Citigroup Technology, Inc.

Citibank, N.a.

Robert M Dailey

Alexandra Shulman-Peleg

Bartlomiej Dolata

Carlos Lopes

Javier Caceres

Damodhar R Neelagiri

Ramkumar Pandurangan

Charles Birk

Systems and methods for container orchestration security employ one or more processors that separate a lifecycle of one or more containers into a plurality of predefined container image lifecycle phases; segregates control of the plurality of predefined container image lifecycle phases into a plurality of control environments separately controlled by different enterprise control components isolated from one another. In addition, one or more external processors may generate one or more certificates that are based on the platform, state attributes and meta data for interaction of the container with one or more external nodes. The one or more processors may also control the promotion, update and deletion of container images between the plurality of lifecycle phases and registries in different control environments as well as between the enterprise registries and the plurality of other registries that are part of multiple external clouds.

Systems and methods for container orchestration security

Identity and access control systems and methods employ a registry that receives a request for confidential data from a client, together with a secure enrollment profile identifier for the client, and generates and sends a challenge token to the client, which encrypts and returns the encrypted challenge token to the registry. Thereafter, the registry confirms that the encrypted challenge token is validly encrypted and calls up a security backend with authorization to provide the requested confidential data to client, and the security backend sends the requested confidential data to the client.

Systems and methods for identity and access control

Growing community of inventors

Richboro, PA, United States of America

Robert M Dailey