公开(公告)号：US11061929B2

公开(公告)日：2021-07-13

申请号：US16454483

申请日：2019-06-27

Applicant: Oracle International Corporation

Inventor： Xiaoxiao Xu ,  Venkateswara Reddy Medam ,  Kuang-Yu Shih ,  Sudhir Kumar Srinivasan

IPC: G06F16/27 ,  G06F16/21 ,  G06F16/23 ,  G06F9/54 ,  H04L29/06

Abstract: Embodiments operate a multi-tenant cloud system with a first data center. At the first data center, embodiments authenticate a first client and store resources that correspond to the first client, the first data center in communication with a second data center that is configured to authenticate the first client and replicate the resources. In response to upgrading global resources at the first data center to a new version, embodiments generate a manifest file including a listing of global resource types and schemas that are modified or added in response to the upgrading. Embodiments further upgrade global resources based on the manifest file and write the upgraded global resources to a first global database and generate change event messages corresponding to the upgraded global resources.

公开(公告)号：US11652685B2

公开(公告)日：2023-05-16

申请号：US17448961

申请日：2021-09-27

Applicant: Oracle International Corporation

Inventor： Venkateswara Reddy Medam ,  Fannie Ho ,  Kuang-Yu Shih ,  Balakumar Balu ,  Sudhir Kumar Srinivasan

IPC: H04L41/069 ,  G06F9/50 ,  H04L9/40 ,  H04L41/0273

CPC classification number: H04L41/069 ,  G06F9/5061 ,  H04L41/0273 ,  H04L63/08

Abstract: Embodiments operate a multi-tenant cloud system. At a first data center, embodiments authenticate a first client corresponding to a first tenant ID and store resources that correspond to the first client, the first data center in communication with a second data center that is configured to authenticate the first client and replicate the resources. The first data center receives an Application Programming Interface (“API”) request for the first client corresponding to a change to the resources, and generates a change log and corresponding change event message in response to the API request. Embodiments compute a first hash corresponding to the first tenant ID of the change log to determine a first partition of a first queue at the first data center. The first data center pushes the change event message to the second data center via an API call.

公开(公告)号：US11321343B2

公开(公告)日：2022-05-03

申请号：US16555107

申请日：2019-08-29

Applicant: Oracle International Corporation

Inventor： Sudhir Kumar Srinivasan ,  Balakumar Balu ,  Venkateswara Reddy Medam ,  Kuang-Yu Shih ,  Fannie Ho

IPC: G06F7/00 ,  G06F16/25 ,  G06F16/182 ,  G06F9/4401 ,  G06F16/17 ,  H04L29/06

Abstract: Embodiments operate a multi-tenant cloud system. At a first data center, embodiments authenticate a first client and store resources that correspond to the first client, the first data center in communication with a second data center that is configured to authenticate the first client. Embodiments divide the resources into base data and regular data, where the base data is a minimum data needed to allow the resources to be available to the first client at the second data center. Embodiments store the base data on a cloud storage in a base data export file and store the regular data on the cloud storage in a regular data export file. Embodiments export the base data export file to the second data center and when the exporting the base data export file has completed, exports the regular data export file to the second data center.

公开(公告)号：US11308132B2

公开(公告)日：2022-04-19

申请号：US15991057

申请日：2018-05-29

Applicant: Oracle International Corporation

Inventor： Sudhir Kumar Srinivasan ,  Shruthi Chikkanna ,  Nikhil Yograj Vaishnavi ,  Xiaoxiao Xu ,  Gregg Wilson ,  Venkateswara Reddy Medam

IPC: G06F16/00 ,  G06F16/28 ,  G06F16/21 ,  G06F16/2457 ,  H04L29/06 ,  G06F9/50

Abstract: A system stores and uses object relationships in a multi-tenant cloud-based identity and access management (IAM) system by: defining a schema for storing related objects, where the schema includes reference attributes indicative of relationships between the related objects in a database, and the schema defines a relationship type and a persistence scope for each reference attribute; constructing an in-memory representation of the related objects and their relationships based on the schema, where the in-memory representation indicates the relationship type and the persistence scope for each reference attribute; and using the in-memory representation of the related objects to perform an IAM service for a client of the multi-tenant cloud-based IAM system.

公开(公告)号：US10798165B2

公开(公告)日：2020-10-06

申请号：US16174789

申请日：2018-10-30

Applicant: Oracle International Corporation

Inventor： Sudhir Kumar Srinivasan ,  Balakumar Balu ,  Venkateswara Reddy Medam ,  Kuang-Yu Shih

IPC: H04L29/08 ,  G06F16/27 ,  G06F16/83 ,  G06F16/22

Abstract: Embodiments replicate resources in a multi-tenant cloud system. Embodiments receive a master resource, associated with a master account of the cloud system to be replicated, where the master resource includes a master JavaScript Object Notation (“JSON”) object and includes a plurality of master attributes. Embodiments generate a master resource metadata JSON by calculating hash values for each of the master attributes to generate master attribute level hashes and by calculating an aggregate of all of the hash values to generate a master resource level hash. Embodiments store each master attribute of the master JSON object in a separate column of a master database table associated with the master account and store the master resource metadata JSON is in a separate hash column of the master database table. Embodiments replicate the master JSON object to create a replicated JSON object including a plurality of replicated attributes.

公开(公告)号：US10530790B2

公开(公告)日：2020-01-07

申请号：US14862906

申请日：2015-09-23

Applicant: Oracle International Corporation

Inventor： Kuang-Yu Shih ,  Himanshu Sharma ,  Fannie Ho ,  Zhuoxing Mao ,  Sudhir Kumar Srinivasan

IPC: G06F11/00 ,  G06F12/14 ,  G06F12/16 ,  G08B23/00 ,  H04L29/06

Abstract: A privileged account manager is provided for monitoring privileged sessions on target systems of an enterprise. In an embodiment, the privileged account manager is configured to capture metadata related to a privileged session and generate a first activity pattern for the privileged session based on the captured metadata. The first activity pattern may include a sequence of one or more activities performed by a first user during the privileged session. The privileged account manager may be configured to identify a second activity pattern that comprises at least a subset of the one or more activities performed by the first user during the privileged session and determine an appropriate action to be performed for the first activity pattern based on the identification of the second activity pattern. In some embodiments, the privileged account manager may be configured to transmit the action to a second user on a client device.

公开(公告)号：US09148454B1

公开(公告)日：2015-09-29

申请号：US14494738

申请日：2014-09-24

Applicant: Oracle International Corporation

Inventor： Himanshu Sharma ,  Sudhir Kumar Srinivasan ,  Ramaprakash Sathyanarayan ,  Arun Theebaprakasam ,  Buddhika Nandana Kottahachchi

IPC: G06F15/16 ,  H04L29/06 ,  H04L29/08 ,  G06F12/00

CPC classification number: H04L65/60 ,  H04L29/08072 ,  H04L65/1066 ,  H04L65/1069

Abstract: A system and method can support user account management in a computing environment. The computing environment can include a video encoding pool to support load balancing and a managing server, such as a privileged account manager server. The video encoding pool includes a set of nodes that are able to perform one or more video processing tasks for another node. Furthermore, the managing server can receive a request from a managed node in the computing environment for delegating a video processing task, and can select one or more nodes from the video encoding pool to load babalance and to perform the video processing task.

Abstract translation: 系统和方法可以支持计算环境中的用户帐户管理。 计算环境可以包括支持负载平衡的视频编码池和诸如特权帐户管理器服务器之类的管理服务器。 视频编码池包括能够为另一个节点执行一个或多个视频处理任务的一组节点。 此外，管理服务器可以从计算环境中的被管理节点接收用于委托视频处理任务的请求，并且可以从视频编码池中选择一个或多个节点来加载余额并执行视频处理任务。

公开(公告)号：US20160094577A1

公开(公告)日：2016-03-31

申请号：US14862906

申请日：2015-09-23

Applicant: Oracle International Corporation

Inventor： Kuang-Yu Shih ,  Himanshu Sharma ,  Fannie Ho ,  Zhuoxing Mao ,  Sudhir Kumar Srinivasan

IPC: H04L29/06

CPC classification number: H04L63/1425 ,  H04L63/10

Abstract: A privileged account manager is provided for monitoring privileged sessions on target systems of an enterprise. In an embodiment, the privileged account manager is configured to capture metadata related to a privileged session and generate a first activity pattern for the privileged session based on the captured metadata. The first activity pattern may include a sequence of one or more activities performed by a first user during the privileged session. The privileged account manager may be configured to identify a second activity pattern that comprises at least a subset of the one or more activities performed by the first user during the privileged session and determine an appropriate action to be performed for the first activity pattern based on the identification of the second activity pattern. In some embodiments, the privileged account manager may be configured to transmit the action to a second user on a client device.

Abstract translation: 提供了一个特权客户经理来监控企业目标系统上的特权会话。 在一个实施例中，特权帐户管理器被配置为捕获与特权会话相关的元数据，并且基于所捕获的元数据为特权会话生成第一活动模式。 第一活动模式可以包括在特权会话期间第一用户执行的一个或多个活动的序列。 特权帐户管理器可以被配置为识别包括第一用户在特权会话期间执行的一个或多个活动的至少一个子集的第二活动模式，并且基于该第一活动模式确定要针对第一活动模式执行的适当动作 识别第二活动模式。 在一些实施例中，特权帐户管理器可以被配置为在客户端设备上向第二用户发送动作。

公开(公告)号：US20160088045A1

公开(公告)日：2016-03-24

申请号：US14635758

申请日：2015-03-02

Applicant: Oracle International Corporation

Inventor： Himanshu Sharma ,  Sudhir Kumar Srinivasan ,  Ramaprakash Sathyanarayan ,  Arun Theebaprakasam ,  Buddhika Kottahachchi

IPC: H04L29/06

CPC classification number: H04L65/60 ,  H04L29/08072 ,  H04L65/1066 ,  H04L65/1069

Abstract: A system and method can support user account management in a computing environment. The computing environment can include a video encoding pool to support load balancing and a managing server, such as a privileged account manager server. The video encoding pool includes a set of nodes that are able to perform one or more video processing tasks for another node. Furthermore, the managing server can receive a request from a managed node in the computing environment for delegating a video processing task, and can select one or more nodes from the video encoding pool to load babalance and to perform the video processing task.

Abstract translation: 系统和方法可以支持计算环境中的用户帐户管理。 计算环境可以包括支持负载平衡的视频编码池和诸如特权帐户管理器服务器之类的管理服务器。 视频编码池包括能够为另一个节点执行一个或多个视频处理任务的一组节点。 此外，管理服务器可以从计算环境中的被管理节点接收用于委托视频处理任务的请求，并且可以从视频编码池中选择一个或多个节点来加载余额并执行视频处理任务。

公开(公告)号：US09185175B1

公开(公告)日：2015-11-10

申请号：US14494728

申请日：2014-09-24

Applicant: Oracle International Corporation

Inventor： Himanshu Sharma ,  Sudhir Kumar Srinivasan ,  Ramaprakash Sathyanarayan ,  Arun Theebaprakasam ,  Buddhika Nandana Kottahachchi ,  Olaf Stullich

IPC: G06F15/16 ,  H04L29/08 ,  H04L12/26

CPC classification number: H04L67/22 ,  H04L43/045 ,  H04L43/10 ,  H04L67/306

Abstract: A system and method can monitor one or more user sessions on a target system in a computing environment. An account managing system can capture a plurality of user session screen captures that are associated with said one or more user sessions on the target system. Furthermore, the account managing system can compare a user session screen capture, which is captured at a time during said one or more user sessions, with one or more user session screen captures that are recorded before the time. Then, the account managing system can record said user session screen capture if the target system is determined to be active at the time when said user session screen capture is captured.

Abstract translation: 系统和方法可以监视计算环境中目标系统上的一个或多个用户会话。 帐户管理系统可以捕获与目标系统上的所述一个或多个用户会话相关联的多个用户会话屏幕捕获。 此外，帐户管理系统可以将在所述一个或多个用户会话期间的一次捕获的用户会话屏幕捕获与在该时间之前记录的一个或多个用户会话屏幕捕获进行比较。 然后，如果在捕获所述用户会话屏幕捕获时确定目标系统处于活动状态，则帐户管理系统可以记录所述用户会话屏幕捕获。