# US 2020/0396299 A1 · Methods and apparatus to manage cloud provider sessions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2020/0396299 A1
- Document ID: US20200396299A1
- Status: Published application
- Kind: A1
- Application number: 16/443,799
- Filed: 2019-06-17
- Published: 2020-12-17
- Earliest claimed: 2019-06-17
- Assignees: VMware, Inc.
- Applicants: VMware Inc.
- Inventors: Georgi Mitsov; Evgeny Aronov; Ivo Petkov; Alexander Dimitrov; Zahari Ivanov; Ivan Strelkov
- Web page: https://patentgrep.com/patent/US20200396299A1

## CPC

- G06F 9/5072: {Grid computing}
- H04L 67/146: Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
- G06F 9/4843: {by program, e.g. task dispatcher, supervisor, operating system}
- H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords}
- H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46)
- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 67/145: avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session
- G06F 2209/5016: Session
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- Y02D 10/00: Energy efficient computing, e.g. low power processors, power management or thermal management
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- Y02D: CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE

## Abstract

Methods, apparatus, systems and articles of manufacture are disclosed to manage cloud provider sessions. The examples disclosed herein provide a system to manage cloud provider sessions, the system comprising: a session manger to: in response to detecting a request to establish a session with a cloud provider, establish the session using credentials associated with the cloud provider; record a lifespan of a session token associated with the session; and when the lifespan meets a threshold value, use the credentials to obtain a new session token to refresh the session; and a cloud provider adapter to, in response to detecting an action selection associated with a device, call the cloud provider to execute the action.

## Claims

### Claim 1

A system to manage cloud provider sessions, the system comprising:
a session manger to:
in response to detecting a request to establish a session with a cloud provider, establish the session using credentials associated with the cloud provider;
record a lifespan of a session token associated with the session; and
when the lifespan meets a threshold value, use the credentials to obtain a new session token to refresh the session; and
a cloud provider adapter to, in response to detecting an action selection associated with a device, call the cloud provider to execute the action.

### Claim 2 (depends on 1)

The system of claim 1, wherein the session manager is to:
after obtaining the credentials, encrypt the credentials as encrypted credentials; and
when the lifespan meets the threshold value, decrypt the encrypted credentials to obtain the new session token.

### Claim 3 (depends on 1)

The system of claim 1, wherein the device is a first device and the action selection is a first action selection, the system further including a second device and a third device, the cloud provider adapter configured to monitor each of the first device, the second device, and the third device for a first action selection, a second action selection, and a third action selection, respectively.

### Claim 4 (depends on 1)

The system of claim 1, wherein when session has been inactive for a threshold amount of time, the session manager deletes the session token.

### Claim 5 (depends on 1)

The system of claim 1, further including:
a task manager to:
determine a duration associated with the selected action;
when the duration is unspecified, transmit a user token associated with the device to a token manager; and
the token manager to:
generate a handle corresponding to the user token;
transmit the handle to the task manager;
in response to detecting a request for the user token from a second device, determine whether the second device is the task manager;
in response to determining that the second device is the task manager, transmit the user token to the task manager; and
the task manager to, when the selected action requires user authentication, transmit the handle to the token manager to obtain the user token.

### Claim 6 (depends on 5)

The system of claim 5, wherein the token manager is to:
after obtaining the user token, encrypt the user token as an encrypted user token; and
in response to determining that the second device is the task manager, decrypt the encrypted user token to obtain the user token.

### Claim 7 (depends on 6)

The system of claim 6, wherein the token manager is to, in response to an acknowledgement from the task manager, delete the user token.

### Claim 8

A non-transitory computer readable medium comprising instructions which, when executed, cause a processor to at least:
in response to detecting a request to establish a session with a cloud provider, establish the session using credentials associated with the cloud provider;
record a lifespan of a session token associated with the session; and
when the lifespan meets a threshold value, use the credentials to obtain a new session token to refresh the session; and
in response to detecting an action selection associated with a device, call the cloud provider to execute the action.

### Claim 9 (depends on 8)

The non-transitory computer readable medium of claim 8, wherein the instructions, when executed, cause the processor to:
after obtaining the credentials, encrypt the credentials as encrypted credentials; and
when the lifespan meets the threshold value, decrypt the encrypted credentials to obtain the new session token.

### Claim 10 (depends on 8)

The non-transitory computer readable medium of claim 8, wherein the device is a first device, and the action selection is a first action selection; and wherein the instructions, when executed, cause the processor to monitor each of the first device, a second device, and a third device for a first action selection, a second action selection, and a third action selection, respectively.

### Claim 11 (depends on 8)

The non-transitory computer readable medium of claim 8, wherein the instructions, when executed, cause the processor to, when session has been inactive for a threshold amount of time, delete the session token.

### Claim 12 (depends on 8)

The non-transitory computer readable medium of claim 8, wherein the instructions, when executed, cause the processor to:
when a duration associated with the selected action from the device is unspecified:
generate a handle corresponding to a user token associated with the device;
in response to detecting a request for the user token from a second device, determine whether the second device is an authorized device permitted to request the user token on behalf of the device; and
in response to determining that the second device is the authorized device, transmit the user token to the authorized device.

### Claim 13 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions, when executed, cause the processor to:
after obtaining the user token, encrypt the user token as an encrypted user token; and
in response to determining that the second device is the authorized device, decrypt the encrypted user token to obtain the user token.

### Claim 14 (depends on 12)

The non-transitory computer readable medium of claim 12, wherein the instructions, when executed, cause the processor to, in response to an acknowledgement from the authorized device, delete the user token.

### Claim 15

A method for managing cloud provider session, the method comprising:
in response to detecting a request to establish a session with a cloud provider, establishing the session using credentials associated with the cloud provider;
recording a lifespan of a session token associated with the session; and
when the lifespan meets a threshold value, using the credentials to obtain a new session token to refresh the session; and
in response to detecting an action selection associated a device, calling the cloud provider to execute the action.

### Claim 16 (depends on 15)

The method of claim 15, further including:
after obtaining the credentials, encrypting credentials as encrypted credentials; and
when the lifespan meets the threshold value, decrypting the encrypted credentials to obtain the new session token.

### Claim 17 (depends on 15)

The method of claim 15, wherein the device is a first device, and the action selection is a first action selection; and the method further including monitoring each of the first device, a second device, and a third device for the first action selection, a second action selection, and a third action selection, respectively.

### Claim 18 (depends on 15)

The method of claim 15, further including, when session has been inactive for a threshold amount of time, deleting the session token.

### Claim 19 (depends on 15)

The method of claim 15, further including:
when a duration associated with the selected action from the device is unspecified:
generating a handle corresponding to a user token associated with the device;
in response to detecting a request for the user token from a second device, determining whether the second device is an authorized device permitted to request the user token on behalf of the device; and
in response to determining that the second device is the authorized device, transmitting the user token to the authorized device.

### Claim 20 (depends on 19)

The method of claim 19, further including, in response to an acknowledgement from the authorized device, deleting the user token.