公开(公告)号：US20200045037A1

公开(公告)日：2020-02-06

申请号：US16050528

申请日：2018-07-31

Applicant: salesforce.com, Inc.

Inventor： Freeman Parks ,  Tanda Hamonangan ,  Rahul Singh ,  John Rice

IPC: H04L29/06 ,  H04L29/08 ,  H04L12/66

Abstract: A digital data platform, e.g., suitable to support e-commerce, can utilize a digital data processing device—separate and apart from those used in client app authentication and request routing—for executing a token validation service to both generate and validate tokens. This frees the network gateway to route incoming requests for authorization separately from those from already-authorized apps. This is more cost-effective than adding gateways to provide such processing. By separating the token-generating logic from the gateways, this also allows tokens to be stored in and replicated among remote data centers.

公开(公告)号：US11425130B2

公开(公告)日：2022-08-23

申请号：US16681932

申请日：2019-11-13

Applicant: Salesforce.com, Inc.

Inventor： Freeman Parks ,  Ryan D. Woebkenberg

IPC: H04L9/40 ,  G06K9/62 ,  G06N7/00 ,  G06N20/00

Abstract: A plurality of permissions associated with the on-demand computing services environment may be identified. Each of the permissions may identify a respective one or more actions permitted to be performed within the on-demand computing services environment. Each of the permissions may be granted to a respective one or more user accounts within the on-demand computing services environment. A degree of overlap between a first group of the user accounts granted a first one of the permissions and a second group of the user accounts granted a second one of the permissions may be determined. When the degree of overlap exceeds a designated threshold, a designated permission set that includes the first permission and the second permission may be created.