Oracle International Corporation

Kenneth Choi Kil

Jakub Karol Wojciak

Thomas James Andrews

Sreedhar Katti

Jason Anthony Slepicka

Ayman Mohammed Aly Hassan Elmenshawy

A M Helali Mortuza Bhuiyan

Kanish Panwar

Ayman M Elemenshawy

Pritesh Kiritkumar Patel

Operations of a system may include executing a provisioning process that includes provisioning a network entity with a digital certificate for use in a stateless validation protocol. After provisioning the network entity with the digital certificate, the system may include receive a credential request from the network entity that includes the digital certificate and a request for an access credential for accessing a cloud resource. In response to the credential request, the system may execute an access-authorization process with respect to the network entity, including authenticating the digital certificate in accordance with the stateless validation protocol. Upon determining that the network entity authorized to receive an access credential, the system may provision the network entity with the access credential. The network entity may then use the access credential to access the cloud resource.

Authorizing requests for access credentials, for accessing cloud resources, based on successful stateless validation of digital certificates

A system is disclosed that includes capabilities by which a nested sub-resource residing in a service tenancy can access a customer-owned resource residing in a customer tenancy without the use of a cross-tenant policy. The disclosed system provides the ability for a nested sub-resource residing in a service tenancy to obtain the resource principal identity of a higher-level resource residing in the customer tenancy and use the identity of the higher-level resource to access a customer-owned resource residing in the customer tenancy. Using the resource principal identity of its higher-level resource, the sub-resource can access a customer-owned resource that resides in a customer tenancy in a seamless way without having to write a cross-tenancy policy statement that provides permission to the sub-resource to access the customer-owned resource.

Nested resource identity management for cloud resources

Growing community of inventors

Bellevue, WA, United States of America

Kenneth Choi Kil