Dell Products Inc.

Emc IP Holding Company LLC

Ranjit Kollu

Yi Fang

Ching-Yun Chao

David Scott Thompson

Yidong Wang

Sumedh Wasudeo Sathaye

Jennifer M Minarik

Qi Jin

Reut Kovetz

Jingyan Zhao

Jonathon Cwik

Murali Kadala Keloth

A system can identify an attribute-based access control policy that comprises a pair comprising a permission policy and a condition policy that is associated with performing an operation on a computing resource. The system can identify that the attribute-based access control policy corresponds to a role policy that is associated with the account. The system can determine whether the account and the role policy satisfy the attribute-based access control policy with respect to the operation, wherein the determining comprises evaluating whether the computing resource and a required permission of the permission policy is declared in the role policy, and evaluating whether the account and the role policy satisfy the condition policy evaluates to true based on attributes of the account and attributes of the computing resource. The system can, in response to determining that the account satisfy the permission policy and the condition policy, perform the operation on the computing resource.

Attribute-based access control using scoped roles and conditioned permissions dynamic policies

A system, method, and computer-readable medium for performing a data center monitoring and management operation. The data center monitoring and management operation includes: generating a request for a client identifier or an access token for access to a target application programming interface (API); obtaining an access policy associated with the target API; determining a least privileged API access permission based upon the access policy associated with the target API; and, using the client identifier or access token to access the target API when the least privileged API access permission allows access to the target API.

System for enforcing least privileged API access with dynamically scoped identification and access tokens

A method, computer program product, and computer system for maintaining, by a computing device, a plurality of certificates in a credential store using a distributed data source. A certificate of the plurality of certificates may be loaded in an in-memory location from the distributed data source upon startup. A change in at least one certificate of the plurality of certificates may be detected in the distributed data source. The change in the at least one certificate may be loaded from the distributed data source to the in-memory location without requiring a restart of the computing device.

System and method for non-disruptive in-memory certificate management

Growing community of inventors

Norfolk, MA, United States of America

Ranjit Kollu