US 12,301,556 B2
Propagating identities across different cloud services providers
Girish Nagaraja, Sammamish, WA (US); Venkata Subbarao Evani, Fremont, CA (US); Daniel M. Vogel, Seattle, WA (US); Atul Goyal, Tracy, CA (US); and Norka Beatriz Lucena Mogollon, Kirkland, WA (US)
Assigned to Oracle International Corporation, Redwood Shores, CA (US)
Filed by Oracle International Corporation, Redwood Shores, CA (US)
Filed on Feb. 1, 2023, as Appl. No. 18/162,947.
Claims priority of provisional application 63/388,921, filed on Jul. 13, 2022.
Claims priority of provisional application 63/357,541, filed on Jun. 30, 2022.
Claims priority of provisional application 63/339,297, filed on May 6, 2022.
Claims priority of provisional application 63/336,811, filed on Apr. 29, 2022.
Claims priority of provisional application 63/336,701, filed on Apr. 29, 2022.
Claims priority of provisional application 63/333,965, filed on Apr. 22, 2022.
Claims priority of provisional application 63/321,614, filed on Mar. 18, 2022.
Claims priority of provisional application 63/306,918, filed on Feb. 4, 2022.
Claims priority of provisional application 63/306,007, filed on Feb. 2, 2022.
Prior Publication US 2023/0247016 A1, Aug. 3, 2023
Int. Cl. H04L 9/40 (2022.01); G06F 9/455 (2018.01); H04L 9/32 (2006.01); H04L 67/10 (2022.01); H04L 67/306 (2022.01)
CPC H04L 63/0815 (2013.01) [G06F 9/45558 (2013.01); H04L 9/3213 (2013.01); H04L 63/08 (2013.01); H04L 67/10 (2013.01); H04L 67/306 (2013.01); G06F 2009/45587 (2013.01); G06F 2009/45595 (2013.01)] 16 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a multi-cloud infrastructure included in a first cloud infrastructure provided by a first cloud service provider (CSP), a first request from a user associated with an account in a second cloud infrastructure provided by a second CSP, the first request requesting use of a service provided by the first cloud infrastructure and including a first token issued by the second CSP;
validating, by the multi-cloud infrastructure, the first token issued by the second CSP;
responsive to successfully validating the first token, sending by the multi-cloud infrastructure, a second request requesting a second token to an identity system of the first CSP, wherein the second request is a signed request including the first token, and wherein the identity system of the first CSP validates the first token based on a public key obtained from the second cloud infrastructure;
obtaining, by the multi-cloud infrastructure, the second token issued by the first CSP, wherein the second token is usable by the service, and the first token is not usable by the service; and
transmitting, by the multi-cloud infrastructure, the second token to the service, wherein the second token enables the user to utilize the service provided by the first cloud infrastructure.