Patents by Inventor Daniel M. Vogel
Daniel M. Vogel has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 11949735Abstract: Techniques for managing network-accessible infrastructure metadata are provided. A method includes receiving a resource request comprising resource metadata corresponding to a network-accessible infrastructure resource, determining whether to commit the resource request based at least in part on a constraint associated with the network-accessible infrastructure resource, and, in accordance with a determination to commit the resource request: generating, by the computer system, a resource identifier describing resource metadata in accordance with the resource request, storing, by the computer system, the resource metadata in a data store in communication with the computer system, receiving, by the computer system, a data request to provide the resource metadata described by the resource identifier, and providing, by the computer system, the resource metadata described by the resource identifier in accordance with the data request.Type: GrantFiled: December 13, 2021Date of Patent: April 2, 2024Assignee: Oracle International CorporationInventors: Mohamed Saber Abdelfattah Hassan, Jonathan Jorge Nadal, Nathaniel Martin Glass, Yu Wu, Daniel M. Vogel, Geoff Hopcraft
-
Publication number: 20240071593Abstract: Systems and methods are disclosed that provide smart alerts to users, e.g., alerts to users about diabetic states that are only provided when it makes sense to do so, e.g., when the system can predict or estimate that the user is not already cognitively aware of their current condition, e.g., particularly where the current condition is a diabetic state warranting attention. In this way, the alert or alarm is personalized and made particularly effective for that user. Such systems and methods still alert the user when action is necessary, e.g., a bolus or temporary basal rate change, or provide a response to a missed bolus or a need for correction, but do not alert when action is unnecessary, e.g., if the user is already estimated or predicted to be cognitively aware of the diabetic state warranting attention, or if corrective action was already taken.Type: ApplicationFiled: October 24, 2023Publication date: February 29, 2024Inventors: Anna Leigh DAVIS, Scott M. BELLIVEAU, Naresh C. BHAVARAJU, Leif N. BOWMAN, Rita M. CASTILLO, Alexandra Elena CONSTANTIN, Rian W. DRAEGER, Laura J. DUNN, Gary Brian GABLE, Arturo GARCIA, Thomas HALL, Hari HAMPAPURAM, Christopher Robert HANNEMANN, Anna Claire HARLEY-TROCHIMCZYK, Nathaniel David HEINTZMAN, Andrea Jean JACKSON, Lauren Hruby JEPSON, Apurv Ullas KAMATH, Katherine Yerre KOEHLER, Aditya Sagar MANDAPAKA, Samuel Jere MARSH, Gary A. MORRIS, Subrai Girish PAI, Andrew Attila PAL, Nicholas POLYTARIDIS, Philip Thomas PUPA, Eli REIHMAN, Ashley Anne RINDFLEISCH, Sofie Wells SCHUNK, Peter C. SIMPSON, Daniel S. SMITH, Stephen J. VANSLYKE, Matthew T. VOGEL, Tomas C. WALKER, Benjamin Elrod WEST, Atiim Joseph WILEY
-
Patent number: 11880791Abstract: Techniques are disclosed for creating an attachment between two compute instances. An infrastructure and a generalized method is described for attaching two or more cloud resources (e.g., two compute instances) in spite of the compute resources being provisioned by two different services from different cloud tenancies. An automated process is described that is executed for wiring the compute instances. The automated process can be generally applied to attach any two compute instances providing two different services and provisioned from two different service tenancies.Type: GrantFiled: August 27, 2021Date of Patent: January 23, 2024Assignee: Oracle International CorporationInventors: A M Helali Mortuza Bhuiyan, Johannes Klein, Jyotishman Nag, Sahitya Gollapudi, Daniel M. Vogel
-
Patent number: 11811679Abstract: Techniques are described for enabling resources within a cloud computing system to interact with each other. In certain embodiments, a base identifier assigned to a first resource is extended by mapping the base identifier onto a second identifier assigned to a logical resource that is built upon the first resource. This allows the first resource to have two identities, one identity indicating what the first resource is (e.g., a particular compute instance) and another identity indicating the purpose of the first resource (e.g., operating as a database for a particular tenancy). Consequently, the first resource may be provided with access privileges different from those associated with the base identifier. For example, the first resource may access another resource in the tenancy using the second identifier, but may have no access to the other resource using the base identifier.Type: GrantFiled: March 10, 2021Date of Patent: November 7, 2023Assignee: Oracle International CorporationInventors: Ayman Mohammed Aly Hassan Elmenshawy, Girish Nagaraja, Daniel M. Vogel
-
Publication number: 20230351288Abstract: Techniques are disclosed for creating an attachment between two compute instances. An infrastructure and a generalized method is described for attaching two or more cloud resources (e.g., two compute instances) in spite of the compute resources being provisioned by two different services from different cloud tenancies. An automated process is described that is executed for wiring the compute instances. The automated process can be generally applied to attach any two compute instances providing two different services and provisioned from two different service tenancies.Type: ApplicationFiled: June 28, 2023Publication date: November 2, 2023Applicant: Oracle International CorporationInventors: A M Helali Mortuza Bhuiyan, Johannes Klein, Jyotishman Nag, Sahitya Gollapudi, Daniel M. Vogel
-
Patent number: 11757636Abstract: Techniques are described for enabling resources within a cloud computing system to interact with each other. In certain embodiments, a resource is assigned a digital token that provides certain access privileges for the duration in which the digital token is valid. The digital token permits the resource to have access for a duration sufficient to perform some operation (e.g., run one-time code or the same code periodically on a scheduled basis), but without extending the level of access for significantly longer than necessary to complete the operation. Each time the resource principal is to perform the operation, the token can be reissued to the resource to provide the resource with time-limited access privileges. The use of this short-lived token avoids having to create permanent credentials for the resource.Type: GrantFiled: March 10, 2021Date of Patent: September 12, 2023Assignee: Oracle International CorporationInventors: Ayman Mohammed Aly Hassan Elmenshawy, Girish Nagaraja, Daniel M. Vogel
-
Publication number: 20230247087Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment. The first cloud infrastructure receives a request from a user associated with an account in the second cloud infrastructure. The request corresponding to using a service provided by the first cloud infrastructure. A tenancy is created for the user in the first cloud infrastructure to enable the user to utilize the service, and a link-resource object is created that includes information linking the tenancy of the user in the first cloud infrastructure to the account of the user in the second cloud infrastructure, the link-resource object enabling the user to utilize the service provided by the first cloud infrastructure.Type: ApplicationFiled: February 1, 2023Publication date: August 3, 2023Applicant: ORACLE INTERNATIONAL CORPORATIONInventors: Girish Nagaraja, Venkata Subbarao Evani, Daniel M. Vogel, Matthew Victor Rushton
-
Publication number: 20230247016Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment. The first cloud infrastructure receives a request from a user associated with an account in the second cloud infrastructure. The request corresponding to using a service provided by the first cloud infrastructure. A tenancy is created for the user in the first cloud infrastructure to enable the user to utilize the service, and a link-resource object is created that includes information linking the tenancy of the user in the first cloud infrastructure to the account of the user in the second cloud infrastructure, the link-resource object enabling the user to utilize the service provided by the first cloud infrastructure.Type: ApplicationFiled: February 1, 2023Publication date: August 3, 2023Applicant: Oracle International CorporationInventors: Girish Nagaraja, Venkata Subbarao Evani, Daniel M. Vogel, Atul Goyal
-
Publication number: 20230244517Abstract: Techniques are described for providing a multi-cloud control plane (MCCP) in a first cloud infrastructure (included in a first cloud environment provided by a first cloud services provider) that enables services and/or resources provided in the first cloud infrastructure to be utilized by users of a second cloud environment. The first cloud infrastructure receives a request from a user associated with an account in the second cloud infrastructure. The request corresponding to using a service provided by the first cloud infrastructure. A tenancy is created for the user in the first cloud infrastructure to enable the user to utilize the service, and a link-resource object is created that includes information linking the tenancy of the user in the first cloud infrastructure to the account of the user in the second cloud infrastructure, the link-resource object enabling the user to utilize the service provided by the first cloud infrastructure.Type: ApplicationFiled: February 1, 2023Publication date: August 3, 2023Applicant: Oracle International CorporationInventors: Girish Nagaraja, Venkata Subbarao Evani, Daniel M. Vogel
-
Publication number: 20230222204Abstract: A framework for managing credentials for access to a secured entity of an infrastructure service. For example, techniques for maintaining credentials for access to the secured entity within a trusted environment while utilizing the credentials for performance of actions within the infrastructure service.Type: ApplicationFiled: January 7, 2022Publication date: July 13, 2023Applicant: Oracle International CorporationInventors: Daniel M. Vogel, Danne Lauren Stayskal
-
Publication number: 20230224146Abstract: A framework for managing authorization for performance of actions with a computing system. For example, techniques for performing authorization of users and/or clients for access to an infrastructure service provided by a cloud servicer provider (CSP) and/or for performance of actions with the infrastructure service.Type: ApplicationFiled: January 7, 2022Publication date: July 13, 2023Applicant: Oracle International CorporationInventors: Danne Lauren Stayskal, Daniel M. Vogel
-
Publication number: 20230069520Abstract: Techniques are disclosed for creating an attachment between two compute instances. An infrastructure and a generalized method is described for attaching two or more cloud resources (e.g., two compute instances) in spite of the compute resources being provisioned by two different services from different cloud tenancies. An automated process is described that is executed for wiring the compute instances. The automated process can be generally applied to attach any two compute instances providing two different services and provisioned from two different service tenancies.Type: ApplicationFiled: August 27, 2021Publication date: March 2, 2023Applicant: Oracle International CorporationInventors: A M Helali Mortuza Bhuiyan, Johannes Klein, Jyotishman Nag, Sahitya Gollapudi, Daniel M. Vogel
-
Patent number: 11418343Abstract: Techniques are described for enabling resources within a cloud computing system to interact with each other. In certain embodiments, a token renewal mechanism is provided for extending the duration in which a first resource can access another resource. The token renewal mechanism can involve the first resource periodically causing a new credential to be generated for itself and then communicating the new credential to an identity and access management (IAM) system. The new credential may be generated for compliance with a credential rotation policy specifying that credentials should be changed after a certain period of time. The IAM system may associate a digital access token with the new credential so that for subsequent requests, the IAM system will only recognize the resource principal based upon the new credential. The digital token can be invalidated if a new credential is not changed within the specified period of time.Type: GrantFiled: March 10, 2021Date of Patent: August 16, 2022Assignee: Oracle International CorporationInventors: Ayman Mohammed Aly Hassan Elmenshawy, Girish Nagaraja, Daniel M. Vogel
-
Publication number: 20220138340Abstract: Techniques for generating and using reader-friendly policy statements are disclosed. In one or more embodiments, a policy management service receives a request for an authorization policy in a language-localized syntax. The policy management service identifies a syntax graph corresponding to the authorization policy and traverses the syntax graph to obtain at least a requestor variable value associated with the authorization policy, an action variable value associated with the authorization policy, a resource variable value associated with the authorization policy, and a location variable value associated with the authorization policy. The policy authorization service generates a reader-friendly policy statement in the language-localized syntax using the requestor variable value, the action variable value, the resource variable value, and the location variable value. Responsive to the request, the policy authorization service provides the reader-friendly policy statement.Type: ApplicationFiled: January 19, 2022Publication date: May 5, 2022Applicant: Oracle International CorporationInventors: Helali Bhuiyan, Daniel M. Vogel
-
Publication number: 20220103616Abstract: Techniques for managing network-accessible infrastructure metadata are provided. A method includes receiving a resource request comprising resource metadata corresponding to a network-accessible infrastructure resource, determining whether to commit the resource request based at least in part on a constraint associated with the network-accessible infrastructure resource, and, in accordance with a determination to commit the resource request: generating, by the computer system, a resource identifier describing resource metadata in accordance with the resource request, storing, by the computer system, the resource metadata in a data store in communication with the computer system, receiving, by the computer system, a data request to provide the resource metadata described by the resource identifier, and providing, by the computer system, the resource metadata described by the resource identifier in accordance with the data request.Type: ApplicationFiled: December 13, 2021Publication date: March 31, 2022Applicant: Oracle International CorporationInventors: Mohamed Saber Abdelfattah Hassan, Jonathan Jorge Nadal, Nathaniel Martin Glass, Yu Wu, Daniel M. Vogel, Geoff Hopcraft
-
Patent number: 11288390Abstract: Techniques for generating and using reader-friendly policy statements are disclosed. In one or more embodiments, a policy management service receives a request for an authorization policy in a language-localized syntax. The policy management service identifies a syntax graph corresponding to the authorization policy and traverses the syntax graph to obtain at least a requestor variable value associated with the authorization policy, an action variable value associated with the authorization policy, a resource variable value associated with the authorization policy, and a location variable value associated with the authorization policy. The policy authorization service generates a reader-friendly policy statement in the language-localized syntax using the requestor variable value, the action variable value, the resource variable value, and the location variable value. Responsive to the request, the policy authorization service provides the reader-friendly policy statement.Type: GrantFiled: July 26, 2019Date of Patent: March 29, 2022Assignee: Oracle International CorporationInventors: Helali Bhuiyan, Daniel M. Vogel
-
Patent number: 11233845Abstract: Techniques for managing network-accessible infrastructure metadata are provided. A method includes receiving a resource request comprising resource metadata corresponding to a network-accessible infrastructure resource, determining whether to commit the resource request based at least in part on a constraint associated with the network-accessible infrastructure resource, and, in accordance with a determination to commit the resource request: generating, by the computer system, a resource identifier describing resource metadata in accordance with the resource request, storing, by the computer system, the resource metadata in a data store in communication with the computer system, receiving, by the computer system, a data request to provide the resource metadata described by the resource identifier, and providing, by the computer system, the resource metadata described by the resource identifier in accordance with the data request.Type: GrantFiled: July 6, 2020Date of Patent: January 25, 2022Assignee: Oracle International CorporationInventors: Mohamed Saber Abdelfattah Hassan, Jonathan Jorge Nadal, Nathaniel Martin Glass, Yu Wu, Daniel M. Vogel, Geoff Hopcraft
-
Publication number: 20220006855Abstract: Techniques for managing network-accessible infrastructure metadata are provided. A method includes receiving a resource request comprising resource metadata corresponding to a network-accessible infrastructure resource, determining whether to commit the resource request based at least in part on a constraint associated with the network-accessible infrastructure resource, and, in accordance with a determination to commit the resource request: generating, by the computer system, a resource identifier describing resource metadata in accordance with the resource request, storing, by the computer system, the resource metadata in a data store in communication with the computer system, receiving, by the computer system, a data request to provide the resource metadata described by the resource identifier, and providing, by the computer system, the resource metadata described by the resource identifier in accordance with the data request.Type: ApplicationFiled: July 6, 2020Publication date: January 6, 2022Applicant: Oracle International CorporationInventors: Mohamed Saber Abdelfattah Hassan, Jonathan Jorge Nadal, Nathaniel Martin Glass, Yu Wu, Daniel M. Vogel, Geoff Hopcraft
-
Publication number: 20210409219Abstract: Techniques are described for enabling resources within a cloud computing system to interact with each other. In certain embodiments, a token renewal mechanism is provided for extending the duration in which a first resource can access another resource. The token renewal mechanism can involve the first resource periodically causing a new credential to be generated for itself and then communicating the new credential to an identity and access management (IAM) system. The new credential may be generated for compliance with a credential rotation policy specifying that credentials should be changed after a certain period of time. The IAM system may associate a digital access token with the new credential so that for subsequent requests, the IAM system will only recognize the resource principal based upon the new credential. The digital token can be invalidated if a new credential is not changed within the specified period of time.Type: ApplicationFiled: March 10, 2021Publication date: December 30, 2021Applicant: Oracle International CorporationInventors: Ayman Mohammed Aly Hassan Elmenshawy, Girish Nagaraja, Daniel M. Vogel
-
Publication number: 20210409218Abstract: Techniques are described for enabling resources within a cloud computing system to interact with each other. In certain embodiments, a resource is assigned a digital token that provides certain access privileges for the duration in which the digital token is valid. The digital token permits the resource to have access for a duration sufficient to perform some operation (e.g., run one-time code or the same code periodically on a scheduled basis), but without extending the level of access for significantly longer than necessary to complete the operation. Each time the resource principal is to perform the operation, the token can be reissued to the resource to provide the resource with time-limited access privileges. The use of this short-lived token avoids having to create permanent credentials for the resource.Type: ApplicationFiled: March 10, 2021Publication date: December 30, 2021Applicant: Oracle International CorporationInventors: Ayman Mohammed Aly Hassan Elmenshawy, Girish Nagaraja, Daniel M. Vogel