Transparent, On-Demand Route Determination and Delegated Authorization in a Large-Scale, Decentralized Service Mesh

Abstract: a system can execute a containerized application that comprises a microservice in a decentralized service mesh architecture, and a sidecar. the system can intercept, by the containerized application, a call from the microservice that is directed to a remote endpoint, and direct the call to the sidecar. the system can communicate, by the sidecar to an identity manager, service account credentials associated with the microservice, resulting in receiving an identity token associated with the microservice. the system can determine, by the sidecar, connectivity information of the remote endpoint based on a virtual address of the remote endpoint identified in the call. the system can communicate, by the sidecar to a token exchanger, the identity token and the connectivity information, resulting in receiving an access token and a network route to the remote endpoint. the system can relay, by the sidecar, network traffic between the microservice and the remote endpoint.

Inventor(s): Alan White, Brian Rochford, John Mcaleer, Shashank Holakkal, Helen Walsh

CPC Classification: H04L63/0876 ({based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint})

Search for rejections for patent application number 20250168163