Back to results
US 9,438,692 B2Granted
Identity and policy enforced inter-cloud and intra-cloud channel
AssigneeNovell, Inc.
InventorsBruce L. Bergeson, Carolyn B. McClain, Stephen R Carter, Vernon Roger Holm
Life of this patent
Estimating the term…
Abstract
Techniques for identity and policy enforced cloud communications are presented. Cloud channel managers monitor messages occurring within a cloud or between independent clouds. Policy actions are enforced when processing the messages. The policy actions can include identity-based restrictions and the policy actions are specific to the messages and/or clouds within which the messages are being processed.
Claims20
A method, comprising:
- instantiating a cloud with a process that manages a channel of communication within the cloud;
- providing the process with an identifier for the channel over a different channel within the cloud and wherein providing further includes monitoring communications occurring on the channel by dynamically and in real time identifying the channel being monitored over the different channel where the identifier for the channel is provided;
- and
- enforcing, by the process, a policy for messages passed over the channel, wherein some messages are processed within the cloud and other messages are processed as they enter or exit the cloud.
1 more element
A method, comprising:
- detecting a message to manage within a cloud by dynamically and in real-time obtaining a channel identity for a communication channel over which the message is delivered and by identifying the channel identity through communication over a different communication channel from the communication channel where the channel identity of the communication channel is provided;
- obtaining a policy in response to:
- i) an identity associated with the message and 2) the channel identity for the communication channel wherein obtaining further includes evaluating the policy y for dynamically monitoring communications occurring over the communication channel;
- and
- authenticating, based on the policy, a sender and a receiver of the message based on a sender identity for the sender, a receiver identity for the receiver, and the channel identity for the communication channel, and one or more cloud identities that the message originated from or is being directed to.
2 more elements
A system, comprising:
- a processor;
- and
- a cloud channel manager configured and adapted to:
- execute on the processor, ii) authenticate messages that are received within a cloud and that are directed out of a cloud, and iii) enforce identity-based policy against the messages based on:
- a) channel identities for communication channels that the messages are being received from or sent to, wherein each channel identity is dynamically and in real time communicated over a different channel from the communication channel for which that channel identity identifies, b) sender identities for senders of the messages, c) receiver identities for receives of the messages, and d) cloud identities for the cloud and any other cloud associated with sending or receiving the messages.
2 more elements
Dependencies are inferred from the claim text.