US 11,895,102 B2 · Identity management

Abstract

An identity authentication management (IAM) service is established as a master over a master identity database of the centralized identity authentication management service. When adding an additional node to the computing infrastructure, a non-master copy of the master identity database is distributed to the additional node. Ongoing coordination between the master identity database and the non-master copy is established so as to synchronize differences between the master identity database and the non-master copy of the identity database. The additional node hosts a fully-functional authentication management service using the non-master copy of the master identity database and is able to respond to READ requests for data by accessing the non-master copy—without interaction with the centralized identity authentication management service.

Claims24

Dependent claims

A non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by a processor cause the processor to perform acts for identity management, the acts comprising:

determining a centralized identity authentication management service for a master identity database of the centralized identity authentication management service on a master node;
establishing a non-master copy of the master identity database that is distributed to a non-master node other than the master node;
establishing ongoing coordination between the master identity database and the non-master copy to synchronize differences between the master identity database and the non-master copy, wherein the differences correspond to at least one data change that is made locally to the non-master copy and is propagated to the master identity database;
and
replicating, using a replication facility, at least a policy between a cloud infrastructure node and the non-master node that hosts the non-master copy in a first availability zone, wherein the master node is in a second availability zone.

2 more elements

A system for identity management, the system comprising:

a storage medium having stored thereon a sequence of instructions;
and
a processor that executes the sequence of instructions to cause the processor to perform acts comprising,
determining a centralized identity authentication management service for a master identity database of the centralized identity authentication management service on a master node;
establishing a non-master copy of the master identity database that is distributed to a non-master node other than the master node;
establishing ongoing coordination between the master identity database and the non-master copy to synchronize differences between the master identity database and the non-master copy, wherein the differences correspond to at least one data change that is made locally to the non-master copy and is propagated to the master identity database;
and
replicating, using a replication facility, at least a policy between a cloud infrastructure node and the non-master node that hosts the non-master copy in a first availability zone, wherein the master node is in a second availability zone.

5 more elements

Dependencies are inferred from the claim text.

Identity management

Life of this patent

Identity management

Life of this patent

Abstract

Claims24