US 2024/0406213 A1 · SECURE CROSS-TENANT ACCESS

Abstract

In a cloud computing environment, a cross-tenant access security measure includes monitoring conditional access policies for changes or additions that hamper or threaten to hamper an authorized access from an assistant tenant user to a focus tenant. In some cases, cross-tenant access security includes tracking a role assignment list to detect rogue roles, or to detect hampering role changes such as role deletions, or both. In some cases, focus tenant events and assistant tenant events are correlated in an audit. In some cases, the authorized access is a zero standing time bound access. In some cases, the authorized access is constrained to an IP address range, or constrained to login from a managed device, or both. In short, security measures are described that mitigate accidental or surreptitious role or policy changes that would shut down or hinder authorized cross-tenant access.

Claims20

Dependent claims

A cybersecurity method for secure cross-tenant access, the method comprising:

monitoring a non-hampering conditional access policy of a focus tenant, the monitoring comprising checking for a hampering change in the non-hampering conditional access policy, the monitoring also comprising checking for an addition of a hampering conditional access policy, wherein the hampering change is a change which hampers an authorized access to the focus tenant from an assistant tenant, the hampering conditional access policy is a conditional access policy which hampers the authorized access to the focus tenant from the assistant tenant;
tracking a cross tenant role assignment of the focus tenant, the tracking comprising inspecting the cross tenant role assignment for a change in the cross tenant role assignment;
detecting at least one of:
the hampering change in the non-hampering conditional access policy, the addition of the hampering conditional access policy, or the change in the cross tenant role assignment;
and
modifying at least one of the following in response to a result of the detecting:
the non-hampering conditional access policy, the hampering conditional access policy, the cross tenant role assignment, or a scope of the authorized access to the focus tenant from the assistant tenant.

4 more elements

A computing system configured for secure cross-tenant access, the system comprising:

a digital memory;
a processor set comprising at least one processor, the processor set in operable communication with the digital memory, the processor set configured to execute a secure cross-tenant access method which comprises at least one of:
detecting a conditional access policy hampering change and alerting in response to said conditional access policy hampering change detection,
detecting a hampering conditional access policy addition and alerting in response to said hampering conditional access policy addition detection, or
detecting a cross tenant role assignment hampering change and alerting in response to said cross tenant role assignment hampering change detection,
wherein the conditional access policy hampering change is a change which hampers an authorized access to a focus tenant from an assistant tenant,
the hampering conditional access policy addition is an addition of a conditional access policy which hampers the authorized access to the focus tenant from the assistant tenant, and
the cross tenant role assignment hampering change is a change which hampers the authorized access to the focus tenant from the assistant tenant.

5 more elements

Dependencies are inferred from the claim text.

Secure cross-tenant access

Life of this patent

Secure cross-tenant access

Life of this patent

Abstract

Claims20