IP Library Granted Patent US 11,283,805
Granted Patent B2
US 11,283,805 · App. 16/512,186 · Granted Mar 22, 2022

Cloud device account configuration method, apparatus and system, and data processing method

Inventor: Xizhe Jiang (Hangzhou, CN)
Assignee: Alibaba Group Holding Limited
H04L63/102H04L63/083H04L63/0807H04L63/0853H04L63/0884H04L2463/082
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,283,805
App. No.
16/512,186
Granted
Mar 22, 2022
Kind
B2
Abstract

A method for configuring an account of a cloud device including obtaining a sub-account corresponding to a currently logged-in primary account, wherein the primary account has a permission to access a cloud resource, and the sub-account has a part or all of the permission of the primary account; and importing the sub-accounts into the target cloud device to log in to the target cloud device through the sub-account to perform operation and maintenance on the target cloud device, wherein the cloud resource includes the target cloud device. The present disclosure solves the technical problem that, in the conventional techniques, the gateway account needs to be created for each gateway separately, which causes the complicated account configuration of the gateway.

Claims (54)

1. A method comprising:

obtaining a sub-account corresponding to a currently logged-in primary account in a first account system, wherein the primary account has a permission to access a cloud resource, and the sub-account has a part or all of the permission of the primary account; and

importing the sub-account into a target cloud device through the first account system to directly log in to the target cloud device through the sub-account to perform operation and maintenance on the target cloud device, wherein the cloud resource includes the target cloud device, importing the sub-account into the target cloud device through the first account system enables logging into the target cloud device without going through a second account system maintained by the target cloud device, and controlling a virtual server corresponding to the target cloud device via the target cloud device, and wherein importing the sub-account into the target cloud device includes:

logging into a cloud device console through the sub-account;

performing authentication on the sub-account via the cloud device console;

generating a token that does not require registration after the authentication is successful; and

using the token to log into the target cloud device.

2. The method of claim 1 , wherein the obtaining the sub-account corresponding to the currently logged-in primary account includes:

determining that the primary account has created the sub-account; and

obtaining the sub-account.

3. The method of claim 1 , wherein the obtaining the sub-account corresponding to the currently logged-in primary account includes:

determining that the primary account does not have the sub-account; and

creating the sub-account.

4. The method of claim 3 , wherein, after the creating the sub-account, the method further comprises:

configuring a multi-factor authentication MFA function for the sub-account.

5. The method of claim 4 , wherein the MFA function includes an account password authentication and a dynamic authentication code authentication.

6. The method of claim 1 , wherein the importing the sub-account to the target cloud device includes:

synchronizing the sub-account to the cloud device console; and

importing via the cloud device console the sub-account to the target cloud device selected from one or more cloud devices.

7. The method of claim 1 , wherein the importing the sub-account into the target cloud device includes:

logging in the target cloud device by using the sub-account, and

sending via the target cloud device the sub-account to the cloud device console for the authentication.

8. The method of claim 1 , wherein the target cloud device includes a gateway.

9. An apparatus comprising:

one or more processors; and

one or more memories storing computer-readable instructions that, when executed by the one or more processors, cause the one or more processors to perform acts including:

receiving a sub-account sent by a cloud console, the sub-account corresponding to a primary account that currently logs into the cloud console in a first account system;

determining a target cloud device from one or more cloud devices; and

importing the sub-account to the target cloud device through the first account system to directly log in to the target cloud device through the sub-account to perform operation and maintenance on the target cloud device, wherein importing the sub-account into the target cloud device through the first account system enables logging into the target cloud device without going through a second account system maintained by the target cloud device, and controlling a virtual server corresponding to the target cloud device via the target cloud device, wherein importing the sub-account to the target cloud device comprises:

performing authentication on the sub-account and generating a token that does not require registration after the authentication is successful; and

using the token to log into the target cloud device.

10. The apparatus of claim 9 , wherein:

the primary account has a permission to access a cloud resource; and

the sub-account has a part or all of the permission of the primary account.

11. The apparatus of claim 10 , wherein the cloud resource includes the target cloud device.

12. The apparatus of claim 9 , wherein the importing the sub-account to the target cloud device includes:

receiving the sub-account sent by the target cloud device;

authenticating the sub-account; and

sending an authentication result to the target cloud device.

13. One or more memories storing computer-readable instructions that, when executed by one or more processors, cause the one or more processors to perform acts comprising:

obtaining a sub-account corresponding to a currently logged-in primary account in a first account system; and

importing the sub-account into a target cloud device through the first account system to directly log in to the target cloud device through the sub-account to perform operation and maintenance on the target cloud device, wherein importing the sub-account into the target cloud device through the first account system enables logging into the target cloud device without going through a second account system maintained by the target cloud device, and controlling a virtual server corresponding to the target cloud device via the target cloud device, and wherein importing the sub-account into the target cloud device includes:

logging into a cloud device console through the sub-account

performing authentication on the sub-account via the cloud device console;

generating a token that does not require registration after the authentication is successful; and

using the token to log into the target cloud device.

14. The one or more memories of claim 13 , wherein:

the primary account has a permission to access a cloud resource; and

the sub-account has a part or all of the permission of the primary account.

15. The one or more memories of claim 14 , wherein the cloud resource includes the target cloud device.

16. The one or more memories of claim 13 , wherein the acts further comprise configuring a multi-factor authentication (MFA) function for the sub-account, the MFA function including an account password authentication and a dynamic authentication code authentication.

17. The one or more memories of claim 13 , wherein the importing the sub-account to the target cloud device includes:

synchronizing the sub-account to the cloud device console; and

importing via the cloud device console the sub-account to the target cloud device selected from one or more cloud devices.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 29, 2026
From: ALIBABA GROUP HOLDING LIMITED
To: CLOUD INTELLIGENCE ASSETS HOLDING (SINGAPORE) PRIVATE LIMITED
Reel/Frame 075499/0384 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 7, 2020
From: JIANG, XIZHE
To: ALIBABA GROUP HOLDING LIMITED
Reel/Frame 053141/0626 →
Priority Claims (1)
CN 201810778187.6 · Jul 16, 2018 · national
Continuity (1)
Related Publication 20200021596A1 · Jan 16, 2020