IP Library › Granted Patent US 10,693,861
Granted Patent B2
US 10,693,861 · App. 15/822,477 · Granted Jun 23, 2020

Task segregation in a multi-tenant identity and data security management cloud service

Inventors: Vadim Lander (Newton, MA); Damien Carru (New York, NY); Gary P. Cole (Austin, TX); Ajay Sondhi (San Jose, CA); Gregg Wilson (Austin, TX)
Assignee: Oracle International Corporation
H04L63/0815H04L67/10H04L63/083H04L63/0861H04L63/102
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,693,861
App. No.
15/822,477
Granted
Jun 23, 2020
Kind
B2
Abstract

Embodiments provide cloud-based identity management by receiving a request to perform an identity management service that includes real-time tasks and near-real-time tasks. Embodiments synchronously execute the real-time tasks by accessing at least one microservice using a corresponding application programming interface (“API”). Embodiments asynchronously execute the near-real-time tasks by offloading the near-real-time tasks to one or more message queues.

Claims (32)

1. A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to provide cloud-based identity management, the provide comprising:

receiving a request to perform an identity management service for a user that comprises a plurality of tasks;

separating the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource;

synchronously executing the real-time tasks by accessing at least one service, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and

asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

2. The computer readable medium of claim 1 , wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

3. The computer readable medium of claim 2 , wherein the microservice comprises an elastic cache cluster.

4. The computer readable medium of claim 3 , wherein the elastic cache cluster comprises a distributed data grid.

5. The computer readable medium of claim 2 , wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

6. The computer readable medium of claim 1 , wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

7. The computer readable medium of claim 6 , wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

8. The computer readable medium of claim 7 , wherein the near-real-time tasks include at least one of auditing or notifications.

9. A method of cloud-based identity management, comprising:

receiving a request to perform an identity management service for a user that comprises a plurality of tasks;

separating the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource;

synchronously executing the real-time tasks by accessing at least one, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and

asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

10. The method of claim 9 , wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

11. The method of claim 10 , wherein the microservice comprises an elastic cache cluster.

12. The method of claim 11 , wherein the elastic cache cluster comprises a distributed data grid.

13. The method of claim 10 , wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

14. The method of claim 9 , wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

15. The method of claim 9 , wherein the identity management service includes authenticating a user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

16. The method of claim 9 , wherein the near-real-time tasks include at least one of auditing or notifications.

17. A system for providing cloud-based identity management, the system comprising:

one or more processors that execute instructions to implement modules, the modules comprising:

a receiving module that receives a request to perform an identity management service for a user that comprises a plurality of tasks, wherein the plurality of tasks comprise real-time tasks and near-real-time tasks, and separates the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource; and

a synchronously executing module that synchronously executes the real-time tasks by accessing at least one service, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and

an asynchronously executing module that asynchronously executes the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

18. The system of claim 17 , wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

19. The system of claim 17 , wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

20. The system of claim 17 , wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 5, 2017
From: LANDER, VADIM; CARRU, DAMIEN; COLE, GARY P.; SONDHI, AJAY; WILSON, GREGG
To: ORACLE INTERNATIONAL CORPORATION
Reel/Frame 044299/0495 →
Continuity (6)
Continuation 15450550 · Mar 6, 2017
Provisional Application 62395501 · Sep 16, 2016
Provisional Application 62376069 · Aug 17, 2016
Provisional Application 62371336 · Aug 5, 2016
Provisional Application 62334645 · May 11, 2016
Related Publication 20180077145A1 · Mar 15, 2018
Cited By (1)
US 12,273,343