System and method for dynamically orchestrating application program interface trust
A system includes a purchase portal configured to receive a purchase order from a customer, wherein the purchase order includes a service from each of a plurality of service providers. When receipt of the purchase order is detected, a processor determines first and second ones of the service providers associated with the purchase order; and establishes a trust relationship between the first service provider and the second service provider in a context of the customer. The processor also sends a first request for a first trust artifact to the first service provider and a second request for a second trust artifact to the second service provider; receives the first trust artifact from the first service provider, receives the second trust artifact from the second service provider, sends the first trust artifact to the second service provider, and sends the second trust artifact to the first service provider.
1. A method comprising:
determining, by a processor, a plurality of service providers associated with a purchase order of a customer;
for each one of the service providers, establishing trust between the service providers on behalf of the customer that includes exchanging of trust artifacts, wherein the exchanging of the trust artifacts includes sending a request to each of the service providers for a respective trust artifact, receiving the respective trust artifact from each of the service providers and sending the respective trust artifact to other service providers; and
subsequent to the establishing trust between the service providers, sending a particular request by a first service provider to a second service provider, wherein the particular request is signed by a particular private key of the first service provider, wherein the second service provider uses a particular public key of the first service provider to verify authenticity of the particular request.
2. The method of claim 1 , wherein the service providers were onboarded by the processor prior to the purchase order.
3. The method of claim 1 , wherein the trust artifacts include digital certificates.
4. The method of claim 1 , wherein the purchase order of the customer is a triggering event for the determining the service providers associated with the purchase order.
5. The method of claim 1 , wherein the request sent to the one of the service providers is signed by a service provider specific private key of a public/private key pair generated by the processor respective to the service provider.
6. The method of claim 5 , wherein the service provider specific private key is stored by the processor at a secured storage.
7. The method of claim 1 , further comprising onboarding the service providers associated with the purchase order of the customer prior to the purchase order.
8. The method of claim 1 , wherein the exchanging of the trust artifacts is in a context respective of the customer.
9. A system, comprising:
a server that includes a purchase portal configured to receive a purchase order from a customer, wherein the purchase order includes a service from each of a plurality of service providers; and
a hardware processor configured, when receipt of the purchase order is detected, to:
in response to receiving a triggering event to establish a service-to-service trust, determine first and second ones of the service providers associated with the purchase order; and
in response to a determination that the service providers have been onboarded, establish the service-to-service trust relationship between the first service provider and the second service provider in a context of the customer, the processor further configured to:
send a first request for a first trust artifact to the first service provider and a second request for a second trust artifact to the second service provider;
receive the first trust artifact from the first service provider;
receive the second trust artifact from the second service provider;
send the first trust artifact to the second service provider; and
send the second trust artifact to the first service provider.
10. The system of claim 9 , wherein the first request is signed by a first digital certificate generated by the processor respective to the first service provider, wherein the second request is signed by a second digital certificate generated by the processor respective to the second service provider.
11. The system of claim 9 , wherein the first trust artifact includes a first token shared by the processor to the second service provider, and wherein the second trust artifact includes a second token shared by the processor to the first service provider, wherein the first trust artifact is distinct from the second trust artifact.
12. The system of claim 9 , wherein in the first request is based on an authorized application programming interface between the processor and the first service provider, and wherein the second request is based on a particular authorized application programming interface between the processor and the second service provider.
13. The system of claim 9 , wherein the first service provider and the second service provider are trusted by the processor prior to the receipt the purchase order.
14. The system of claim 9 , wherein the first service provider and the second service provider does not have a particular trust relationship in a particular context of a second customer, wherein the second customer did not purchase a first service of the first service provider and a second service of the second service provider.