Oracle International Corporation

Nitin Handa

Rohit Soni

Nickolas Kavantzas

Prakash Yamuna

Rohit Srivastava

Ankit Goyal

Pankaj Bhandula

A method of providing access to a hardware security module (HSM) partition may include receiving request for access to the HSM partition from a client device. The request may include a leaf certificate signed with a public key associated with a user and a secret key associated with the client device. The method may include verifying the request using the leaf certificate and a trust anchor certificate signed with a public key associated with the client device. The method may include a first connection between the HSM partition and the client device. The method may include verifying the request using the leaf certificate and an authentication certificate stored on the HSM partition. The method may include establishing a second connection between the client device and the HSM partition such that the computing system is isolated from the second connection.

KMS dedicated HSM design (direct access)

In order to provide effective diagnostics and logging of error messages produced during the execution of processes across multiple components, techniques are disclosed for the generating, managing, and processing centralized logs containing those error messages. In particular, the components may write error messages to a centralized log instead of writing the error messages to local log files. The various error messages in the centralized log can be read, identified, and organized. Furthermore, enrichments and/or analytics may be applied to the error messages based on information from a knowledge source or the application of one or more machine learning models. The organized error messages, enrichments, and analytics can be stored in an output log that can be easily retrieved and viewed through a graphical interface. The organized error messages, enrichments, and analytics work together to allow for more effective diagnosing of execution errors.

Techniques for managing and analyzing log data

In order to provide effective diagnostics and logging of error messages produced during the execution of processes across multiple components, systems and methods are disclosed for the generating, managing, and processing centralized logs containing those error messages. In particular, the components may write error messages to a centralized log instead of writing the error messages to local log files. These error messages may include exception messages and diagnostics messages. These various error messages in the centralized log can be read, identified, and organized. Furthermore, enrichments and/or analytics may be applied to the error messages based on information from a knowledge source or the application of one or more machine learning models. The organized error messages, enrichments, and analytics can be stored in an output log that can be easily retrieved and viewed through a graphical interface. The organized error messages, enrichments, and analytics may work together to allow for more effective diagnosing of execution errors.

Embodiments of the invention include techniques for processing messages transmitted between computer networks. In some embodiments, messages such as requests and responses for various types of web services, applications, and other web content may be transmitted between multiple computer networks. One or more intermediary devices or applications, such as a proxy server implemented within a physical or logical subnetwork, may receive, process, and transmit the messages between the communication endpoints. In some embodiments, a proxy server may be configured to operate within a subnetwork of an internal computer network, exposing various web applications and/or services of the internal computer network to external computer networks. Such a proxy server may select specific policies for processing messages based on various message characteristics and the current point in a predetermined processing flow for the message. After selecting the specific policies to be applied to the message, the proxy server may process the message in accordance with the policies and forward the message to its intended destination.

Proxy servers within computer subnetworks

Embodiments of the invention provide techniques for processing messages transmitted between computer networks. Messages, such as requests from client devices for web services and other web content may be transmitted between multiple computer networks. Intermediary devices or applications such as proxy servers may receive, process, and transmit the messages between the communication endpoints. In some embodiments, a reverse proxy server may be configured to dynamically generate Representational State Transfer (REST) services and REST resources within the reverse proxy server. The REST services and REST resources within the reverse proxy server may handle incoming requests from client devices and invoke backend web services, thereby allowing design abstraction and/or enforcement of various security policies on the reverse proxy server.

Growing community of inventors

Foster City, CA, United States of America

Nitin Handa