Hashicorp

International Business Machines Corporation

Bose Corporation

James Lambert

Jeff Mitchell

Michael J Gaffney

Todd Knight

David Joshua Asher

Christopher D Vincent

Matthew J Coles

Christopher Joseph Marchesi

C Scott Lamb

Louis Carl Ruch

A system for accessing computing elements of a cloud computing infrastructure includes a dynamic host interface associated with an identity-based access management system. The dynamic host interface is configured to receive host catalogs from components of the cloud computing infrastructure, each host catalog including one or more host sets, each of the one or more host sets including references to one or more hosts, where each of the one or more hosts represents an addressable computing element. The system further includes a plugin-based hosts model in a memory, and being configured to receive, from the dynamic host interface, the host catalogs for identity-based access to the one or more host sets by a user of a client computer to address the addressable computing element represented by the host.

Plugin based host definitions for a multi-cloud infrastructure

A system and method for accessing and using one or more networked services of a cloud computing infrastructure by a user of a client computer includes an identity-based access management system that is configured to receive a request for a session via an API to use a specific service of the one or more networked services. A credential store includes a credential library that receives and stores credentials for authorizing and enabling the session with the specific service of the one or more networked services. A target service is configured to authorize and enable the session based on the received credentials. A secrets management system is configured to authenticate the user and the client computer to access and use the specific service authorized by the target service, and to generate a lease to a credential that is transmitted to the client computer to authorize the session with the specific service.

Cloud-based secrets management credential store

A process and mechanism, such as a system and/or computer-implemented method, for establishing verified and trusted communications between an upstream and a downstream node in a network or across many nodes in a multi-hop fashion, without needing direct communications from the downstream node to a central authority. Only a single node needs direct communications with the central authority, which may be the central authority itself acting in this capacity. Any other node in the network can connect to a node that is already verified, establish mutual trust, and itself become 'upstream' to a new node or set of nodes. This process and mechanism can apply to any two nodes that are configured to communicate given the same set of conditions without any explicit or implicit multi-hop capability, however, the present process and mechanism is most applicable in multi-hop systems.

Zero-trust multi-hop authentication and authorization

A system, method, and computer program product for self-identification of a device. The disclosure utilizes generation of a public/private key pair, within the device itself, and completes at least a portion of an authentication process within the device itself using a securely stored private key that never leaves the device. By not transferring the private key away from the device, potential vulnerabilities of known systems due to transfer of identification information during or after manufacturing is effectively eliminated.

Secure self-identification of a device

Growing community of inventors

Milford, MA, United States of America

James Lambert