Secure transfer of workloads across security regions
AssigneeOracle International Corporation
InventorsDanne Lauren Stayskal, Robert Thomas Schumaker
Life of this patent
Estimating the term…
Abstract
A framework for transferring workloads between security regions of an infrastructure service. For example, techniques for transferring workloads between security regions across a private network based on signatures associated with the security regions.
Claims20
A method for receiving a workload by a first security region of a cloud service provider (CSP) from a second security region of the cloud service provider, comprising:
- receiving, via a device, an indication of signatures for verification of authorization of a transfer, the indication of signatures indicating signatures, the signatures comprising at least one signature associated with the first security region and at least one signature associated with the second security region;
- receiving, via the device, an encrypted workload from the second security region;
- and
- comparing one or more signatures of the encrypted workload with the signatures from the indication of signatures to determine whether transmission of the encrypted workload is authorized.
One or more non-transitory computer-readable media having instructions stored thereon, wherein the instructions, when executed by a device of a network, cause the device to:
- receive an indication of signatures for verification of authorization of a transfer, the indication of signatures indicating signatures, the signatures comprising at least one signature associated with a first security region of a cloud service provider (CSP) and at least one signature associated with a second security region of the cloud service provider;
- receive an encrypted workload from the second security region;
- and
- compare one or more signatures of the encrypted workload with the signatures from the indication of signatures to determine whether transmission of the encrypted workload is authorized.
A private network, comprising:
- a private network connection connected between a first security region of a cloud service provider (CSP) and a second security region of the cloud service provider;
- and
- a device coupled to the private network connection and located at the first security region, the device to:
- receive an indication of signatures for verification of authorization of a transfer, the indication of signatures indicating signatures, the signatures comprising at least one signature associated with the first security region and at least one signature associated with the second security region;
- receive an encrypted workload from the second security region;
- and
- compare one or more signatures of the encrypted workload with the signatures from the indication of signatures to determine whether transmission of the encrypted workload is authorized.
Dependencies are inferred from the claim text.