US 11,936,654 B2
Cloud-based user authorization control for storage system access
Jimmy T. Hu, Menlo Park, CA (US); Benjamin Borowiec, San Jose, CA (US); Ethan Miller, Santa Cruz, CA (US); Terence Noonan, Vadnais Heights, MN (US); Constantine Sapuntzakis, Palo Alto, CA (US); Neil Vachharajani, Menlo Park, CA (US); and Daquan Zuo, Mountain View, CA (US)
Assigned to PURE STORAGE, INC., Santa Clara, CA (US)
Filed by PURE STORAGE, INC., Mountain View, CA (US)
Filed on Nov. 8, 2022, as Appl. No. 18/053,402.
Application 18/053,402 is a continuation of application No. 17/064,419, filed on Oct. 6, 2020, granted, now 11,503,031.
Application 17/064,419 is a continuation in part of application No. 15/235,770, filed on Aug. 12, 2016, granted, now 10,834,086, issued on Nov. 10, 2020.
Application 15/235,770 is a continuation of application No. 14/726,449, filed on May 29, 2015, granted, now 9,444,822, issued on Sep. 13, 2016.
Prior Publication US 2023/0068106 A1, Mar. 2, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 9/455 (2018.01); H04L 9/32 (2006.01); H04L 67/1097 (2022.01)
CPC H04L 63/101 (2013.01) [G06F 9/45533 (2013.01); H04L 9/3242 (2013.01); H04L 9/3247 (2013.01); H04L 63/0815 (2013.01); H04L 67/1097 (2013.01); H04L 2209/24 (2013.01); H04L 2209/72 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a storage array access module, of a storage system, a token representing authentication of user credentials and authorized access privileges defining one or more storage services accessible by the user, wherein the token is generated by a cloud-based security module upon authentication of the user credentials and identification of authorized access privileges for the user;
determining, by the storage array access module, that the user is authorized based on the authorized access privileges represented by the token, wherein the access privileges are defined by user profiles including at least one multi-array profile specifying access privileges for a plurality of storage systems; and
initiating, by the storage array access module, a storage session between the user and a storage array, wherein the storage array access module grants access to a plurality of storage arrays for the user based on a single receipt of the token.