Patent ID: 11949681
Assignee: ALIBABA GROUP HOLDING LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 11:
12. A non-transitory computer readable medium storing computer-readable instructions executable by one or more processors, that when executed, causes the one or more processors to perform operations comprising:
receiving a connection request from a file system client, the connection request being a request for a connection to a file system;
sending an identification request for identification authentication of the file system client to a control system;
receiving a response to the identification request from the control system, wherein the response to the identification request from the control system includes:
a decision from the control system whether to allow the connection to the file system, the decision being based on an identity of a current tenant owner of a source Internet Protocol (IP) of the file system client;

determining whether the connection to the file system is allowed based on the response;
establishing the connection to the file system upon determining that the connection to the file system is allowed;
receiving an attempt to access the file system from the file system client by a sub-user;
authenticating the sub-user;
issuing a security token including a globally unique sub-user identifier of the sub-user; and
using the security token to determine access rights of the sub-user to the file system for a subsequent request by the sub-user.