TECHNIQUES FOR SECURE ACCESS MANAGEMENT IN VIRTUAL ENVIRONMENTS
    3.
    发明申请
    TECHNIQUES FOR SECURE ACCESS MANAGEMENT IN VIRTUAL ENVIRONMENTS 有权
    虚拟环境中安全访问管理的技术

    公开(公告)号:US20150200928A1

    公开(公告)日:2015-07-16

    申请号:US14658349

    申请日:2015-03-16

    申请人: Novell, Inc.

    IPC分类号: H04L29/06 G06F9/455

    摘要: Techniques for secure access management to virtual environments are provided. A user authenticates to a portal for purposes of establishing a virtual machine (VM). The portal interacts with a cloud server and an identity server to authenticate the user, to acquire an Internet Protocol (IP) address and port number for the VM, and to obtain a secure token. The user then interacts with a secure socket layer virtual private network (SSL VPN) server to establish a SSL VPN session with the VM. The SSL VPN server also authenticates the token through the identity server and acquires dynamic policies to enforce during the SSL VPN session between the user and the VM (the VM managed by the cloud server).

    摘要翻译: 提供了对虚拟环境进行安全访问管理的技术。 为了建立虚拟机(VM),用户认证到门户。 门户与云服务器和身份服务器进行交互以验证用户,获取虚拟机的互联网协议(IP)地址和端口号,并获取安全令牌。 然后,用户与安全套接字层虚拟专用网(SSL VPN)服务器交互,以与VM建立SSL VPN会话。 SSL VPN服务器还通过身份服务器对令牌进行身份验证,并获取动态策略,以在用户与VM(由云端服务器管理的虚拟机)之间的SSL VPN会话期间执行。

    TECHNIQUES FOR IDENTITY-ENABLED INTERFACE DEPLOYMENT
    4.
    发明申请
    TECHNIQUES FOR IDENTITY-ENABLED INTERFACE DEPLOYMENT 审中-公开
    识别接口接口部署技术

    公开(公告)号:US20160261607A1

    公开(公告)日:2016-09-08

    申请号:US14935581

    申请日:2015-11-09

    申请人: Novell, Inc.

    IPC分类号: H04L29/06

    摘要: Techniques for providing identity-enabled interfaces for deployment are presented. Specifically, an agent of an enterprise infrastructure authenticates and acquires an agent identity for interacting with a cloud processing environment. Once the agent is deployed in the cloud processing environment, enterprise policy can be enforced within the cloud processing environment on actions occurring within the cloud. The agent acts as an Application Programming Interface between the enterprise and the cloud processing environment. The reverse is also achievable, where a cloud deploys an agent to the enterprise to deploy a cloud interface within the enterprise for policy enforcement.

    摘要翻译: 提出了用于提供身份启用的部署接口的技术。 具体来说,企业基础设施的代理认证并获取与云处理环境交互的代理身份。 一旦将代理部署在云处理环境中,企业策略可以在云处理环境中对云中发生的动作执行。 该代理作为企业和云处理环境之间的应用程序编程接口。 反过来也是可以实现的,在这种情况下,云将企业部署一个代理,在企业内部部署一个云接口,以实施策略。

    TECHNIQUES FOR VIRTUAL REPRESENTATIONAL STATE TRANSFER (REST) INTERFACES
    6.
    发明申请
    TECHNIQUES FOR VIRTUAL REPRESENTATIONAL STATE TRANSFER (REST) INTERFACES 审中-公开
    虚拟代表状态传输(REST)接口的技术

    公开(公告)号:US20150281286A1

    公开(公告)日:2015-10-01

    申请号:US14719386

    申请日:2015-05-22

    申请人: Novell, Inc.

    IPC分类号: H04L29/06 G06Q10/10

    摘要: Techniques for virtual Representational State Transfer (REST) interfaces are provided. A proxy is interposed between a client and a REST service over a network. The proxy performs independent authentication of the client and provides credentials to the client and for the client to authenticate to the REST service using a REST service authentication mechanism. The proxy inspects requests and responses and translates the requests and responses into formats expected by the client and the REST service. Moreover, the proxy enforces policy and audits the requests and responses occurring between the client and the REST service over the network.

    摘要翻译: 提供了虚拟表示状态转移(REST)接口的技术。 代理服务器介于客户端和通过网络的REST服务之间。 代理执行客户端的独立身份验证,并向客户端提供凭据,并为客户端使用REST服务验证机制向REST服务进行身份验证。 代理检查请求和响应,并将请求和响应转换为客户端和REST服务所期望的格式。 此外,代理强制执行策略并对通过网络在客户端和REST服务之间发生的请求和响应进行审计。