Patent ID: 9710664
Date: 2017-07-18
CPC Classifications: G06F

Claim:
1. A system for protecting data managed in a cloud-computing network from malicious data operations comprising: an Internet-connected server hosted by a service provider providing the cloud-computing network; an Internet-connected computer appliance operated by a tenant of the cloud-computing network; a third party generating security tokens that both the tenant and the service provider trusts to generate security tokens; and software executing on the server from a non-transitory physical medium, the software: wherein the tenant receives an alert at the control interface wherein an unauthorized request for one or more data specific operations on the tenant data is received outside of the policy definition in accordance to the SLA, and the tenant interacts with the control interface to deny the request or approve the request to perform one or more specific operations on the tenant data by at least generating one or more new security tokens enabling performance of the request, thereby modifying the policy definition in accordance to the SLA to reflect the data operations related to the request stored in the SLA.