IP Library Granted Patent US 10,812,463
Granted Patent B2
US 10,812,463 · App. 15/835,727 · Granted Oct 20, 2020

Secure access to an enterprise computing environment

Inventors: Stefan Harrer (Victoria, AU); Laurence Plant (Victoria, AU); Josef Reisinger (Bornheim, DE)
Assignee: International Business Machines Corporation
H04L63/0807G06F21/335G06F21/62G06F21/85H04L9/0894H04L9/3239H04L9/3297H04L63/029G06F2221/2139G06N3/02H04L9/0637H04L2209/38
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,812,463
App. No.
15/835,727
Granted
Oct 20, 2020
Kind
B2
Abstract

Remote access of a service provider to a secure enterprise computing environment through a firewall through the use of tokens.

Claims (39)

1. A method of securely accessing a secure enterprise computing environment connected to a network through a firewall by a service provider environment, with the secure enterprise computing environment and the service provider environment sharing a shared repository, the method comprising the steps of:

the service provider environment sending a request to the shared repository to access the enterprise computing environment;

the service provider environment receiving a service agreement from the enterprise computing environment specifying requirements of accessing the enterprise computing environment and a token, wherein the service agreement specifies restrictions of the token including a number of images associated with the token in a range of 30-100 images, token size, and object composition for tokens;

the service provider environment adding predefined images to the token based on the service agreement;

the service provider environment storing a classifier for the predefined images inserted into the token created, in the shared repository of the service provider environment and the secure enterprise computing environment;

the service provider environment embedding the token into internet protocol packets; and

the service provider sending the internet protocol packets with the embedded tokens to the firewall of the enterprise environment according to the service agreement.

2. The method of claim 1 , wherein the shared repository includes blockchain.

3. The method of claim 1 , wherein the service agreement includes at least one restriction selected from a group consisting of one or more of a combination of: a time of access by the enterprise computing environment by the service provider, access ports of the firewall, number of concurrent access ports of the firewall which can be used, and number of times a token can be used by the service provider.

4. The method of claim 1 , wherein the classifier is a neural network classifier.

5. The method of claim 1 , wherein the token is greater than 6 megabytes in size.

6. The method of claim 1 , wherein the enterprise computing environment and the service provider environment are nodes of a cloud computing environment.

7. A method of securely accessing a secure enterprise computing environment comprising a filter connected to a network through a firewall by a service provider environment, with the secure enterprise computing environment and the service provider environment sharing a shared repository, the method comprising the steps of:

the enterprise computing environment receiving a request in the shared repository from a service provider environment for access to the enterprise environment;

the enterprise computing environment generating a service agreement and a token in response to the request and storing the service agreement in the shared repository, wherein the service agreement specifies restrictions of the token including a number of images associated with the token in a range of 30-100 images, token size, object composition for tokens;

the enterprise computing environment receiving incoming internet protocol packets via the firewall;

the enterprise computing environment obtaining, from the shared repository, a classifier for predefined images inserted into the token;

the enterprise computing environment inspecting incoming internet protocol packets received from the firewall by:

determining if the internet protocol packets contain a token; and

for the packets containing a token, comparing the classifier to the token to determine whether the token includes the predefined images and meet the restrictions of the service agreement;

the enterprise computing environment allowing incoming internet protocol packets which contain the token with the predefined images to pass into the enterprise computing environment from secure provider environment, granting access of the secure provider environment to the enterprise computing environment.

8. The method of claim 7 , wherein the shared repository includes blockchain.

9. The method of claim 7 , wherein the service agreement includes at least one restriction selected from a group consisting of one or more of a combination of: a time of access by the enterprise computing environment by the service provider, access ports of the firewall, number of concurrent access ports of the firewall which can be used, and number of times a token can be used by the service provider.

10. The method of claim 7 , wherein the classifier is a neural network classifier.

11. The method of claim 7 , wherein the token is greater than 6 megabytes in size.

12. The method of claim 7 , wherein the incoming internet protocol packets are inspected at the firewall of the enterprise computing environment.

13. The method of claim 7 , wherein the incoming internet protocol packets are inspected by a filter within the enterprise computing environment, after passing through an open port of the firewall.

14. The method of claim 7 , wherein the enterprise computing environment and the service provider environment are nodes of a cloud computing environment.

15. A computer program product for securely accessing a secure enterprise computing environment connected to a network through a firewall by a service provider environment, with the secure enterprise computing environment and the service provider environment sharing a shared repository, the service provider environment and the secure enterprise computing environment each comprising a computer comprising at least one processor, one or more memories, one or more computer readable storage media, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by the computer to perform a method comprising:

sending, by the service provider environment, a request to the shared repository to access the enterprise computing environment;

receiving, by the service provider environment, a service agreement from the enterprise computing environment specifying requirements of accessing the enterprise computing environment and a token, wherein the service agreement specifies restrictions of the token including a number of images associated with the token in a range of 30-100 images, token size, and object composition for tokens;

adding, by the service provider environment, predefined images to the token based on the service agreement;

storing, by the service provider environment, a classifier for the predefined images inserted into the token created, in the shared repository of the service provider environment and the secure enterprise computing environment;

embedding, by the service provider environment, the token into internet protocol packets; and

sending, by the service provider environment, the internet protocol packets with the embedded tokens to the firewall of the enterprise environment according to the service agreement.

16. The computer program product of claim 15 , wherein the shared repository includes blockchain.

17. The computer program product of claim 15 , wherein the service agreement includes at least one restriction selected from a group consisting of one or more of a combination of: a time of access by the enterprise computing environment by the service provider, access ports of the firewall, number of concurrent access ports of the firewall which can be used, and number of times a token can be used by the service provider.

18. The computer program product of claim 15 , wherein the classifier is a neural network classifier.

19. The computer program product of claim 15 , wherein the token is greater than 6 megabytes in size.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 21, 2024
From: GREEN MARKET SQUARE LIMITED
To: WORKDAY, INC.
Reel/Frame 067801/0892 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 29, 2024
From: GREEN MARKET SQUARE LIMITED
To: WORKDAY, INC.
Reel/Frame 067556/0783 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 27, 2022
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: GREEN MARKET SQUARE LIMITED
Reel/Frame 058888/0675 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 8, 2017
From: HARRER, STEFAN; PLANT, LAURENCE; REISINGER, JOSEF
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 044337/0621 →