Intermediate os user access to cloud customer resources
AssigneeOracle International Corporation
InventorsJoydip Kundu, Ritesh Majumdar, Krishna Chander
Life of this patent
Estimating the term…
Abstract
Disclosed is an approach to use an intermediate OS (operating system) user to prevent lateral movement of cloud service operators among databases that share a database binary. Some approaches use an on-demand secure communications channel to access a cloud-related resource that is associated with a customer. This creates on a temporary basis the infrastructure (including the intermediate OS user) that is needed to allow the operational access to the customer system, which can then be destroyed once it is no longer needed.
Claims21
A method, comprising:
- receiving a request to establish a connection for an operator to access a computing system to access a cloud computing database resource that is associated with one or more cloud users;
- creating an OS proxy user to access the cloud computing system by the operator;
- creating an intermediate OS proxy user that is accessed by the OS proxy user, wherein the intermediate OS proxy user has limited rights;
- and
- using the intermediate OS proxy user to log in as a limited-rights database user to access the cloud computing database resource.
A computer program product embodied on a computer readable medium, the computer readable medium having stored thereon a sequence of instructions which, when executed by a processor, executes a method comprising:
- receiving a request to establish a connection for an operator to access a computing system to access a cloud computing database resource that is associated with one or more cloud users;
- creating an OS proxy user to access the cloud computing system by the operator;
- creating an intermediate OS proxy user that is access by the OS proxy user, wherein the intermediate OS proxy user has limited rights;
- and
- using the intermediate OS proxy user to log in as a limited-rights database user to access the cloud computing database resource.
A system, comprising:
- a processor;
- a memory for holding programmable code;
- and
- wherein the programmable code includes instructions executable by the processor for receiving a request to establish a connection for an operator to access a computing system to access a cloud computing database resource that is associated with one or more cloud users;
- creating an OS proxy user to access the cloud computing system by the operator;
- creating an intermediate OS proxy user that is access by the OS proxy user, wherein the intermediate OS proxy user has limited rights;
- and using the intermediate OS proxy user to log in as a limited-rights database user to access the cloud computing database resource.
Dependencies are inferred from the claim text.