Granted Patent B2

US 12,609,822 · App. 18/649,585 · Granted Apr 21, 2026

Inventors: Nachiketh Rao Potlapally (Seattle, WA); Christian A. Linacre (Fall City, WA); Apurv Awasthi (Woodinville, WA); Harsh Aseeja (Kirkland, WA); Qingyang Luo (Seattle, WA)

Assignee: Oracle International Corporation

H04L9/0891H04L63/10H04L63/102H04L63/20H04L67/10

Abstract

Claims (61)

1 . A method comprising:

receiving, in a cloud environment, a request for a first user to access one or more administrative tools in an administrative tenancy;

wherein the administrative tenancy is one of a plurality of tenancies in the cloud environment;

wherein the administrative tenancy comprises the one or more administrative tools for communicating with one or more services that are running outside of the administrative tenancy;

determining that the first user satisfies a sovereignty requirement for the cloud environment,

wherein determining that the first user satisfies the sovereignty requirement comprises performing a geographic location check based on a physical location of the first user,

wherein performing the geographic location check comprises determining if a source Internet Protocol (IP) address associated with the first user belongs to a preconfigured Classless Inter-Domain Routing (CIDR) range corresponding to a preapproved geographic region; and

based at least on determining that the first user satisfies the sovereignty requirement: granting the request for the first user to access the one or more administrative tools in the administrative tenancy;

wherein the method is performed by at least one device including a hardware processor.

2 . The method of claim 1 , wherein the one or more services running outside of the administrative tenancy are not otherwise accessible by the first user.

3 . The method of claim 1 , wherein:

the cloud environment comprises a set of cloud resources;

the set of cloud resources comprises the one or more administrative tools and the one or more services running outside of the administrative tenancy; and

access to the set of cloud resources is controlled by a set of access policies, each of the set of access policies having a maximum scope of one of the plurality of tenancies.

4 . The method of claim 1 :

wherein a set of one or more access policies allows access by the first user to the one or more administrative tools in the administrative tenancy;

wherein the set of one or more access policies specifies one or more of allowing or admitting a static or dynamic group of users comprising the first user to access a static or dynamic group of cloud resources comprising the one or more administrative tools in the administrative tenancy.

5 . The method of claim 1 , wherein no access policy allows access by the first user directly to the one or more services running outside of the administrative tenancy.

6 . The method of claim 1 , wherein:

the administrative tenancy is operated by a cloud service provider (CSP);

the one or more services running outside of the administrative tenancy is customer-operated;

the one or more services run in one or more tenancies, of the plurality of tenancies, that are each customer-operated; and

the first user is associated with the CSP.

7 . The method of claim 1 , wherein receiving the request is performed by a virtual private network (VPN) gateway associated with the administrative tenancy.

8 . The method of claim 1 :

wherein the cloud environment comprises a plurality of partitions;

wherein a first partition of the plurality of partitions comprises the administrative tenancy and is subject to the sovereignty requirement;

wherein access to a second administrative tenancy, in a second partition of the plurality of partitions, is not subject to the sovereignty requirement.

9 . The method of claim 1 , further comprising:

authenticating the first user on an ongoing basis during use of the administrative tenancy.

10 . The method of claim 9 , wherein authenticating the first user on an ongoing basis comprises performing two-factor authentication, on an ongoing basis, responsive to detecting a plurality of instances of one or more authentication triggers.

11 . The method of claim 1 , further comprising:

determining one or more of (a) that the first user is on a pre-approved list of operators or (b) that the first user is not on a list of forbidden operators.

12 . The method of claim 1 , further comprising:

detecting a presence of a hardware security device coupled to a physical device used by the first user to access the administrative tenancy.

13 . The method of claim 12 , wherein the hardware security device is a hardware dongle.

14 . The method of claim 1 , wherein the one or more administrative tools available to the first user in the administrative tenancy is based on a first configuration specific to the first user.

15 . The method of claim 14 , wherein a second user has access to at least one administrative tool not included in the one or more administrative tools available to the first user, based on a second configuration specific to the second user.

16 . The method of claim 1 , further comprising:

maintaining an audit log of (a) access by the first user to the administrative tenancy and (b) actions taken by the first user within the administrative tenancy.

17 . One or more non-transitory computer-readable media storing instructions which, when executed by one or more hardware processors, cause performance of operations comprising:

receiving, in a cloud environment, a request for a first user to access an administrative tenancy;

wherein the administrative tenancy is one of a plurality of tenancies in the cloud environment;

wherein the administrative tenancy comprises one or more administrative tools for communicating with one or more services that are running outside of the administrative tenancy;

determining that the first user satisfies a sovereignty requirement for the cloud environment;

wherein determining that the first user satisfies the sovereignty requirement comprises performing a geographic location check based on a physical location of the first user,

wherein performing the geographic location check comprises determining if a source Internet Protocol (IP) address associated with the first user belongs to a preconfigured Classless Inter-Domain Routing (CIDR) range corresponding to a preapproved geographic region; and

based at least on determining that the first user satisfies the sovereignty requirement: granting the request for the first user to access the administrative tenancy;

wherein the first user uses the one or more administrative tools in the administrative tenancy to make authenticated calls to the one or more services running outside of the administrative tenancy.

18 . A system comprising:

one or more hardware processors;

one or more non-transitory computer-readable media; and

program instructions stored on the one or more non-transitory computer-readable media which, when executed by the one or more hardware processors, cause the system to perform operations comprising:

receiving, in a cloud environment, a request for a first user to access an administrative tenancy;

wherein the administrative tenancy is one of a plurality of tenancies in the cloud environment;

wherein the administrative tenancy comprises one or more administrative tools for communicating with one or more services that are running outside of the administrative tenancy;

determining that the first user satisfies a sovereignty requirement for the cloud environment,

wherein determining that the first user satisfies the sovereignty requirement comprises performing a geographic location check based on a physical location of the first user,

wherein performing the geographic location check comprises determining if a source Internet Protocol (IP) address associated with the first user belongs to a preconfigured Classless Inter-Domain Routing (CIDR) range corresponding to a preapproved geographic region; and

based at least on determining that the first user satisfies the sovereignty requirement: granting the request for the first user to access the administrative tenancy;

wherein the first user uses the one or more administrative tools in the administrative tenancy to make authenticated calls to the one or more services running outside of the administrative tenancy.

Assignments (1)

Continuity (2)

References Cited (98)