IP Library Granted Patent US 10,630,685
Granted Patent B2
US 10,630,685 · App. 16/043,786 · Granted Apr 21, 2020

Integrated hosted directory

Inventors: Rajat Bhargava (Boulder, CO); James Brown (Broomfield, CO); Christopher Marie (Boulder, CO)
Assignee: JumpCloud, Inc.
H04L63/0884G06F21/31G06F21/45G06Q10/10H04L63/0807H04L63/0815H04L63/0892H04L63/20
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,630,685
App. No.
16/043,786
Granted
Apr 21, 2020
Kind
B2
Abstract

Methods, systems, and devices for enterprise-wide management of disparate devices, applications, and users are described. A cloud-based central server may maintain an integrated hosted directory, which may allow user authentication, authorization, and management of information technology (IT) resources across device types, operating systems, and software-as-a-service (SaaS) and on-premises applications. IT resources for multiple and separate customers may be managed from a single, central directory, and servers may be brought online to allow access to the directory according to system loading.

Claims (64)

1. A method of multitenant directory management within a networked computing system comprising a central server; another server, and a plurality of edge servers, the method comprising:

transferring one or more information technology (IT) resources between the other server and the central server;

accessing a multitenant directory at the central server, wherein the multitenant directory comprises a mapping between user identities and IT resources for a plurality of organizations, the IT resources for the plurality of organizations comprising the one or more IT resources transferred between the other server and the central server, and wherein each organization of the plurality of organizations comprises a plurality of users, wherein the IT resources for at least one organization of the plurality of organizations includes file systems;

activating a first edge server of the plurality of edge servers;

transmitting a first portion of the multitenant directory from the other server to the first edge server via the central server, wherein the first portion of the multitenant directory comprises references to IT resources for a first organization of the plurality of organizations;

transmitting a second portion of the multitenant directory from the other server to the first edge server via the central server, wherein the second portion of the multitenant directory comprises references to IT resources for a second organization of the plurality of organizations;

activating a second edge server of the plurality of edge servers based at least in part on a determined system load parameter of the first edge server;

transmitting at least the first portion of the multitenant directory from the other server to the second edge server via the central server; and

providing an indication to one or more of the IT resources that a first user of the first organization of the plurality of organizations has permission to access the first portion of the multitenant directory at the first utilizing a first protocol.

2. The method of claim 1 , further comprising:

determining the system load parameter exceeds a threshold; wherein the activating the second edge server is based on the determining.

3. The method of claim 2 , further comprising:

determining the system load parameter falls below the threshold; and

deactivating the second edge server based on the determining the system load parameter falls below the threshold.

4. The method of claim 2 , further comprising:

determining the system load parameter exceeds a second threshold; and

activating a third edge server from the plurality of edge servers based on the determining the system load parameter exceeds the second threshold.

5. The method of claim 1 , wherein the system load parameter comprises a number of users of the first edge server, a latency value, or a central processing unit (CPU) usage value.

6. The method of claim 1 , wherein the IT resources for at least one organization of the plurality of organizations further includes at least one device.

7. The method of claim 1 , further comprising:

authenticating a first user of the second organization of the plurality of organizations for access to the second portion of the multitenant directory at the first edge server utilizing the first protocol; and

authenticating a second user of the first organization for access to the first portion of the multitenant directory utilizing a second protocol that is different from the first protocol.

8. The method of claim 1 , wherein transferring the one or more IT resources between the other server and the central server comprises: referencing, at the central server, one or more IT resources at the other server.

9. The method of claim 1 , wherein transferring the one or more IT resources between the other server and the central server comprises:

transmitting the one or more IT resources from the central server to the other server.

10. A system for multitenant directory management, comprising:

a central server comprising:

a multitenant directory that comprises a mapping between user identities and information technology (IT) resources for a plurality of organizations, wherein each organization of the plurality of organizations comprises a plurality of users, wherein the IT resources for at least one organization of the plurality of organizations includes file systems;

a directory server that supports access to the multitenant directory using a first protocol;

a console server in electronic communication with the directory server, wherein the console server provides a user interface for web-based access to the multitenant directory; and

an agent server in electronic communication with the directory server and the console server, wherein the agent server controls server agents located on remote devices and supports agent access to the multitenant directory;

a first edge server in electronic communication with the directory server, wherein the first edge server supports access to the multitenant directory using the first protocol, and wherein the first edge server hosts a first portion of the multitenant directory for a first organization of the plurality of organizations;

a second edge server in electronic communication with the directory server and operable to activate based on a system load parameter of the first edge server, wherein the second edge server supports access to the multitenant directory using the first protocol or a second protocol, and wherein the second edge server hosts the first portion of the multitenant directory for the first organization or a second portion of the multitenant directory for a second organization, or both; and

an authentication server in electronic communication with the central server, wherein the authentication server authenticates users from the plurality of organizations for access to the first or second portions of the multitenant directory, wherein the authentication is based at least in part on the first user of the first organization being assigned a permission.

11. The system of claim 10 , wherein the second edge server is further configured to deactivate once the system load parameter of the first edge server falls below a predefined threshold.

12. The system of claim 10 further comprising:

a third edge server in electronic communication with the directory server and operable to activate based on the system load parameter of the first edge server exceeding a second predefined threshold, wherein the third edge server supports access to the multitenant directory using the first protocol or the second protocol, and wherein the third edge server hosts the first portion of the multitenant directory for the first organization or the second portion of the multitenant directory for the second organization, or both.

13. The system of claim 10 , wherein the system load parameter comprises a number of users of the first edge server, a latency value, or a central processing unit (CPU) usage value.

14. The system of claim 10 , wherein the IT resources for at least one organization of the plurality of organizations further includes at least one device.

15. The system of claim 10 , further comprising:

another server configured to transfer the one or more IT resources with the central server.

16. The system of claim 15 , wherein transferring the one or more IT resources between the other server and the central server comprises:

referencing, at the central server, one or more IT resources at the other server.

17. A central server for multitenant directory management within a networked computing system, comprising:

a processor;

memory in electronic communication with the processor; and

instructions stored in the memory and operable when executed by the processor to cause the central server to:

transfer one or more information technology (IT) resources between an other server and the central server;

access a multitenant directory at the central server, wherein the multitenant directory comprises a mapping between user identities and IT resources for a plurality of organizations, the IT resources for the plurality of organizations comprising the one or more IT resources transferred between the other server and the central server, and wherein each organization of the plurality of organizations comprises a plurality of users, wherein the IT resources for at least one organization of the plurality of organizations includes file systems;

activate a first edge server of a plurality of edge servers;

transmit a first portion of the multitenant directory to the first edge server, wherein the first portion of the multitenant directory comprises references to IT resources for a first organization of the plurality of organizations;

transmit a second portion of the multitenant directory to the first edge server, wherein the second portion of the multitenant directory comprises references to IT resources for a second organization of the plurality of organizations;

determine a system load parameter of the first edge server;

activate a second edge server of the plurality of edge servers based at least in part on a load parameter of the first edge server;

transmit at least the first portion of the multitenant directory to the second edge server; and

provide an indication to one or more of the IT resources that a first user of the first organization of the plurality of organizations has permission to access the first portion of the multitenant directory at the first utilizing a first protocol.

18. The central server of claim 17 , wherein the instructions are further executable to:

determine the system load parameter exceeds a threshold; wherein the activating the second edge server is based on the determining.

19. The central server of claim 18 , wherein the instructions are further executable to:

determine the system load parameter falls below the threshold; and

deactivate the second edge server based on the determining the system load parameter falls below the threshold.

20. The central server of claim 18 , wherein the instructions are further executable to:

determine the system load parameter exceeds a second threshold; and

activate a third edge server from the plurality of edge servers based on the determining the system load parameter exceeds the second threshold.

Assignments (2)
SECURITY INTEREST Recorded Apr 30, 2022
From: JUMPCLOUD INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 059744/0884 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 18, 2019
From: BHARGAVA, RAJAT; BROWN, JAMES; MARIE, CHRISTOPHER
To: JUMPCLOUD, INC.
Reel/Frame 048056/0978 →
Continuity (3)
Continuation 14728511 · Jun 2, 2015
Continuation 15482522 · Apr 7, 2017
Related Publication 20180359252A1 · Dec 13, 2018