Methods to ensure trust validation and integrity of workflow execution
AssigneeDell Products L.P.
InventorsAmeer M. Jabbar, Yidong Wang, Qi Jin, Ching-Yun Chao
Life of this patent
Estimating the term…
Abstract
One example method includes receiving, at a multi cloud service orchestration platform from a client, a request for performance of a workflow, authenticating and authorizing the client, invoking orchestration of the workflow, invoking the workflow, validating a workflow definition associated with the workflow, and on successful validation, initializing execution of the workflow, and executing, at an activity container, the workflow. The method may be performed in the multi cloud service orchestration platform.
Claims12
A method, comprising:
- receiving, at a multi cloud service orchestration platform from a client, a request for performance of a workflow;
- authenticating and authorizing the client;
- invoking orchestration of the workflow;
- invoking the workflow;
- digitally signing, by a trusted certificate authority, a workflow definition and an activity definition associated with the workflow, wherein the workflow corresponds to the workflow definition included in a digitally signed workflow package that comprises a workflow implementation, an activity definition, and an activity implementation;
- digitally signing, by the multi cloud service orchestration platform, workflow parameters associated with the workflow;
- validating the workflow definition and the activity definition associated with the workflow, and on successful validation, initializing execution of the workflow;
- and
- executing, at an activity container, the workflow,
- wherein the digitally signed workflow package is stored prior to execution of the workflow in a workflow registry,
- wherein the activity container executes only workflows that have been digitally signed and validated, and
- wherein security context data and the workflow parameters are immutable by the activity container while the workflow is executing.
A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
- receiving, at a multi cloud service orchestration platform from a client, a request for performance of a workflow;
- authenticating and authorizing the client;
- invoking orchestration of the workflow;
- invoking the workflow;
- digitally signing, by a trusted certificate authority, a workflow definition and an activity definition associated with the workflow, wherein the workflow corresponds to the workflow definition included in a digitally signed workflow package that comprises a workflow implementation, an activity definition, and an activity implementation;
- digitally signing, by the multi cloud service orchestration platform, workflow parameters associated with the workflow;
- validating the workflow definition and the activity definition associated with the workflow, and on successful validation, initializing execution of the workflow;
- and
- executing, at an activity container, the workflow,
- wherein the digitally signed workflow package is stored prior to execution of the workflow in a workflow registry,
- wherein the activity container executes only workflows that have been digitally signed and validated, and
- wherein security context data and the workflow parameters are immutable by the activity container while the workflow is executing.
Dependencies are inferred from the claim text.