Task segregation in a multi-tenant identity and data security management cloud service

Patent metadata

Field	Value
Publication number	US-10693861-B2
Application number	US-201715822477-A
Country	US
Kind code	B2
Filing date	Nov 27, 2017
Priority date	May 11, 2016
Publication date	Jun 23, 2020
Grant date	Jun 23, 2020

Abstract

Embodiments provide cloud-based identity management by receiving a request to perform an identity management service that includes real-time tasks and near-real-time tasks. Embodiments synchronously execute the real-time tasks by accessing at least one microservice using a corresponding application programming interface (“API”). Embodiments asynchronously execute the near-real-time tasks by offloading the near-real-time tasks to one or more message queues.

First claim

What is claimed is:

1. A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to provide cloud-based identity management, the provide comprising:
receiving a request to perform an identity management service for a user that comprises a plurality of tasks;
separating the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource;
synchronously executing the real-time tasks by accessing at least one service, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and
asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

2. The computer readable medium of claim 1 , wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

3. The computer readable medium of claim 2 , wherein the microservice comprises an elastic cache cluster.

4. The computer readable medium of claim 3 , wherein the elastic cache cluster comprises a distributed data grid.

5. The computer readable medium of claim 2 , wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

6. The computer readable medium of claim 1 , wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

7. The computer readable medium of claim 6 , wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

8. The computer readable medium of claim 7 , wherein the near-real-time tasks include at least one of auditing or notifications.

9. A method of cloud-based identity management, comprising:
receiving a request to perform an identity management service for a user that comprises a plurality of tasks;
separating the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource;
synchronously executing the real-time tasks by accessing at least one, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and
asynchronously executing the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

10. The method of claim 9 , wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

11. The method of claim 10 , wherein the microservice comprises an elastic cache cluster.

12. The method of claim 11 , wherein the elastic cache cluster comprises a distributed data grid.

13. The method of claim 10 , wherein the microservice is stateless, wherein the microservice performs the identity management service based on tenant data stored in a database, wherein the database and the microservice are configured to scale independently of one another.

14. The method of claim 9 , wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

15. The method of claim 9 , wherein the identity management service includes authenticating a user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

16. The method of claim 9 , wherein the near-real-time tasks include at least one of auditing or notifications.

17. A system for providing cloud-based identity management, the system comprising:
one or more processors that execute instructions to implement modules, the modules comprising:
a receiving module that receives a request to perform an identity management service for a user that comprises a plurality of tasks, wherein the plurality of tasks comprise real-time tasks and near-real-time tasks, and separates the plurality of tasks into real-time tasks and near-real-time tasks, the real-time tasks comprising operations needed for the user to proceed in accessing a resource; and
a synchronously executing module that synchronously executes the real-time tasks by accessing at least one service, wherein synchronously executing comprises completing an execution of a first real-time task before starting an execution of a second task; and
an asynchronously executing module that asynchronously executes the near-real-time tasks by offloading the near-real-time tasks to one or more message queues, wherein asynchronously executing comprises allowing an execution of a third task to start before finishing an execution of a fourth near-real-time task.

18. The system of claim 17 , wherein the service comprises a microservice that is accessed using a corresponding application programming interface (API).

19. The system of claim 17 , wherein the user is allowed to proceed with accessing the resource when the real-time tasks are completed and before the near-real-time tasks are completed.

20. The system of claim 17 , wherein the identity management service includes authenticating the user, wherein the real-time tasks include validating credentials of the user and starting a corresponding session.

Assignees

• Oracle Int Corp

Inventors

• Lander Vadim
• Carru Damien
• Cole Gary P
• Sondhi Ajay
• Wilson Gregg

Classifications

• H04L63/102

  Entity profiles · CPC title

• H04L63/0815 Primary

  providing single-sign-on or federations · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title