Task segregation in a multi-tenant identity and data security management cloud service

• US 10,693,861 B2
• Filed: 11/27/2017
• Issued: 06/23/2020
• Est. Priority Date: 05/11/2016
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Lander, Vadim, Carru, Damien, Cole, Gary P., Sondhi, Ajay, Wilson, Gregg
• Primary Examiner(s): Le, Chau
• Application Number:
  US15/822,477
• Publication Number:
  US 20180077145A1
• Time in Patent Office: 939 Days
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Embodiments provide cloud-based identity management by receiving a request to perform an identity management service that includes real-time tasks and near-real-time tasks. Embodiments synchronously execute the real-time tasks by accessing at least one microservice using a corresponding application programming interface (“API”). Embodiments asynchronously execute the near-real-time tasks by offloading the near-real-time tasks to one or more message queues.

Claims

1. A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to provide cloud-based identity management, the provide comprising:

receiving a request to perform an identity management service for a user that comprises a plurality of tasks;

separating the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource;

synchronously executing the real-time tasks by accessing at least one service, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and

asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

2. The computer readable medium of claim 1, wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

3. The computer readable medium of claim 2, wherein the microservice comprises an elastic cache cluster.

4. The computer readable medium of claim 3, wherein the elastic cache cluster comprises a distributed data grid.

5. The computer readable medium of claim 2, wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

6. The computer readable medium of claim 1, wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

7. The computer readable medium of claim 6, wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

8. The computer readable medium of claim 7, wherein the near-real-time tasks include at least one of auditing or notifications.

9. A method of cloud-based identity management, comprising:

receiving a request to perform an identity management service for a user that comprises a plurality of tasks;

separating the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource;

synchronously executing the real-time tasks by accessing at least one, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and

asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

10. The method of claim 9, wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

11. The method of claim 10, wherein the microservice comprises an elastic cache cluster.

12. The method of claim 11, wherein the elastic cache cluster comprises a distributed data grid.

13. The method of claim 10, wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

14. The method of claim 9, wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

15. The method of claim 9, wherein the identity management service includes authenticating a user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

16. The method of claim 9, wherein the near-real-time tasks include at least one of auditing or notifications.

17. A system for providing cloud-based identity management, the system comprising:

one or more processors that execute instructions to implement modules, the modules comprising;

a receiving module that receives a request to perform an identity management service for a user that comprises a plurality of tasks, wherein the plurality of tasks comprise real-time tasks and near-real-time tasks, and separates the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource; and

a synchronously executing module that synchronously executes the real-time tasks by accessing at least one service, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and

an asynchronously executing module that asynchronously executes the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

18. The system of claim 17, wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

19. The system of claim 17, wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

20. The system of claim 17, wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.