20240037267. Authenticating Accesses to a Shared Datastore of a Multi-Tenant Computer System simplified abstract (Salesforce, Inc.)
Organization Name
Inventor(s)
Helen Kwong of Danville CA (US)
Benjamin Busjaeger of San Carlos CA (US)
This abstract first appeared for US patent application 20240037267 titled 'Authenticating Accesses to a Shared Datastore of a Multi-Tenant Computer System
Simplified Explanation
The abstract describes a computer system that authenticates access to a shared data store by a shared service running on the system. The shared service can access the data store to execute requests from multiple cloud computing services. The requests include information about a specific tenant and a tenant grouping indicator. The system verifies the request by cryptographically verifying it and checking if the specific tenant is associated with the tenant grouping indicator. Once authenticated, the shared service executes the request by accessing the shared data store.
- The system allows multiple cloud computing services to access a shared data store through a shared service.
- Requests from the cloud computing services include information about a specific tenant and a tenant grouping indicator.
- The system verifies the requests by cryptographically verifying them and checking the association between the specific tenant and the tenant grouping indicator.
- Authenticated requests are executed by the shared service, which accesses the shared data store.
Potential Applications:
- Multi-tenant cloud computing platforms
- Shared data storage systems
- Authentication and access control systems
Problems Solved:
- Ensuring secure and authenticated access to a shared data store in a multi-tenant environment
- Managing access permissions for different tenants and tenant groups
- Verifying the authenticity of requests from cloud computing services
Benefits:
- Improved security and authentication for accessing shared data stores
- Efficient execution of requests from multiple cloud computing services
- Simplified management of access permissions for different tenants and tenant groups
Original Abstract Submitted
a multi-tenant computer system authenticates access to a shared datastore by a shared service running on the multi-tenant computer system. the shared service is operable to access the shared datastore to execute requests from a plurality of multi-tenant cloud computing services. the requests include an indication of a particular tenant and a particular tenant grouping indicator. requests are authenticated by cryptographically verifying the request and verifying that the particular tenant is associated with the particular tenant grouping indicator. in response to authenticating a request, the shared service accesses the shared datastore to execute the first request.
