Loading patent…
AssigneeNutanix, Inc.
InventorsVinod GUPTA, Ranjan PARTHASARATHY
Estimating the term…
Systems and methods for computer security in computer clusters. Techniques provide secure user access to applications that run in shared resource computing environments. A method embodiment commences upon identifying an application digital certificate corresponding to a subject application. The subject application is stored for access by a reverse proxy authorization service that also runs in the shared computing environment. Individual user processes are uniquely identified by corresponding user credentials. The reverse proxy authorization service processes a request to access the subject application, whereupon a generated subject application instance specific to the requestor is installed. Installation includes authentication using the application digital certificate for the subject application and authorization using the requestor's credentials. A second request from a second user to access the same subject application uses the same application digital certificate combined with the second requestor's credentials. The reverse proxy authorization service generates scope-specific access tokens for each generated instance.
A method, comprising:
9-14. (canceled)
A non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by a processor, causes the processor to perform a set of acts, the set of acts comprising:
A system comprising:
A non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by a processor, causes the processor to perform a set of acts, the set of acts comprising:
A non-transitory computer readable medium having stored thereon a sequence of instructions which, when stored in memory and executed by a processor, causes the processor to perform a set of acts, the set of acts comprising:
The non-transitory computer readable medium of claim 28, the sequence of instructions, when stored in the memory and executed by the processor, further causing the processor to perform the set of acts that further comprises generating, by a controller virtual machine, the digital certificate that is self-signed.
The non-transitory computer readable medium of claim 28, the sequence of instructions, when stored in the memory and executed by the processor, further causing the processor to perform the set of acts that further comprises forming a secure communication link between a computing context of a tenant and a corresponding instance of the respective instances by using at least the digital certificate, wherein the tenant comprises a user of the multiple users.
Dependencies are inferred from the claim text.