User Access in a Multi-Tenant Cloud Environment

• US 20150319103A1
• Filed: 05/02/2014
• Published: 11/05/2015
• Est. Priority Date: 05/02/2014
• Status: Abandoned Application

• Current Assignee: Cloudblue LLC
• Original Assignee: Ensim Corporation (Techstep ASA)
• Inventors: Das, Swarup, Chang, David, Wippich, David J.
• Application Number:
  US14/268,332
• Publication Number:
  US 20150319103A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 12/6418 Hybrid transport
• CPC Class Codes: H04L 47/808 User-type aware
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Systems and methods for allowing one or more users to access a number of tenant systems in a multi-tenant cloud environment are disclosed. The method includes registering a user to the tenant systems based on an identity information received from the user. The same identity information is associated with each of the tenant systems. The method also includes creating an account corresponding to each of the tenant systems for the user. The method further includes allowing the user to access one or more of the tenant systems based on the identity information entered by the user. The user accesses the tenant systems by entering the same identity information. Further, the same identity information is used for identifying the user in each of the tenant systems.

Claims

1. A method for allowing one or more users to access a plurality of tenant systems in a multi-tenant cloud environment, the method comprising:

registering a user to the plurality of tenant systems based on an identity information received from the user, wherein the same identity information is associated with each of the plurality of tenant systems;

creating an account corresponding to each of the plurality of tenant systems for the user; and

allowing the user to access one or more tenant system of the plurality of tenant systems based on the identity information entered by the user, wherein the user accesses the plurality of tenant systems by entering the same identity information;

wherein the same identity information is used for identifying the user in each of the plurality of tenant systems.

2. The method of claim 1 further comprising assigning the user a type of membership including at least one of a native membership or an external membership.

3. The method of claim 2, wherein one or more roles are assigned to the user based on the type of membership of the user.

4. The method of claim 3, wherein the native membership is a permanent membership, wherein the user having the native membership belongs permanently to a tenant system of the plurality of tenant systems unless the user unregisters from the tenant system.

5. The method of claim 4, wherein the external membership is a temperory membership and is revoked based on one or more conditions, wherein the user having the external membership is allowed to perform one or more tasks on behalf of a native tenant.

6. The method of claim 5 further comprising providing the user with a list of the plurality of tenant systems prior to allowing the user to access the plurality of tenant systems, wherein the user is registered to the plurality of tenant systems.

7. The method of claim 6, wherein the user is allowed to access the one or more tenant system of the plurality of tenant systems based on a selection of the one or more tenant system received from the user.

8. The method of claim 7, wherein the plurality of tenant systems are associated with a plurality of service providers.

9. The method of claim 8, wherein the registering of the user is moderated and verified by the plurality of service providers associated with the plurality of tenant systems.

10. The method of claim 9, wherein the plurality of sevice providers associated with the plurality of tenant systems assigns the type of membership to the user based on a plurality of tasks, which the user intend to perform in each of the plurality of tenant systems.

11. A tenant access management system for allowing one or more users to access a plurality of tenant systems in a multi-tenant cloud environment, the system comprising:

a tenant registration module configured for;

registering a user to the plurality of tenant systems based on an identity information received from the user, wherein the same identity information is associated with each of the plurality of tenant systems;

creating an account corresponding to each of the plurality of tenant systems for the user; and

an access module configured for allowing the user to access one or more tenant system of the plurality of tenant systems based on the identity information entered by the user, wherein the user accesses the plurality of tenant systems by entering the same identity information and the same identity information is used for identifying the user in each of the plurality of tenant systems.

wherein the users rights in a given tenant system is controlled by the roles given to each of the users in the context of that tenant system which can be different from the user'"'"'s roles in another tenant system.

12. The system of claim 11, wherein the tenant registration module is also configured for assigning the user a type of membership including at least one of a native membership or an external membership.

13. The system of claim 12, wherein the tenant registration module is also configured for assigning one or more roles to the user based on the type of membership of the user.

14. The system of claim 13, wherein the native membership is a permanent membership, wherein the user having the native membership belongs permanently to a tenant system of the plurality of tenant systems unless the user unregisters from the tenant system.

15. The system of claim 14, wherein the external membership is a temporary membership and is revoked based on one or more conditions, wherein the user having the external membership is allowed to perform one or more tasks on behalf of a native tenant.

16. The system of claim 15, wherein the access module is further configured for providing the user with a list of the plurality of tenant systems prior to providing access to the user to the plurality of tenant systems, wherein the user is registered to the plurality of tenant systems.

17. The system of claim 16, wherein the access module is configured for providing the user with the access to the one or more tenant system of the plurality of tenant systems based on a selection of the tenant system received from the user.

18. The system of claim 17, wherein the plurality of tenant systems are associated with a plurality of service providers.

19. The system of claim 18, wherein the registering of the user is moderated and verified by the plurality of service providers associated with the plurality of tenant systems, further wherein each of the plurality of service providers comprises the tenant registration module and the access module.

20. The system of claim 19, wherein tenant registration module is configured for assigning the type of membership to the user based on a plurality of tasks the user intend to perform in each of the plurality of tenant systems.