Abstract: The disclosure herein describes securing access to a service resource within a security boundary. A security gateway instance receives a request from an edge deployment outside the security boundary. The request includes identity data identifying the edge deployment. The identity data is validated based on allowed identity data of the security gateway instance and based on a validation handler associated with the service resource. Based on validating the identity data and validating the request, the identity data is transformed using security data specific to the security gateway instance. The transformed identity data indicates the request has been validated by the security gateway instance. Based on transforming the identity data of the request, the transformed identity data and the request are forwarded to the service resource via a network link within the security boundary, wherein the service resource is configured to process the request based on identifying the transformed identity data.

Abstract: The disclosure herein describes securing access to a service resource within a security boundary. A security gateway instance receives a request from an edge deployment outside the security boundary. The request includes identity data identifying the edge deployment. The identity data is validated based on allowed identity data of the security gateway instance and based on a validation handler associated with the service resource. Based on validating the identity data and validating the request, the identity data is transformed using security data specific to the security gateway instance. The transformed identity data indicates the request has been validated by the security gateway instance. Based on transforming the identity data of the request, the transformed identity data and the request are forwarded to the service resource via a network link within the security boundary, wherein the service resource is configured to process the request based on identifying the transformed identity data.

Abstract: A computer-implemented method for determining a crowdsourced association between a first user identifier, and a second user identifier for a user of a service accessible over a network. Service data are searched to identify users of the service having a potential association with the first user identifier. Users of the service are invited in turn to select one of the identified users in relation to the first user identifier. A tier of linkage is determined, from at least two defined tiers, between a user making the selection and the selected user. A vote is recorded, of the determined tier, for the selection. A threshold is assigned to votes according to the tier of linkage so that if the votes of at least one of the defined tiers achieves its assigned threshold, it may be determined whether the first user identifier is associated with the respective second user identifier.

Abstract: Computing systems and processes of creating provisional account profiles of users are disclosed herein. In one embodiment, a computing system is configured to detect at least one ingoing or outgoing communication to or from a first globally unique identifier of a first user that has not already linked to an account of said service. In response to said detection, the computing system is configured to create a provisional user profile for the first user linked to the first globally unique identifier and gather public information associated with the first user from one or more third-party sources outside said service. When the first user joins said service, the computing system can be configured to allocate the provisional user profile to an account belonging to the first user linked to the first globally unique identifier.

Abstract: A computer-implemented method for determining a crowdsourced association between a first user identifier, and a second user identifier for a user of a service accessible over a network. Service data are searched to identify users of the service having a potential association with the first user identifier. Users of the service are invited in turn to select one of the identified users in relation to the first user identifier. A tier of linkage is determined, from at least two defined tiers, between a user making the selection and the selected user. A vote is recorded, of the determined tier, for the selection. A threshold is assigned to votes according to the tier of linkage so that if the votes of at least one of the defined tiers achieves its assigned threshold, it may be determined whether the first user identifier is associated with the respective second user identifier.

Abstract: Computing systems and processes of creating provisional account profiles of users are disclosed herein. In one embodiment, a computing system is configured to detect at least one ingoing or outgoing communication to or from a first globally unique identifier of a first user that has not already linked to an account of said service. In response to said detection, the computing system is configured to create a provisional user profile for the first user linked to the first globally unique identifier and gather public information associated with the first user from one or more third-party sources outside said service. When the first user joins said service, the computing system can be configured to allocate the provisional user profile to an account belonging to the first user linked to the first globally unique identifier.