Patent ID: 11966460
Assignee: DELL PRODUCTS L.P.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A system, comprising:
a first object storage instance comprising a first group of nodes, wherein the first group of nodes comprise at least a first node, and wherein the first node comprises a first processor and a first memory that stores first executable instructions that, when executed by the first processor, facilitate performance of first operations, comprising:
based on a request for ephemeral credentials from a first account client, generating an ephemeral credential for the first account client, wherein the generating comprises:
generating a shared secret for the first account client using a first private key of a first account credential of a first account and a first object storage public key obtained from a corresponding signed certificate,
deriving a shared secret key using the shared secret, a first public key of the first account credential, and the first object storage public key, and
generating the ephemeral credential, wherein the ephemeral credential comprises a session token and a secret session key, wherein the session token comprises at least an identity of a first object storage instance certificate, an identity of the first account, a random nonce and expiration time, and wherein the secret session key is obtained by using the shared secret key to obtain a keyed-hash based message authentication code of contents of the session token.