Quorum-based access management
A quorum-based access mechanism can require multiple entities to provide credentials over a determined period of time in order to obtain access to one or more resources in an electronic environment. This can include receiving a request that is signed by multiple signatories, or receiving multiple requests within a determined period that are each signed by a respective and authorized signatory. In some embodiments the receiving of a primary request causes notifications to be sent to other potential signatories, and a specified or minimum number must respond timely with a signed request to have the access granted. The quorum-based access mechanism can function as an additional authorization layer sitting in front of more conventional authorization and authentication mechanisms. In some embodiments a quorum token can be passed with the request, whereby resources in the environment can make access determinations based on the information in the token.
1. A computer-implemented method, comprising:
receiving, from a user device, at an application programming interface (API) associated with an access manager, a request for access to one or more resources in a multi-tenant environment;
determining, by the access manager, at least one of the request or source of the request is authenticated;
determining, by the access manager, a requested task to be performed on the one or more resources after access to the one or more resources is provided;
determining, by the access manager, that a quorum rule applies to the task, the quorum rule specifying a period of time for completion of a quorum action for the task;
determining, by the access manager, that the quorum action was completed within the specified period of time to satisfy the quorum rule for the task;
permitting the task to be performed on the one or more resources in the multi-tenant environment; and
storing an audit record for the request, the audit record including at least a number of digital signatures received and an identification of signatories associated with the digital signatures.
2. The computer-implemented method of claim 1 , wherein the quorum action comprises receiving a number of additional requests for access, the number including at least one of a specified number or a minimum number.
3. The computer-implemented method of claim 1 , further comprising:
sending a notification, by the access manager, to a number of additional signatories to satisfy the quorum action.
4. The computer-implemented method of claim 3 , further comprising:
receiving a number of additional signature requests from the additional signatories; and
determining the number of additional signature requests satisfies the quorum rule.
5. The computer-implemented method of claim 3 , further comprising:
determining criteria for the at least one other potential signatory to which the notification is to be sent, the criteria specifying at least one of a type of a potential signatory, a location of a potential signatory, an address of a potential signatory, a device used on behalf of a potential signatory, or whether a proxy device can be used to submit a request on behalf of a potential signatory.
6. The computer-implemented method of claim 1 , further comprising:
receiving a number of additional requests for access;
determining the number of additional requests is less than a threshold number of the quorum rule;
receiving a second number of additional requests for access within the specified period of time; and
determining the number of additional requests and the second number of additional requests satisfies the quorum rule.
7. A system, comprising:
at least one processor; and
memory including instructions that, when executed by the at least one processor, cause the system to:
receive, from a user device at an application programming interface (API) associated with an access manager, a request for access to one or more resources in a multi-tenant environment;
determine, by the access manager, at least one of the request or source of the request is authenticated;
determine, by the access manager, a requested task to be performed on the one or more resources after access to the one or more resources is provided;
determine, by the access manager, that a quorum rule applies to the task, the quorum rule specifying a period of time for completion of a quorum action for the task;
determine, by the access manager, that the quorum action was completed within the specified period of time to satisfy the quorum rule for the task;
permitting the task to be performed on the one or more resources in the multi-tenant environment; and
store an audit record for the request, the audit record including at least a number of digital signatures received and an identification of signatories associated with the digital signatures.
8. The system of claim 7 , wherein the quorum action comprises receiving a number of additional requests for access, the number including at least one of a specified number or a minimum number.
9. The system of claim 7 , wherein the instructions, when executed further cause the system to:
send a notification, by the access manager, to a number of additional signatories to satisfy the quorum action.
10. The system of claim 9 , wherein the instructions when executed further cause the system to:
receive a number of additional signature requests from the additional signatories; and
determine the number of additional signature requests satisfies the quorum rule.
11. The system of claim 9 wherein the instructions, when executed further cause the system to:
determine criteria for the at least one other potential signatory to which the notification is to be sent, the criteria specifying at least one of a type of a potential signatory, a location of a potential signatory, an address of a potential signatory, a device used on behalf of a potential signatory, or whether a proxy device can be used to submit a request on behalf of a potential signatory.
12. The system of claim 7 , wherein the instructions when executed further cause the system to:
receive a number of additional requests for access;
determine the number of additional requests is less than a threshold number of the quorum rule;
receive a second number of additional requests for access within the specified period of time; and
determine the number of additional requests and the second number of additional requests satisfies the quorum rule.
13. A non-transitory computer-readable storage medium including instructions that, when executed by at least one processor of a computing system, cause the computing system to:
receive, from a user device at an application programming interface (API) associated with an access manager, a request for access to one or more resources in a multi-tenant environment;
determine, by the access manager, at least one of the request or source of the request is authenticated;
determine, by the access manager, a requested task to be performed on the one or more resources after access to the one or more resources is provided;
determine, by the access manager, that a quorum rule applies to the task, the quorum rule specifying a period of time for completion of a quorum action for the task;
determine, by the access manager, that the quorum action was completed within the specified period of time to satisfy the quorum rule for the task;
permitting the task to be performed on the one or more resources in the multi-tenant environment; and
store an audit record for the request, the audit record including at least a number of digital signatures received and an identification of signatories associated with the digital signatures.
14. The non-transitory computer-readable storage medium of claim 13 , wherein the quorum action comprises receiving a number of additional requests for access, the number including at least one of a specified number or a minimum number.
15. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions when executed further cause the computing system to:
send a notification, by the access manager, to a number of additional signatories to satisfy the quorum action.
16. The non-transitory computer-readable storage medium of claim 15 , wherein the instructions when executed further cause the computing system to:
receive a number of additional signature requests from the additional signatories; and
determine the number of additional signature requests satisfies the quorum rule.
17. The non-transitory computer-readable storage medium of claim 15 , wherein the instructions when executed further cause the system to:
determine criteria for the at least one other potential signatory to which the notification is to be sent, the criteria specifying at least one of a type of a potential signatory, a location of a potential signatory, an address of a potential signatory, a device used on behalf of a potential signatory, or whether a proxy device can be used to submit a request on behalf of a potential signatory.
18. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions when executed further cause the system to:
receive a number of additional requests for access;
determine the number of additional requests is less than a threshold number of the quorum rule;
receive a second number of additional requests for access within the specified period of time; and
determine the number of additional requests and the second number of additional requests satisfies the quorum rule.