Oracle International Corporation

Danne Lauren Stayskal

Alaa Shaker

Jorge Enrique Reyes Salas

Vladimir Cabildo

Daniel Music Vogel

Gabriel Thomas Hurley

Robert Thomas Schumaker

Service cells may be utilized to limit the blast radius and reduce the probability of operational incidents (e.g., attacks, load spikes, distributed thrash, and the like). Techniques discussed herein provide any suitable number of service cells, each if which include a management plane and a data plane. A work request that includes an intended state of the service cell can be received and stored. One or more execution tasks can be executed by a management plane of the service cell to bring the data plane to a state corresponding to the intended state. The management plane can monitor the actual state of the data plane with respect to the intended state (e.g., the state requested by a user). Over time, the management plane can make modifications to the service cell to ensure the resources of the data plane are ever in conformance with the intended state requested by the user.

Management plane orchestration across service cells

Techniques are described for using a single application to interact with multiple separate realms simultaneously while maintaining data security boundaries. For example, a web browser may be used to access and interact with the multiple separate secure realms while maintaining data security boundaries between the systems. Multiple concurrent sessions may be established for a user between the web browser and multiple realms. Separate sets of security credentials (e.g., credentials used for authentication and authorization purposes) may be used to establish the sessions and for operations performed in the realms via the sessions. The application can also execute logic (e.g., via machine-executable code or instructions) for automating operations performed in the realms, such as, automating the initiation of a certain operation in one realm based upon a response received from another realm, causing operations to be initiated in two different realms such that the operations overlap in the time; and the like.

Techniques for simultaneously accessing multiple isolated systems while maintaining security boundaries

Techniques are disclosed for securely distributing entropy in a distributed environment. The entropy that is distributed may be quantum entropy that is generated by a quantum entropy generator or source. The true random entropy generated by a trusted entropy generator can be communicated securely among computer systems or hosts using secure communication channels that are set up using a portion of the entropy. The distribution techniques enable computer systems and hosts, which would otherwise not have access to such entropy generated by the trusted entropy source, to have access to the entropy.

Secure distribution of entropy

A framework for managing authorization for performance of actions with a computing system. For example, techniques for performing authorization of users and/or clients for access to an infrastructure service provided by a cloud servicer provider (CSP) and/or for performance of actions with the infrastructure service.

Quorum-based authorization

A framework for transferring workloads between security regions of an infrastructure service. For example, techniques for transferring workloads between security regions across a private network based on signatures associated with the security regions.

Secure transfer of workloads across security regions

A framework for managing credentials for access to a secured entity of an infrastructure service. For example, techniques for maintaining credentials for access to the secured entity within a trusted environment while utilizing the credentials for performance of actions within the infrastructure service.

Growing community of inventors

Eastsound, WA, United States of America

Danne Lauren Stayskal