公开(公告)号：US11502921B2

公开(公告)日：2022-11-15

申请号：US16265107

申请日：2019-02-01

Applicant: ORACLE INTERNATIONAL CORPORATION

Inventor： Naresh Revanuru

IPC: H04L43/04 ,  H04L41/5041

Abstract: A system and method for enabling a cloud computing environment. In accordance with an embodiment, the system can include a variety of hardware and/or software components and features, which can be used in delivering an infrastructure, platform, and/or applications to support public and private clouds.

公开(公告)号：US10225325B2

公开(公告)日：2019-03-05

申请号：US14622648

申请日：2015-02-13

Applicant: Oracle International Corporation

Inventor： Merrick Schincariol ,  Naresh Revanuru

IPC: G06F7/04 ,  G06F17/30 ,  H04N7/16 ,  H04L29/08 ,  H04L12/24 ,  G06F9/50 ,  G06F21/33

Abstract: A method and system for managing access to information stored in a data storage system of an organization is provided. In an embodiment, the data storage system may be configured to receive a request from a requester on a client device to access information stored in the data storage system. In some aspects, upon receiving the request, the first system may determine that an access token identifying the requester is stored in a cache in the data storage system. In some aspects, the data storage system may then retrieve one or more roles from the cache. In some examples, the roles may be associated with the access token. In certain embodiments, the data storage system may then be configured to determine that the requester is authorized to access the information based on the roles and provide the information to the requester on the client device.

公开(公告)号：US20190026486A1

公开(公告)日：2019-01-24

申请号：US16140299

申请日：2018-09-24

Applicant: Oracle International Corporation

Inventor： Jeffrey Pleau ,  Naresh Revanuru

IPC: G06F21/62 ,  H04L29/06

CPC classification number: G06F21/6236 ,  H04L63/0884 ,  H04L63/104

Abstract: Techniques are disclosed for enabling tenant hierarchy information to be migrated directly between different multi-tenant system (e.g., from a shared IDM system to a Nimbula system, or vice versa). A corresponding new tenant is created in a Nimbula system based on a combination of the tenant information and the service information from the shared IDM system. The Nimbula system extracts the tenant name and the service name from a request and asks the shared IDM system to verify that the user actually is a member of the tenant identified by the extracted tenant name. Upon successful authentication of the user, the Nimbula system requests the IDM system for roles that are associated with both the user and the extracted service name. The Nimbula system enable access to the service upon determining whether the requested operation can be performed relative to the specified service based on the roles.

公开(公告)号：US10083317B2

公开(公告)日：2018-09-25

申请号：US15661641

申请日：2017-07-27

Applicant: Oracle International Corporation

Inventor： Jeffrey Pleau ,  Naresh Revanuru

IPC: H04L29/06 ,  G06F21/62

CPC classification number: G06F21/6236 ,  H04L63/0884 ,  H04L63/104

Abstract: Techniques are disclosed for enabling tenant hierarchy information to be migrated directly between different multi-tenant system (e.g., from a shared IDM system to a Nimbula system, or vice versa). A corresponding new tenant is created in a Nimbula system based on a combination of the tenant information and the service information from the shared IDM system. The Nimbula system extracts the tenant name and the service name from a request and asks the shared IDM system to verify that the user actually is a member of the tenant identified by the extracted tenant name. Upon successful authentication of the user, the Nimbula system requests the IDM system for roles that are associated with both the user and the extracted service name. The Nimbula system enable access to the service upon determining whether the requested operation can be performed relative to the specified service based on the roles.

公开(公告)号：US20130086326A1

公开(公告)日：2013-04-04

申请号：US13685357

申请日：2012-11-26

Applicant: Oracle International Corporation

Inventor： Naresh Revanuru

IPC: G06F12/08

CPC classification number: G06F12/0811 ,  G06F12/0842 ,  G06F12/0848

Abstract: A computer-implemented method and system can support a tiered cache, which includes a first cache and a second cache. The first cache operates to receive a request to at least one of update and query the tiered cache; and the second cache operates to perform at least one of an updating operation and a querying operation with respect to the request via at least one of a forward strategy and a listening scheme.

Abstract translation: 计算机实现的方法和系统可以支持包括第一高速缓存和第二高速缓存的分层高速缓存。 第一缓存操作以接收对分层缓存的更新和查询中的至少一个的请求; 并且所述第二高速缓存用于经由前向策略和收听方案中的至少一个执行关于所述请求的更新操作和查询操作中的至少一个。

公开(公告)号：US10805383B2

公开(公告)日：2020-10-13

申请号：US16292669

申请日：2019-03-05

Applicant: Oracle International Corporation

Inventor： Merrick Schincariol ,  Naresh Revanuru

IPC: G06F7/04 ,  H04N7/16 ,  H04L29/08 ,  G06F9/50 ,  G06F21/33 ,  H04L12/24

Abstract: A method and system for managing access to information stored in a data storage system of an organization is provided. In an embodiment, the data storage system may be configured to receive a request from a requester on a client device to access information stored in the data storage system. In some aspects, upon receiving the request, the first system may determine that an access token identifying the requester is stored in a cache in the data storage system. In some aspects, the data storage system may then retrieve one or more roles from the cache. In some examples, the roles may be associated with the access token. In certain embodiments, the data storage system may then be configured to determine that the requester is authorized to access the information based on the roles and provide the information to the requester on the client device.

公开(公告)号：US10462210B2

公开(公告)日：2019-10-29

申请号：US14622638

申请日：2015-02-13

Applicant: Oracle International Corporation

Inventor： Stephen Mayer ,  Naresh Revanuru

IPC: G06F9/46 ,  H04L29/08 ,  G06F9/50 ,  G06F21/33 ,  H04L12/24

Abstract: In some embodiments, a method of automatically configuring nodes in a storage service can include receiving, from an administrative computer, a configuration script at an installation framework executing in a cloud-based storage service. The configuration script can define a plurality of nodes to be deployed in the cloud-based storage service. The method can further include parsing the configuration script to identify configuration data for the plurality of nodes, and automatically installing each node in the plurality of nodes based on the configuration data, and, in response to a deployment instruction, deploying the plurality of nodes in the cloud-based storage service.

公开(公告)号：US20190166022A1

公开(公告)日：2019-05-30

申请号：US16265107

申请日：2019-02-01

Applicant: ORACLE INTERNATIONAL CORPORATION

Inventor： Naresh Revanuru

IPC: H04L12/26 ,  H04L12/24

Abstract: A system and method for enabling a cloud computing environment. In accordance with an embodiment, the system can include a variety of hardware and/or software components and features, which can be used in delivering an infrastructure, platform, and/or applications to support public and private clouds.

公开(公告)号：US09160749B2

公开(公告)日：2015-10-13

申请号：US14010846

申请日：2013-08-27

Applicant: Oracle International Corporation

Inventor： Velmurugan Subramanian ,  Nilesh P. Junnarkar ,  Naresh Revanuru

IPC: H04L29/06

CPC classification number: H04L63/101

Abstract: A system and method for providing whitelist functionality for use with a cloud computing environment. In accordance with an embodiment, software applications being deployed to the cloud are restricted from using certain classes or application program interfaces (APIs). During provisioning by, e.g., a Java cloud services (JCS) infrastructure, or another component of the cloud environment, an application's resources, such as its classes or API calls, can be matched against a whitelist of acceptable resources. If the application fails to be validated against the whitelist, it will not be deployed to the cloud, and the customer/user notified accordingly. In accordance with an embodiment, a whitelist functionality can be packaged within a software development kit (SDK), which customers/users can use during development of their applications, to verify that the applications will comply with, or successfully validate against the whitelist, prior to attempting to deploy the applications to the cloud.

Abstract translation: 用于提供与云计算环境一起使用的白名单功能的系统和方法。 根据实施例，部署到云的软件应用程序被限制在使用某些类或应用程序接口（API）。 在通过例如Java云服务（JCS）基础设施或云环境的另一个组件的供应期间，应用程序的资源（例如其类或API调用）可以与可接受的资源的白名单进行匹配。 如果应用程序无法针对白名单进行验证，则不会将其部署到云端，并且相应地通知客户/用户。 根据一个实施例，白名单功能可以被封装在软件开发工具包（SDK）中，客户/用户可以在开发应用程序期间使用该软件开发工具包来验证应用程序是否将符合或成功地验证白名单 尝试将应用程序部署到云端。

公开(公告)号：US20150227749A1

公开(公告)日：2015-08-13

申请号：US14622648

申请日：2015-02-13

Applicant: Oracle International Corporation

Inventor： Merrick Schincariol ,  Naresh Revanuru

IPC: G06F21/62 ,  G06F21/31

CPC classification number: H04L67/10 ,  G06F9/5072 ,  G06F21/335 ,  H04L41/0806 ,  H04L67/1097

Abstract: A method and system for managing access to information stored in a data storage system of an organization is provided. In an embodiment, the data storage system may be configured to receive a request from a requester on a client device to access information stored in the data storage system. In some aspects, upon receiving the request, the first system may determine that an access token identifying the requester is stored in a cache in the data storage system. In some aspects, the data storage system may then retrieve one or more roles from the cache. In some examples, the roles may be associated with the access token. In certain embodiments, the data storage system may then be configured to determine that the requester is authorized to access the information based on the roles and provide the information to the requester on the client device.

Abstract translation: 提供了一种用于管理存储在组织的数据存储系统中的信息的访问的方法和系统。 在一个实施例中，数据存储系统可以被配置为从客户端设备上的请求者接收请求以访问存储在数据存储系统中的信息。 在一些方面，在接收到请求时，第一系统可以确定将识别请求者的访问令牌存储在数据存储系统中的高速缓存中。 在一些方面，数据存储系统然后可以从缓存中检索一个或多个角色。 在一些示例中，角色可以与访问令牌相关联。 在某些实施例中，数据存储系统然后可以被配置为基于角色来确定请求者被授权访问信息，并将该信息提供给客户端设备上的请求者。