IP Library › Granted Patent US 12,413,524
Granted Patent B2
US 12,413,524 · App. 18/303,314 · Granted Sep 9, 2025

Access control for restricted entities

Inventors: Praveenkumar Sowpati (Bangalore, IN); Jose Lejin P J (Bangalore, IN); Ramanjaneyulu Y Talla (Bangalore, IN)
Assignee: Salesforce, Inc.
H04L47/125
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,413,524
App. No.
18/303,314
Filed
Apr 19, 2023
Granted
Sep 9, 2025
Kind
B2
Art Unit
2441
USPC
709/238
Abstract

Methods, apparatuses, and computer-program products are disclosed. A method may include activating, in a processing entity, a connection agent and a manifest, the manifest including a data signature and an endpoint type that are associated with the processing entity. The method may include generating, based on the data signature, the endpoint type, or both, one or more load balanced dynamic endpoints configured for access, by the connection agent and via one or more application programming interfaces, to a repository including access configurations for the processing entity. The method may include retrieving, via the one or more load balanced dynamic endpoints and from the repository, one or more first access configurations of the plurality of access configurations and the one or more first access configurations may be associated with the processing entity.

Claims (53)

1. A method for data processing at an application server, comprising:

monitoring for a presence of a processing entity;

activating, in the processing entity and based at least in part on detecting the presence of the processing entity, a connection agent and a manifest, the manifest comprising a data signature and an endpoint type that are associated with the processing entity;

generating, based at least in part on the data signature, the endpoint type, or both, one or more load balanced dynamic endpoints configured for access, by the connection agent and via one or more application programming interfaces, to a repository comprising a plurality of access configurations for the processing entity; and

retrieving, via the one or more load balanced dynamic endpoints and from the repository, one or more first access configurations of the plurality of access configurations, wherein the one or more first access configurations are associated with the processing entity.

2. The method of claim 1 , further comprising:

receiving, from the connection agent, an access request indicating the one or more first access configurations; and

retrieving the one or more first access configurations based at least in part on the access request.

3. The method of claim 1 , further comprising:

mapping the one or more load balanced dynamic endpoints to one or more access configuration retrieval services associated with the plurality of access configurations; and

retrieving the one or more first access configurations via the one or more access configuration retrieval services.

4. The method of claim 1 , further comprising:

disabling the one or more load balanced dynamic endpoints based at least in part on retrieving, via the one or more load balanced dynamic endpoints, the one or more first access configurations.

5. The method of claim 1 , further comprising:

disassociating the one or more load balanced dynamic endpoints from the processing entity; and

associating the one or more load balanced dynamic endpoints with a second processing entity.

6. The method of claim 1 , further comprising:

generating random endpoint addresses associated with the one or more load balanced dynamic endpoints.

7. The method of claim 1 , further comprising:

translating the one or more first access configurations from a first format to a second format that corresponds to the processing entity; and

transmitting the translated one or more first access configurations to the processing entity via the connection agent.

8. The method of claim 1 , further comprising:

storing one or more records associated with the activation of the connection agent, the manifest, or both, the generation of the one or more load balanced dynamic endpoints, a disablement of the one or more load balanced dynamic endpoints, a reassignment of the one or more load balanced dynamic endpoints, or any combination thereof.

9. The method of claim 1 , wherein the one or more load balanced dynamic endpoints disallow connections from processing entities different than the processing entity.

10. The method of claim 1 , wherein the plurality of access configurations comprise one or more access control lists, one or more internet protocol address configurations, one or more domain name configurations, one or more permissions configurations, one or more access policy configurations, one or more network layer configurations, one or more transport layer configurations, one or more ingress block configurations, one or more egress block configurations, or any combination thereof.

11. The method of claim 1 , wherein the data signature indicates a data format, a quantity of data, a data configuration rate, one or more dependent configurations, or any combination thereof.

12. The method of claim 1 , wherein the endpoint type indicates a representational state transfer (REST) API model, a global remote procedure call (RPC) API model, an input schema, an output schema, or any combination thereof.

13. An apparatus for data processing at an application server, comprising:

a processor;

memory coupled with the processor; and

instructions stored in the memory and executable by the processor to cause the apparatus to:

monitor for a presence of a processing entity;

activate, in the processing entity and based at least in part on detecting the presence of the processing entity, a connection agent and a manifest, the manifest comprising a data signature and an endpoint type that are associated with the processing entity;

generate, based at least in part on the data signature, the endpoint type, or both, one or more load balanced dynamic endpoints configured for access, by the connection agent and via one or more application programming interfaces, to a repository comprising a plurality of access configurations for the processing entity; and

retrieve, via the one or more load balanced dynamic endpoints and from the repository, one or more first access configurations of the plurality of access configurations, wherein the one or more first access configurations are associated with the processing entity.

14. The apparatus of claim 13 , wherein the instructions are further executable by the processor to cause the apparatus to:

receive, from the connection agent, an access request indicating the one or more first access configurations; and

retrieve the one or more first access configurations based at least in part on the access request.

15. The apparatus of claim 13 , wherein the instructions are further executable by the processor to cause the apparatus to:

map the one or more load balanced dynamic endpoints to one or more access configuration retrieval services associated with the plurality of access configurations; and

retrieve the one or more first access configurations via the one or more access configuration retrieval services.

16. The apparatus of claim 13 , wherein the instructions are further executable by the processor to cause the apparatus to:

disable the one or more load balanced dynamic endpoints based at least in part on retrieving, via the one or more load balanced dynamic endpoints, the one or more first access configurations.

17. The apparatus of claim 13 , wherein the instructions are further executable by the processor to cause the apparatus to:

generate random endpoint addresses associated with the one or more load balanced dynamic endpoints.

18. The apparatus of claim 13 , wherein the instructions are further executable by the processor to cause the apparatus to:

translate the one or more first access configurations from a first format to a second format that corresponds to the processing entity; and

transmit the translated one or more first access configurations to the processing entity via the connection agent.

19. A non-transitory computer-readable medium storing code for data processing at an application server, the code comprising instructions executable by a processor to:

monitor for a presence of a processing entity;

activate, in the processing entity and based at least in part on detecting the presence of the processing entity, a connection agent and a manifest, the manifest comprising a data signature and an endpoint type that are associated with the processing entity;

generate, based at least in part on the data signature, the endpoint type, or both, one or more load balanced dynamic endpoints configured for access, by the connection agent and via one or more application programming interfaces, to a repository comprising a plurality of access configurations for the processing entity; and

retrieve, via the one or more load balanced dynamic endpoints and from the repository, one or more first access configurations of the plurality of access configurations, wherein the one or more first access configurations are associated with the processing entity.

Assignments (2)
CHANGE OF NAME Recorded Aug 4, 2026
From: SALESFORCE.COM, INC.
To: SALESFORCE, INC.
Reel/Frame 076118/0548 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 19, 2023
From: SOWPATI, PRAVEENKUMAR; P J, JOSE LEJIN; TALLA, RAMANJANEYULU Y
To: SALESFORCE.COM, INC.
Reel/Frame 063380/0870 →
Continuity (1)
Related Publication 20240356854A1 · Oct 24, 2024
References Cited (1)
US 20210034669A1 · McLaughlin · 2021 [cited by examiner]