TASK SEGREGATION IN A MULTI-TENANT IDENTITY AND DATA SECURITY MANAGEMENT CLOUD SERVICE

• US 20180077145A1
• Filed: 11/27/2017
• Published: 03/15/2018
• Est. Priority Date: 05/11/2016
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: LANDER, Vadim, CARRU, Damien, COLE, Gary P., SONDHI, Ajay, WILSON, Gregg
• Granted Patent: US 10,693,861 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Embodiments provide cloud-based identity management by receiving a request to perform an identity management service that includes real-time tasks and near-real-time tasks. Embodiments synchronously execute the real-time tasks by accessing at least one microservice using a corresponding application programming interface (“API”). Embodiments asynchronously execute the near-real-time tasks by offloading the near-real-time tasks to one or more message queues.

Claims

1. A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to provide cloud-based identity management, the provide comprising:

receiving a request to perform an identity management service that comprises a plurality of tasks, wherein the plurality of tasks comprise real-time tasks and near-real-time tasks;

synchronously executing the real-time tasks by accessing at least one microservice using a corresponding application programming interface (API); and

asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues.

2. The computer readable medium of claim 1, wherein the identity management service is requested to allow a user to proceed with accessing a resource.

3. The computer readable medium of claim 2, wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

4. The computer readable medium of claim 3, wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

5. The computer readable medium of claim 4, wherein the near-real-time tasks include at least one of auditing or notifications.

6. The computer readable medium of claim 1, wherein the microservice comprises an elastic cache cluster.

7. The computer readable medium of claim 6, wherein the elastic cache cluster comprises a distributed data grid.

8. The computer readable medium of claim 1, wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

9. A method of cloud-based identity management, comprising:

receiving a request to perform an identity management service that comprises a plurality of tasks, wherein the plurality of tasks comprise real-time tasks and near-real-time tasks;

synchronously executing the real-time tasks by accessing at least one microservice using a corresponding application programming interface (API); and

asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues.

10. The method of claim 9, wherein the identity management service is requested to allow a user to proceed with accessing a resource.

11. The method of claim 10, wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

12. The method of claim 9, wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of a user and starting a corresponding session.

13. The method of claim 9, wherein the near-real-time tasks include at least one of auditing or notifications.

14. The method of claim 9, wherein the microservice comprises an elastic cache cluster.

15. The method of claim 14, wherein the elastic cache cluster comprises a distributed data grid.

16. The method of claim 9, wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

17. A system for providing cloud-based identity management, the system comprising:

one or more processors that execute instructions to implement modules, the modules comprising;

a receiving module that receives a request to perform an identity management service that comprises a plurality of tasks, wherein the plurality of tasks comprise real-time tasks and near-real-time tasks; and

a synchronously executing module that synchronously executes the real-time tasks by accessing at least one microservice using a corresponding application programming interface (API); and

an asynchronously executing module that asynchronously executes the near-real-time tasks by offloading the near-real-time tasks to one or more message queues.

18. The system of claim 17, wherein the microservice comprises an elastic cache cluster.

19. The system of claim 18, wherein the elastic cache cluster comprises a distributed data grid.

20. The system of claim 17, wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.