US 11,934,548 B2
Centralized access control for cloud relational database management system resources
Yueren Wang, Redmond, WA (US); Elnata Degefa, Sammamish, WA (US); Andreas Wolter, Redmond, WA (US); Steven Richard Gott, Bellevue, WA (US); Nitish Gupta, Seattle, WA (US); Raghav Kaushik, Kirkland, WA (US); Rakesh Khanduja, Bangalore (IN); Shafi Ahmad, Bangalore (IN); Dilli Dorai Minnal Arumugam, Campbell, CA (US); Pankaj Prabhakar Naik, Redmond, WA (US); and Nikolas Christopher Ogg, Seattle, WA (US)
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC, Redmond, WA (US)
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed on Aug. 12, 2021, as Appl. No. 17/401,165.
Prior Publication US 2022/0382892 A1, Dec. 1, 2022
Int. Cl. G06F 16/95 (2019.01); G06F 12/0875 (2016.01); G06F 15/173 (2006.01); G06F 16/957 (2019.01); G06F 21/62 (2013.01)
CPC G06F 21/6218 (2013.01) [G06F 12/0875 (2013.01); G06F 15/17331 (2013.01); G06F 16/9574 (2019.01); G06F 2212/45 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system that comprises:
a memory that stores program instructions; and
a processing system, comprising at least one processor, configured to execute the program instructions that, when executed, cause the processing system to:
receive at each of a plurality of database servers in the system, from a central policy storage managed externally to the plurality of database servers, a plurality of external access policies that correspond to users;
in response to receiving the plurality of external access policies, store at each of the plurality of database servers, in a cache of a respective database, the plurality of external access policies that are received;
responsive to a resource access request received from a device of a user that specifies a resource internal to the database server, determine an access condition via a policy engine of one of the database servers, based at least on one of the plurality of external access policies and one of a plurality of internal access policies;
determine that both the one of the plurality of external access policies and the one of the plurality of internal access policies indicate a grant of access; and
provide data associated with the resource to the device of the user based at least on the access condition being met to access the resource.