Granted Patent B2

US 12,464,036 · App. 17/896,969 · Granted Nov 4, 2025

Inventors: Kranthi Kiran Pandiri (Redmond, WA); Shobhank Sharma (Kirkland, WA); Girish Nagaraja (Sammamish, WA)

Assignee: Oracle International Corporation

H04L67/02H04L67/14G06F2209/5016

Abstract

Claims (47)

1 . A method comprising:

receiving, by a global region data center, information regarding a request to access an application using a browser executing on a user device;

communicating, by the global region data center to the user device, a first set of instructions for execution at the user device;

receiving, by the global region data center from the user device and due to execution of the first set of instructions on the user device, a request to log into a first tenancy via the browser, where the browser does not have an existing session for the first tenancy;

determining, by the global region data center, a home region for the first tenancy;

redirecting, by the global region data center, the browser to a home region data center in the identified home region, wherein the home region data center performs processing associated with the request to log into the first tenancy;

receiving, by the global region data center, information indicative of a first tenancy login into the first tenancy and creation of a new session for the first tenancy login;

causing, by the global region data center, sessions information stored on the user device to be updated to include information regarding the new session, wherein the sessions information comprises information identifying one or more sessions that the browser participates in; and

responsive to a log out from the application, causing, by the global region data center, the sessions information stored on the user device to be updated by removing the information regarding the new session from the sessions information.

2 . The method of claim 1 wherein the first set of instructions is executed by the browser on the user device.

3 . The method of claim 1 wherein the first set of instructions when executed by the browser causes:

sessions information stored on the user device to be read, the sessions information comprising information identifying one or more sessions that the browser participates in and information identifying a tenancy for each session in the one or more sessions.

4 . The method of claim 3 wherein the sessions information is stored by the browser in a data store associated with the global region data center.

5 . The method of claim 4 wherein the data store is an IndexedDB database associated with an application hosted by the global region data center.

6 . The method of claim 3 wherein the first set of instructions when executed by the browser further causes:

information to be output via the browser regarding the one or more sessions, wherein the information output for a session includes information identifying a tenancy corresponding to that session.

7 . The method of claim 6 wherein the first set of instructions when executed by the browser further prevents multiple sessions from being opened for a particular tenancy when the one or more sessions includes a session associated with the particular tenancy.

8 . The method of claim 6 wherein the first set of instructions when executed by the browser further enables input to be received identifying the first tenancy.

9 . The method of claim 1 wherein the information regarding the new session includes information identifying the first tenancy.

10 . The method of claim 1 further comprising: receiving, by the global region data center, information regarding a request to log out of the application accessed via the new session created for the first tenancy; redirecting, by the global region data center, the browser to the home region data center in the identified home region for the first tenancy; receiving, by the global region data center, a redirect of the browser after invalidation of the new session by the home region data center; and causing, by the global region data center, the sessions information stored on the user device to be updated by removing the information regarding the new session from the sessions information.

11 . The method of claim 10 wherein the causing the sessions information stored on the user device to be updated comprises:

communicating, by the global region data center to the user device, a second set of instructions for execution by the browser on the user device, wherein the second set of instructions when executed by the browser causes the information regarding the new session to be removed from the sessions information.

12 . The method of claim 11 wherein the second set of instructions when executed by the browser further cause processing to be performed at the user device comprising:

from the sessions information stored on the user device, identifying a set of one or more applications accessed using the new session; and

performing a logout for each application in the set of applications.

13 . The method of claim 1 further comprising:

validating, by the home region data center, the request to log into the first tenancy using one or more identity and access management artifacts stored by the home region data center for the first tenancy; and

upon successful validation, facilitating logging into the first tenancy and creation of the new session.

14 . The method of claim 1 wherein determining, by the global region data center, the home region for the first tenancy comprises:

using, by the global region data center, information mapping a set of tenancies to their corresponding home regions to determine the home region for the first tenancy.

15 . A non-transitory computer-readable medium storing computer-executable instructions that, when executed by one or more computer systems of a global region data center, cause the global region data center to perform processing comprising:

receiving, by the global region data center, information regarding a request to access an application using a browser executing on a user device;

communicating, by the global region data center to the browser, a first set of instructions for execution by the browser;

receiving, by the global region data center from the browser and due to execution of the first set of instructions by the browser, information identifying a first tenancy;

redirecting, by the global region data center, the browser to a home region data center in a home region for the first tenancy;

receiving, by the global region data center, information indicative of a first tenancy login and creation of a new session for the first tenancy login;

causing, by the global region data center, sessions information stored on the user device to be updated to include information regarding the new session, wherein the sessions information comprises information identifying one or more sessions that the browser participates in; and

responsive to a log out from the application, causing, by the global region data center, the sessions information stored on the user device to be updated by removing the information regarding the new session from the sessions information.

16 . The non-transitory computer-readable medium of claim 15 wherein the sessions information is stored by the browser in a data store associated with the global region data center.

17 . A system comprising:

one or more computer systems, wherein the one or more computer systems are configured to perform processing comprising:

receiving a browser redirect responsive to a request to access an application using the browser executing on a user device;

receiving, from the browser, information identifying a first tenancy for a new login using the browser;

redirecting the browser to a home region data center in a home region for the first tenancy;

receiving information indicative of a first tenancy login and creation of a new session for the first tenancy login;

causing sessions information to be stored by the browser indicative of the new session and the associated first tenancy; and

responsive to a log out from the application, causing, by the global region data center, the sessions information stored on the user device to be updated by removing the information regarding the new session from the sessions information.

Assignments (1)

Continuity (3)

References Cited (134)