# US 2023/0065765 A1 · Dynamic identity attribution > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0065765 A1 - Document ID: US20230065765A1 - Status: Published application - Kind: A1 - Application number: 17/893,124 - Filed: 2022-08-22 - Published: 2023-03-02 - Earliest claimed: 2021-08-24 - Applicants: Cyral Inc. - Inventors: Srinivas Nageswarrao Vadlamani; Pramod Chandraiah; Rafael Martins de Souza; Hugo Araújo de Sousa - Web page: https://patentgrep.com/patent/US20230065765A1 ## CPC - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G06F 21/33: using certificates - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method is described. The method includes receiving, from a service application having a protocol, a communication for a data source. The communication indicates a user of the service application and is consistent with the protocol, Thus, the user corresponds to the communication. The method also includes utilizing signatures that are dynamically updated from a control plane to determine the service application based on the communication and a corresponding signature. The user is identified based on the communication, the service application, and the protocol. Each of the signatures includes executable code for identifying features of the protocol of a corresponding service application and obtaining an identity of the user from a corresponding communication. ## Claims ### Claim 1 A method, comprising: receiving, from a service application having a protocol, a communication for a data source, the communication indicating a user of the service application and being consistent with the protocol, the user corresponding to the communication; utilizing a plurality of signatures dynamically updated from a control plane to determine the service application based on the communication and a corresponding signature of the plurality of signatures; and identifying the user based on the communication, the service application, and the protocol; wherein each of the plurality of signatures includes executable code for identifying features of the protocol of a corresponding service application and obtaining an identity of the user from a corresponding communication. ### Claim 2 (depends on 1) The method of claim 1, wherein the receiving further includes: receiving, at a sidecar, the communication, the sidecar including a dispatcher and at least one service, the dispatcher receiving the communication and being data agnostic, the dispatcher passing the communication to the at least one service for the utilizing and the identifying. ### Claim 3 (depends on 2) The method of claim 2, wherein the dispatcher is an OSI Layer 4 data agnostic dispatcher and wherein the at least one service includes at least one OSI Layer 7 service. ### Claim 4 (depends on 3) The method of claim 3, wherein the plurality of signatures are dynamically updated from the control plane at the at least one service via a push from the control plane. ### Claim 5 (depends on 1) The method of claim 1, wherein the utilizing further includes: analyzing the communication to identify a command and remaining information in the communication; comparing at least one of the command and the remaining information to at least a portion of the plurality of signatures; and determining the service application from a match between the corresponding signature and the at least one of the command and the remaining information. ### Claim 6 (depends on 1) The method of claim 1, wherein each of the plurality of signatures include at least one of connection level information, transaction level information, and request level information for a corresponding service application. ### Claim 7 A system, comprising: a processor configured to: receive, from a service application having a protocol, a communication for a data source, the communication indicating a user of the service application and being consistent with the protocol, the user corresponding to the communication; utilize a plurality of signatures dynamically updated from a control plane to is determine the service application based on the communication and a corresponding signature of the plurality of signatures; identify the user based on the communication, the service application, and the protocol; and a memory coupled to the processor and configured to provide the processor with instructions; wherein each of the plurality of signatures includes executable code for identifying features of the protocol of a corresponding service application and obtaining an identity of the user from a corresponding communication. ### Claim 8 (depends on 7) The system of claim 7, wherein to receive, the processor is further configured to: receive, at a sidecar, the communication, the sidecar including a dispatcher and at least one service, the dispatcher receiving the communication and being data agnostic, the dispatcher passing the communication to the at least one service to utilize the plurality of signatures and identify the user. ### Claim 9 (depends on 8) The system of claim 8, wherein the dispatcher is an OSI Layer 4 data agnostic dispatcher and wherein the at least one service includes at least one OSI Layer 7 service. ### Claim 10 (depends on 9) The system of claim 9, wherein the plurality of signatures are dynamically updated from the control plane at the at least one service. ### Claim 11 (depends on 7) The system of claim 7, wherein to utilize the plurality of signatures, the processor is further configured to: analyze the communication to identify a command and remaining information in the communication; compare at least one of the command and the remaining information to at least a portion of the plurality of signatures; and determine the service application from a match between the corresponding signature and the at least one of the command and the remaining information. ### Claim 12 (depends on 7) The system of claim 7, wherein each of the plurality of signatures include at least one of connection level information, transaction level information, and request level information for a corresponding service application. ### Claim 13 A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for: receiving, from a service application having a protocol, a communication for a data source, the communication indicating a user of the service application and being consistent with the protocol, the user corresponding to the communication; utilizing a plurality of signatures dynamically updated from a control plane to determine the service application based on the communication and a corresponding signature of the plurality of signatures; and identifying the user based on the communication, the service application, and the protocol; wherein each of the plurality of signatures includes executable code for identifying features of the protocol of a corresponding service application and obtaining an identity of the user from a corresponding communication. ### Claim 14 (depends on 13) The computer program product of claim 13, wherein the computer instructions for receiving further include computer instructions for: receiving, at a sidecar, the communication, the sidecar including a dispatcher and at least one service, the dispatcher receiving the communication and being data agnostic, the dispatcher passing the communication to at least one service for the computer instructions for the utilizing and the identifying. ### Claim 15 (depends on 14) The computer program product of claim 14, wherein the dispatcher is an OSI Layer 4 data agnostic dispatcher and wherein the at least one service includes at least one OSI Layer 7 service. ### Claim 16 (depends on 15) The computer program product of claim 15, wherein the plurality of signatures are dynamically updated from the control plane at the at least one service. ### Claim 17 (depends on 13) The computer program product of claim 13, wherein the computer instructions for utilizing further include computer instructions for: analyzing the communication to identify a command and remaining information in the communication; comparing at least one of the command and the remaining information to at least a portion of the plurality of signatures; and determining the service application from a match between the corresponding signature and the at least one of the command and the remaining information. ### Claim 18 (depends on 13) The computer program product of claim 13, wherein each of the plurality of signatures include at least one of connection level information, transaction level information, and request level information for a corresponding service application.