Abstract: Container orchestration software that controls instantiation, deployment, revision and removal of containers located in more than one cloud (that is, each container is located in a single cloud, but the set of orchestrated containers includes containers in more than one cloud). In some embodiments, the container orchestration software takes the form of a master node. In some embodiments, the container orchestration software takes the form of a Kubernetes type master node.

Abstract: A computer-implemented method for context-based, fine-grained data access control to microservice data is provided. The method may include retrieving a sensor data snapshot corresponding to the microservice data from a sensor node array of a microservice platform, and encrypting the sensor data snapshot according to a functional encryption scheme to generate an encrypted sensor data snapshot. The method may further include receiving a registration request from a user device, detecting an occurrence of the user-defined event based on sensory event data corresponding to the user event data, and generating a restricted-access functional decryption key in response to detecting the occurrence of the user-defined event. The restricted-access functional decryption key may be communicated to the user device for decryption of the encrypted sensor data snapshot according to an access control policy corresponding to a user-defined event associated with the user device.

Abstract: A computer-implemented method for context-based, fine-grained data access control to microservice data is provided. The method may include retrieving a sensor data snapshot corresponding to the microservice data from a sensor node array of a microservice platform, and encrypting the sensor data snapshot according to a functional encryption scheme to generate an encrypted sensor data snapshot. The method may further include receiving a registration request from a user device, detecting an occurrence of the user-defined event based on sensory event data corresponding to the user event data, and generating a restricted-access functional decryption key in response to detecting the occurrence of the user-defined event. The restricted-access functional decryption key may be communicated to the user device for decryption of the encrypted sensor data snapshot according to an access control policy corresponding to a user-defined event associated with the user device.