| CPC G06F 9/547 (2013.01) [H04L 12/66 (2013.01); H04L 63/083 (2013.01)] | 20 Claims |

|
1. A method implemented by a network application programming interface (API) gateway in a cloud configured to communicate with at least a first network and a second network, comprising:
determining identifiers for devices that are connected to the first network and the second network, wherein:
the first network is operated by a first operator;
the second network is operated by a second operator that is different than the first operator; and
the first operator and the second operator are different than a third operator that operates the cloud;
mapping the identifiers for the devices into a hierarchical namespace, wherein a path in the hierarchical namespace defines at least:
an object that identifies one of the first network operated by the first operator or the second network operated by the second operator; and
an object that includes an identifier;
associating credentials with at least part of the hierarchical namespace, wherein the credentials are useable to authenticate calls, initiated on behalf of an application hosted in the cloud, to at least one of the first network operated by the first operator or the second network operated by the second operator;
receiving, from the application, a request that defines a target object in the hierarchical namespace;
matching the target object with a corresponding path in the hierarchical namespace;
determining that the corresponding path is included in the part of the hierarchical namespace associated with the credentials;
determining, using the corresponding path, that the target object is connected to the first network operated by the first operator; and
in response to determining that the corresponding path is included in the part of the hierarchical namespace associated with the credentials and that the target object is connected to the first network operated by the first operator, initiating a call to an operator API associated with the first network operated by the first operator, wherein the call includes the credentials.
|