US 8,429,757 B1 · Controlling use of computing-related resources by multiple independent parties

Abstract

Techniques are described for managing access to computing-related resources that, for example, may enable multiple distinct parties to independently control access to the resources (e.g., such that a request to access a resource succeeds only if all of multiple associated parties approve that access). For example, an executing software application may, on behalf of an end user, make use of computing-related resources of one or more types that are provided by one or more remote third-party network services (e.g., data storage services provided by an online storage service) —in such a situation, both the developer user who created the software application and the end user may be allowed to independently specify access rights for one or more particular such computing-related resources (e.g., stored data files), such that neither the end user nor the software application developer user may later access those resources without the approval of the other party.

Claims26

Dependent claims

A non-transitory computer-readable medium whose contents configure a computing device to manage access to computing-related resources, by performing a method comprising:

receiving indications of multiple access policies specific to one or more computing-related resources that are provided by a resource provider service, the multiple access policies being independently specified by multiple distinct parties to control access to the one or more computing-related resources;
receiving a request for at least one of the multiple parties to obtain access from the resource provider service to at least one of the one or more computing-related resources;
determining to authorize the access to the at least one computing-related resource based at least in part on the access independently satisfying each of the multiple access policies;
and
providing an indication that the access to the at least one computing-related resource is authorized, to enable the at least one party to obtain access to the at least one computing-related resource from the resource provider service.

2 more elements

A computing system configured to manage access to computing-related resources, comprising:

one or more processors;
one or more memories;
and
a resource access manager system that is configured to, when executed by at least one of the one or more processors, manage access to computing-related resources by:
receiving an indication of a first access policy specified for a client to control access to one or more computing-related resources used by the client on behalf of a user;
receiving an indication of a second access policy specified for the user to control access to the one or more computing-related resources, the second access policy being independent of the first access policy;
receiving a request from the client to obtain access to at least one of the one or more computing-related resources on behalf of the user, the received request including at least one of the first and second access policies;
determining to grant the access to the at least one computing-related resource if that access independently satisfies multiple access policies that include at least the first and second access policies;
and
if it is determined to grant the access, providing an indication that the access to the at least one computing-related resource is granted, to enable the client to obtain the requested access on behalf of the user.

7 more elements

A computer-implemented method for managing access to computing-related resources, the method comprising:

receiving, by one or more configured computing systems, indications of multiple access policies specified for one or more computing-related resources that are provided by a resource provider service, the multiple access policies being independently specified by multiple distinct parties to control access to the one or more computing-related resources;
receiving, by the one or more configured computing systems, a request for at least one of the multiple parties to obtain access from the resource provider service to at least one of the one or more computing-related resources, the receiving of the request occurring after the receiving of the indications of the multiple access policies;
determining, by the one or more configured computing systems, that the access to the at least one computing-related resource is authorized based at least in part on the access satisfying all the multiple access policies;
and
initiating, by the one or more configured computing systems, the access to the at least one computing-related resource after the determining.

2 more elements

Dependencies are inferred from the claim text.

Controlling use of computing-related resources by multiple independent parties

Life of this patent

Controlling use of computing-related resources by multiple independent parties

Life of this patent

Abstract

Claims26