US 2020/0007455 A1Published application

Access management tags

AssigneeAmazon Technologies, Inc.

InventorsJasmeet Chhabra, Jing Zhuang, Uzma Arjuman, Ajith Harshana Ranabahu, Travis William Hickey

Life of this patent

Estimating the term…

Loading patent…

Abstract

Tags may be used in decisions by an access management service regarding access of computing resources (“resources”) by principals (e.g., users, roles, etc.). The tags may also be used to determine cost information, for grouping resources and/or principals, and for other reasons. The tags may be assigned to principals, to resources, or both. The resource may be a virtual or physical type of computing resource. Tags may be metadata, which may include a key-value pair. Tags may include email addresses, cost centers, project identifiers, location, team name, etc. The value may be a number, letters, or a combination of both. In some embodiments, the values may be limited to certain numbers or bytes, and some numbers and/or letter combinations may be excluded for special use.

Claims20

Dependent claims

An access management system that deploys an access management service, the access manage system comprising:

one or more processors;
memory;
and
one or more computer-executable instructions stored in the memory and executable by the one or more processors to perform operations comprising:
creating a user profile associated with a user, the user profile storing first information associated with the user;
associating a user tag with the user profile, the user tag being a first key-value pair that comprises a first set of characters and the user tag representing first access privileges of the user with respect to resources;
creating a resource profile associated with a resource, the resource profile storing second information associated with the resource;
associating a resource tag with the resource, the resource tag being a second key-value pair that comprises a second set of characters and the resource tag representing second access privileges of users with respect to the resource;
receiving, from a user device of the user, a request to access information from the resource;
comparing the user tag with the resource tag;
determining, based on a comparison of the user tag and the resource tag, that at least a first portion of the user tag matches at least a second portion of the resource tag;
and
fulfilling the request by allowing the user to access the information from the resource.

10 more elements

A system comprising:

one or more processors;
memory;
and
one or more computer-executable instructions stored in the memory and executable by the one or more processors to perform operations comprising:
associating a principal tag with a principal profile associated with a principal, the principal being a user or a role;
associating a resource tag with a resource profile associated with a resource wherein principal tags are used to group principals, resource tags are used to group resources, or the resource tags are used to determine cost information associated with the resources;
receiving, from a device of the principal, a request to at least one of access, modify, or delete information associated with the resource;
and
determining whether the principal is authorized to at least one of access, modify, or delete the information associated with the resource by identifying the principal tag or comparing the principal tag and the resource tag.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/183,484Filed 7 Nov 2018
Priority: 2 Jul 2018
Published: 2 Jan 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
H04L 41/0893
Configuration management of networks or network elements: assignment of logical groups to network elements
G06F 2221/2141
Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for…:…
H04L 41/0894
Configuration management of networks or network elements: policy-based network configuration management