Multi-cloud framework for authentication of data requests

An apparatus comprising:

• at least one processing device, associated with a first authentication entity of a first cloud environment, comprising a processor coupled to a memory;
• the at least one processing device being configured to implement the following steps:
• obtaining, by the at least one processing device associated with the first authentication entity of the first cloud environment, from a service on the first cloud environment, a request for data stored by a second cloud environment;
• determining, by the at least one processing device associated with the first authentication entity of the first cloud environment, a first signature for the service;
• providing, by the at least one processing device associated with the first authentication entity, the first signature for the service to a second authentication entity of the second cloud environment, wherein, prior to obtaining the request for the data stored by the second cloud environment, the at least one processing device associated with the first authentication entity (i) generates a second signature for the service and (ii) interacts with the second authentication entity of the second cloud environment to register the second signature for the service with the second authentication entity of the second cloud environment, and wherein, in response to receiving the first signature for the service, the second authentication entity of the second cloud environment verifies the first signature for the service by comparing the first signature for the service with the second signature for the service, wherein one or more of the first signature and the second signature is based at least in part on at least one of:
• a container identifier, a Basic Input/Output System identifier, a virtual private network identifier, a Media Access Control address of one or more hardware elements, a processing unit identifier, a graphics processing unit identifier, a memory part number, a display identifier, a domain name server identifier, a dynamic host configuration protocol server identifier, and an Internet Protocol address;
• requesting, by the at least one processing device associated with the first authentication entity, the data from the second authentication entity of the second cloud environment in response to the first signature being verified by the second authentication entity of the second cloud environment;
• and
• providing the requested data to the service.

A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device, associated with a first authentication entity of a first cloud environment, causes the at least one processing device to perform the following steps:

• obtaining, by the at least one processing device associated with the first authentication entity of the first cloud environment, from a service on the first cloud environment, a request for data stored by a second cloud environment;
• determining, by the at least one processing device associated with the first authentication entity of the first cloud environment, a first signature for the service;
• providing, by the at least one processing device associated with the first authentication entity, the first signature for the service to a second authentication entity of the second cloud environment, wherein, prior to obtaining the request for the data stored by the second cloud environment, the at least one processing device associated with the first authentication entity (i) generates a second signature for the service and (ii) interacts with the second authentication entity of the second cloud environment to register the second signature for the service with the second authentication entity of the second cloud environment, and wherein, in response to receiving the first signature for the service, the second authentication entity of the second cloud environment verifies the first signature for the service by comparing the first signature for the service with the second signature for the service, wherein one or more of the first signature and the second signature is based at least in part on at least one of:
• a container identifier, a Basic Input/Output System identifier, a virtual private network identifier, a Media Access Control address of one or more hardware elements, a processing unit identifier, a graphics processing unit identifier, a memory part number, a display identifier, a domain name server identifier, a dynamic host configuration protocol server identifier, and an Internet Protocol address;
• requesting, by the at least one processing device associated with the first authentication entity, the data from the second authentication entity of the second cloud environment in response to the first signature being verified by the second authentication entity of the second cloud environment;
• and
• providing the requested data to the service.