IP Library Granted Patent US 11,582,303
Granted Patent B2
US 11,582,303 · App. 17/877,887 · Granted Feb 14, 2023

Multi-tenancy via code encapsulated in server requests

Inventors: Tomasz Janczuk (Redmond, WA); Matias Woloski (Maldonado, UY)
Assignee: Okta, Inc.
H04L67/1097G06F9/547H04L67/133H04L67/34H04L67/561G06F2209/549H04L67/025
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,582,303
App. No.
17/877,887
Granted
Feb 14, 2023
Kind
B2
Abstract

A multitenant infrastructure server (MTIS) is configured to provide an environment to execute a computer routine of an arbitrary application. The MTIS receives a request from a webtask server to execute the computer routine in a webtask container. The computer routine is executed in the webtask container at the MTIS. Upon successful execution of the computer routine, a result set is returned to the webtask server. If the execution of the computer routine is unsuccessful, an error notification is returned to the webtask server. The resources consumed during the execution of the computer routine are determined. The webtask container is destroyed to prevent persistent storage of the computer routine on the MTIS.

Claims (63)

1. A computer system configured to provide an environment to execute code of a computer routine of an arbitrary application, the computer system comprising:

a processor;

a network interface coupled to the processor configured to enable communications via a communication network;

a storage device for content and programming; and

a program stored in the storage device, wherein execution of the program configures the computer system to perform actions comprising:

receiving a request from a webtask server to execute the computer routine in a webtask container, wherein the request includes:

client data comprising environment variables;

the computer routine in the form of executable computer code or a link to the computer routine; and

at least one client secret, including a security key;

executing the computer routine in the webtask container;

upon successful execution of the computer routine, returning results to the webtask server;

upon unsuccessful execution of the computer routine, returning an error verdict to the webtask server;

monitoring resources consumed during the execution of the computer routine, wherein monitoring the resources consumed includes obtaining a request identification (ID) associated with the webtask container;

destroying the webtask container, thereby preventing persistent storage of the computer routine on the computer system,

wherein the webtask container includes all dependencies of the computer routine to run in an isolated environment in the computer system,

wherein the isolated environment isolates the webtask container from other webtask containers, and

wherein the resources consumed include CPU load and memory used during the execution of the computer routine.

2. The computer system of claim 1 , wherein the request includes a webtask token.

3. The computer system of claim 2 , wherein the webtask token is cryptographically protected from tampering and disclosure.

4. The computer system of claim 1 , the actions further comprising retrieving the computer routine from the link included in the request.

5. The computer system of claim 1 , wherein the isolated environment is a sandbox in the computer system.

6. The computer system of claim 1 , wherein the destroying the webtask container is in response to receiving a confirmation from the webtask server that the results or the error verdict have been received by the webtask container.

7. The computer system of claim 1 , wherein the computer routine is independent of an operating system of the computer system.

8. The computer system of claim 1 , wherein a time to execute the computer routine is limited to a period of time it takes for an HTTP request/response cycle.

9. The computer system of claim 8 , wherein the webtask server is an HTTP server and the webtask request is an HTTP request.

10. The computer system of claim 1 , wherein the returned results are in JavaScript Object Notation (JSON).

11. The computer system of claim 1 , wherein the computer system provides data isolation for each tenant such that a computer routine of one tenant is prevented from accessing a computer routine or a data of another tenant.

12. A computer-implemented method for providing an environment to execute code of a computer routine of an arbitrary application, the computer-implemented method comprising:

receiving a request from a webtask server to execute the computer routine in a webtask container, wherein the request includes:

client data comprising environment variables;

the computer routine in the form of executable computer code or a link to the computer routine, and

at least one client secret, including a security key;

executing the computer routine in the webtask container;

upon successful execution of the computer routine, returning results to the webtask server;

upon unsuccessful execution of the computer routine, returning an error verdict to the webtask server;

monitoring resources consumed during the execution of the computer routine, wherein monitoring the resources consumed includes obtaining a request identification (ID) associated with the webtask container;

destroying the webtask container, thereby preventing persistent storage of the computer routine on the computer system,

wherein the webtask container includes all dependencies of the computer routine to run in an isolated environment in the computer system,

wherein the isolated environment isolates the webtask container from other webtask containers, and

wherein the resources consumed include CPU load and memory used during the execution of the computer routine.

13. The computer-implemented method of claim 12 , wherein the request includes a webtask token.

14. The computer-implemented method of claim 13 , wherein the webtask token is cryptographically protected from tampering and disclosure.

15. The computer-implemented method of claim 12 , further comprising retrieving the computer routine from the link included in the request.

16. The computer-implemented method of claim 12 , wherein the isolated environment is a sandbox in the computer system.

17. The computer-implemented method of claim 12 , wherein the destroying the webtask container is in response to receiving a confirmation from the webtask server that the results or the error verdict have been received by the webtask container.

18. The computer-implemented method of claim 12 , wherein the computer routine is independent of an operating system of the computer system.

19. The computer-implemented method of claim 12 , wherein a time to execute the computer routine is limited to a period of time it takes for an HTTP request/response cycle.

20. The computer-implemented method of claim 19 , wherein the webtask server is an HTTP server and the webtask request is an HTTP request.

21. The computer-implemented method of claim 12 , wherein the returned results are in JavaScript Object Notation (JSON).

22. The computer-implemented method of claim 12 , wherein the computer system provides data isolation for each tenant such that a computer routine of one tenant is prevented from accessing a computer routine or a data of another tenant.

23. A non-transitory computer-readable storage medium storing instructions that when executed by a computer processor perform actions comprising:

receiving a request from a webtask server to execute a computer routine in a webtask container, wherein the request includes:

client data comprising environment variables;

the computer routine in the form of executable computer code or a link to the computer routine; and

at least one client secret, including a security key;

executing the computer routine in the webtask container;

upon successful execution of the computer routine, returning results to the webtask server;

upon unsuccessful execution of the computer routine, returning an error verdict to the webtask server;

monitoring resources consumed during the execution of the computer routine, wherein monitoring the resources consumed includes obtaining a request identification (ID) associated with the webtask container;

destroying the webtask container, thereby preventing persistent storage of the computer routine on the computer system,

wherein the webtask container includes all dependencies of the computer routine to run in an isolated environment in the computer system,

wherein the isolated environment isolates the webtask container from other webtask containers, and

wherein the resources consumed include CPU load and memory used during the execution of the computer routine.

Assignments (2)
CHANGE OF NAME Recorded May 3, 2024
From: AUTH0, INC.
To: AUTH0, LLC
Reel/Frame 068290/0896 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 28, 2023
From: JANCZUK, TOMASZ; WOLOSKI, MATÍAS
To: AUTH0, INC.
Reel/Frame 064095/0719 →
Continuity (4)
Continuation 16686023 · Nov 15, 2019
Continuation 14951223 · Nov 24, 2015
Provisional Application 62084511 · Nov 25, 2014
Related Publication 20220377140A1 · Nov 24, 2022