:
identity data indicating an identity of a user of the first node;
an authorization request indicating a request to perform an operation associated with a managed service;
and
metadata comprising steps to perform to complete the operation;
identifying, by the first node, one or more second blocks published to the ledger by a second node of the plurality of nodes, the one or more second blocks including acknowledgment information indicating an acknowledgement that the identity of the user was received and verified and an acknowledgement that the authorization request was received;
in response to identifying the one or more second blocks including the acknowledgement information, performing the operation associated with the managed service;
and
publishing, by the first node, one or more third blocks to the ledger, the one or more third blocks indicating an operation history of the first node with respect to the managed service, the operation history including an indication of the operation.

6 more elements

A system comprising:

one or more processors;
and
one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
publishing, by a first node of a plurality of nodes of a distributed ledger system, one or more first blocks to a ledger associated with the plurality of nodes of the distributed ledger system, the one or more first blocks including:
identity data indicating an identity of a user of the first node;
an authorization request indicating a request to perform an operation associated with a managed service;
and
metadata comprising steps to perform to complete the operation;
and
identifying, by the first node, one or more second blocks published to the ledger by a second node of the plurality of nodes, the one or more second blocks including acknowledgment information indicating at least one of an acknowledgement of the identity of the user or an acknowledgement of the authorization request;
in response to identifying the one or more second blocks including the acknowledgement information, performing the operation associated with the managed service;
and
publishing, by the first node, one or more third blocks to the ledger, the one or more third blocks indicating an operation history of the first node with respect to the managed service, the operation history including an indication of the operation.

10 more elements

Dependencies are inferred from the claim text.

Authentication, authorization and accounting in managed cloud computing services

Life of this patent

Authentication, authorization and accounting in managed cloud computing services

Life of this patent

Abstract

Claims17