Granted Patent B2

US 12,204,669 · App. 17/584,996 · Granted Jan 21, 2025

Inventors: Michael G. Varteresian (Lexington, MA); Muzhar S. Khokhar (Shrewsbury, MA); Wenfeng Li (Shanghai, CN); Donald Mace (Hopkinton, MA)

Assignee: Dell Products L.P.

G06F21/6218G06F16/258G06F2221/2141

Abstract

Claims (28)

1. A method for managing access security in a cloud environment, wherein the method comprises:

defining public cloud access permissions for one or more public cloud resources associated with an entity, wherein the public cloud access permissions are in accordance with a security model implemented in a private cloud of the entity;

providing the public cloud permissions to a private cloud access module;

responsive to an access request to access a public cloud resource, invoking the private cloud access module to process the access request in accordance with the public cloud access permissions;

responsive to an access request to access a private cloud resource, invoking the private cloud access module to process the access request in accordance with private cloud access permissions;

managing the private cloud access permissions and the public cloud access permissions from within the private cloud; and

responsive to managing a public cloud access permission from within the private cloud, forwarding the public cloud access permission to the public cloud via a secure channel between the private cloud and public cloud.

2. The method of claim 1 , wherein providing the public cloud permissions comprises pushing the public cloud access permissions from the public cloud to the private cloud access module.

3. The method of claim 1 , wherein the private cloud security model comprises a role-based access model wherein an access permission is associated with a resource, indicates one or more authorized users to which the permission pertains, and identifies a role, comprising one or more access privileges, accorded to the one or more authorized users with respect to the resource.

4. An information handling system, comprising:

a central processing unit (CPU); and

a computer readable memory, accessible to the CPU, including process executable program instructions that, when executed by the CPU, cause the CPU to perform operations for managing access security in a cloud environment, wherein the operations include:

defining public cloud access permissions for one or more public cloud resources associated with an entity, wherein the public cloud access permissions are in accordance with a security model implemented in a private cloud of the entity;

providing the public cloud permissions to a private cloud access module;

responsive to an access request to access a public cloud resource, invoking the private cloud access module to process the access request in accordance with the public cloud access permissions;

responsive to an access request to access a private cloud resource, invoking the private cloud access module to process the access request in accordance with private cloud access permissions;

managing the private cloud access permissions and the public cloud access permissions from within the private cloud; and

responsive to managing a public cloud access permission from within the private cloud, forwarding the public cloud access permission to the public cloud via a secure channel between the private cloud and public cloud.

5. The information handling system of claim 4 , wherein providing the public cloud permissions comprises pushing the public cloud access permissions from the public cloud to the private cloud access module.

6. The information handling system of claim 4 , wherein the private cloud security model comprises a role-based access model wherein an access permission is associated with a resource, indicates one or more authorized users to which the permission pertains, and identifies a role, comprising one or more access privileges, accorded to the one or more authorized users with respect to the resource.

7. A non-transitory computer readable memory including process executable program instructions that, when executed by a processor of an information handing system, cause the system to perform operations for managing access security in a cloud environment, wherein the operations include:

defining public cloud access permissions for one or more public cloud resources associated with an entity, wherein the public cloud access permissions are in accordance with a security model implemented in a private cloud of the entity;

providing the public cloud permissions to a private cloud access module;

responsive to an access request to access a public cloud resource, invoking the private cloud access module to process the access request in accordance with the public cloud access permissions;

managing the private cloud access permissions and the public cloud access permissions from within the private cloud; and

responsive to managing a public cloud access permission from within the private cloud, forwarding the public cloud access permission to the public cloud via a secure channel between the private cloud and public cloud.

8. The non-transitory computer readable medium of claim 7 , wherein providing the public cloud permissions comprises pushing the public cloud access permissions from the public cloud to the private cloud access module.

9. The non-transitory computer readable medium of claim 7 , wherein the private cloud security model comprises a role-based access model wherein an access permission is associated with a resource, indicates one or more authorized users to which the permission pertains, and identifies a role, comprising one or more access privileges, accorded to the one or more authorized users with respect to the resource.

Assignments (1)

Continuity (1)

References Cited (15)