Paypal, Inc.

Hewlett-packard Development Company, L.p.

Ebay, Incorporated

Jeffrey David Meyer

Norihiro Edwin Aoki

Prashant Jamkhedkar

Aravindan Ranganathan

Sandeep Kumar

Justin Matthew White

Upendra S Mardikar

Alexander C Ranous

Joshua Knox

Satya Ganesh Simhachalam Malla Venkata

Kin Kee

Mavendra Sharma

Peter Zhe Chu

Jun Zhang

Benjamin Gregg Listwon

Glenna G Mayo

Thomas A Murray

Rajal Rasik Shah

Michael James Baumann

Joan Simon Raventos

Raghavendra Nagappa

Timothy Ross Coulter

Kenneth Chao-kang Chu

Benjamin Matthew Ronick

Jacqueline Koesters

Savio A Menezes

Daniel O'Connor

Ilya Alexandrovich Izrailevsky

Tiffany Wood

Patrick Andre Blanc

A method for facilitating transactions between tenants in in a multi-tenant architecture system is discussed. The method includes receiving a request, at a multi-tenant platform, from a first service of a first tenant of the multi-tenant platform to access a second service of a second tenant of the multi-tenant platform to perform a transaction, in which the request includes a first access token usable to authenticate the transaction with the first tenant. The method includes generating, by the multi-tenant platform using the first access token, a universal access token. The method includes generating, by the multi-tenant platform using the universal access token, a second access token useable to authenticate the transaction with the second tenant. The method includes using, by the multi-tenant platform, the second access token to communicate with the second service to perform the transaction.

Transactions between services in a multi-tenant architecture

A method for using unified transaction services in a multi-tenant architecture system is discussed. The method includes receiving a request, at a first service provider, to provide a first transaction service for a user. The method includes accessing a first representation of the first service provider in a first hierarchical data structure, the first hierarchical data structure being managed by a second service provider, the second service provider managing user identity of the user. The method includes determining, based on the first representation, that transaction resources required for completion of the first transaction service are provided at the second service provider using a resource representation. The method also includes, responsive to determining that the transaction resources are accessible at the first service provider, accessing, at the first service provider, the transaction resources via the resource representation.

Unified transaction services for multi-tenant architectures

A method for processing disputes in a multi-tenant architecture system includes receiving, at a first service provider, a dispute request from a second service provider that manages entity identities of a plurality of customers. The dispute request indicates a disputed transaction between a customer of the plurality of customers and another entity. The method includes accessing an identity manager to determine a customer representation, the identity manager previously onboarded the plurality of customers as a plurality of customer representations. The identity manager is hosted by the first service provider that manages customer representations corresponding to entity identities of the customers. The dispute request is propagated with the customer representation to a dispute management engine that determines an outcome for the dispute, the determination based on characteristics of the disputed transaction and on characteristics of the customer. The method also includes propagating the determination to the second service provider.

Multi-tenant dispute services

A method for using unified identities in a multi-tenant architecture system is discussed. The method includes receiving a request, at a first service provider, to provide a service for a user. The method includes accessing a representation of a second service provider in a first hierarchical data structure managed by the first service provider. The method includes determining that user data required for the service is managed by the second service provider that manages user identity of the user. The method includes determining that the representation is linked with a full identity reference for the second service provider in a second hierarchical data structure managed by the second service provider. The method includes accessing the user data at the second hierarchical data structure using the full identity reference. The method includes accessing the service via the lightweight identity reference and using the user data at the first service provider.

Unified identity services for multi-tenant architectures

A method for facilitating transactions by tenants in a multi-tenant architecture system is discussed. The method includes generating, with a multi-tenant computer system, a first representation of an entity in a first hierarchical data structure associated with an entity interface tenant of the multi-tenant computer system. The method includes receiving, with the multi-tenant computer system, a set of entity-specific policies useable to generate requests to individual ones of a plurality of transaction processing computer systems. The method includes generating, with the multi-tenant computer system, a second representation of the entity in a second hierarchical data structure associated with a particular transaction processing service tenant of a plurality of transaction processing service tenants of the multi-tenant computer system. The method includes linking, with the multi-tenant computer system, the first representation and the second representation in a unified hierarchical data structure useable to provide a unified identity for the entity for requests.

A method for applying agency and regulation modeling in a multi-tenant architecture system includes accessing merchant's representation in an identity manager. The merchant is managed via a full representation by an original identity manager. The method includes performing a first service for the merchant via the representation, and determining, based on results of the first service and on policies of the first service provider, that performance of a second service is required for completion of the first service. The second service is provided by a second service provider onboarded into the first service provider, where the second service amends policy requirements of the first service provider. The method includes accessing a first subservice of the second service using the representation to generate second results for use at a second subservice of the second service, the second subservice configured to use transaction resources of the first representation.

Agency and regulation modeling for transactions in multi-tenant systems

A method for managing entities in a multi-tenant marketplace architecture system is discussed. The method includes determining that a merchant is represented as a first representation in a first hierarchical data structure and as a second representation in a second hierarchical data structure, where both the first and second hierarchical data structures are managed by a first service provider. The merchant is being managed via a full representation in an original hierarchical data structure by a marketplace service provider. The first and second representations provide outbound services via the first hierarchical data structure and via the second hierarchical data structure, respectively. The method also includes linking the first representation with the second representation to configure the first and second representations for propagating results of an inbound service applied to one of the first and second representations to a remaining one of the first and second representations.

Multi-tenant marketplace architectures

A method for facilitating transactions between tenants in a multi-tenant architecture system is discussed. The method includes receiving a request, at a multi-tenant platform, from a first service of a first tenant of the multi-tenant platform to access a second service of a second tenant of the multi-tenant platform to perform a transaction, in which the request includes a first access token usable to authenticate the transaction with the first tenant. The method includes generating, by the multi-tenant platform using the first access token, a universal access token. The method includes generating, by the multi-tenant platform using the universal access token, a second access token useable to authenticate the transaction with the second tenant. The method includes using, by the multi-tenant platform, the second access token to communicate with the second service to perform the transaction.

Systems and methods are disclosed for receiving an access request from a user device, the access request including an identity claim for a user; evaluating a risk of access based on matching an attribute of the user device with attributes stored in a user information database; authenticating the access request based on the identity claim and the risk evaluation to determine an authentication confidence level; generating a token based on the confidence level and the attribute matched; producing an authorization response based on inputs from the token, a risk based access control, a role based access control, and an attribute based access control, in which the authorization response determines whether to allow access to a system, deny access to the system, or request additional input from the user device.

Role-based attribute based access control (RABAC)

Systems and methods provide a mechanism to create and maintain web pages and other types of output pages. The system and methods use an author markup language (AML) to define output pages. Additionally, a Component Markup Language (CML) may be used to define components that may be referenced by the AML. The AML and CML may be translated to an intermediate format, which may then be further processed at runtime to combine dynamic data with the intermediate format to produce the output page.

Method and apparatus to author and manage pages of a website

Growing community of inventors

Los Gatos, CA, United States of America

Jeffrey David Meyer