Patent ID: 9323939
Filing Date: 2016-04-26
CPC Classification: G06F,H04L

Claim Text:
1. A cloud computing system comprising: a plurality of cloud resident applications, wherein the plurality of cloud resident applications reside on one or more computer readable media and are executable by one or more computer processors, wherein each of a plurality of tenants, one or more tenants comprising multiple corresponding users, is permitted to access one or more of the plurality of cloud resident applications, and wherein one or more of the plurality of tenants and its corresponding users are associated with one or more business organizations; an input governance layer associated with each application; and an output governance layer associated with each application; wherein the input governance layer and the output governance layer comprise an encapsulation of a cloud resident application, and the input governance layer and output governance layer are associated with the one or more computer processors and are operable to: receive a request from a tenant-user to access a first application on the cloud computing system; check a governance database to determine if the tenant-user is authorized to access the first application; when the tenant-user is authorized to access the first application, process the request using the first application, and when the request and the first application generate an output to transmit to a second application in the cloud computing system, check the governance database to determine if the tenant- user is authorized to transmit the output to the second application; when the tenant-user is not authorized to access the first application, prevent the request from accessing the first application, and transmit an indication of the tenant-user and the request to a cloud system security administrator; and when the tenant-user is not authorized to transmit the output to the second application, transmit an indication of the tenant-user and the output to the cloud system security administrator, wherein the input governance layer and the output governance layer comprise an embedded layer within the first application that functions to encapsulate the application, wherein the embedded layer is configured in parallel to existing application specific security layers.