Cloud federation as a service

• US 10,298,665 B2
• Filed: 07/19/2017
• Issued: 05/21/2019
• Est. Priority Date: 12/17/2009
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Li, Hong
• Primary Examiner(s): Nguyen, Dustin
• Assistant Examiner(s): Nguyen, Hao H
• Application Number:
  US15/654,071
• Publication Number:
  US 20180013819A1
• Time in Patent Office: 671 Days
• Field of Search: 709203, 709224, 709225, 709226, 709228, 709229, 709231, 726 3, 726 4, 726 8, 726 15
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

A Cloud federator may be used to allow seamless and transparent access by a Cloud Client to Cloud services. Federation may be provided on various terms, including as a subscription based real-time online service to Cloud Clients. The Cloud federator may automatically and transparently effect communication between the Cloud Client and Clouds and desired services of the Clouds, and automatically perform identity federation. A Service Abstraction Layer (SAL) may be implemented to simplify Client communication, and Clouds/Cloud services may elect to support the SAL to facilitate federation of their services.

Claims

1. At least one non-transitory computer-readable storage medium storing instructions for execution by at least one computing machine, the at least one computing machine being capable, in operation of the at least one computing machine, of communicating via at least one network with at least one client computer and multiple remote cloud computing service providers, the instructions when executed by the at least one computing machine resulting in the at least one computing machine being capable of performing operations comprising:

receiving, at least in part, via at least one interface associated with the at least one client computer, respective data associated with respective requests to permit at least one cloud-based subscription service of at least one of the multiple remote cloud computing service providers and at least one other cloud-based subscription service of at least one other of the multiple remote cloud computing service providers to be accessed by the at least one client computer, the respective data to be in at least one format that is compatible with the at least one interface;

modifying, at least in part, the at least one format of the respective data so to provide the respective data in other respective formats that are compatible with other respective interfaces associated with the at least one and the at least one other of the multiple remote cloud computing service providers;

providing, at least in part, via the other respective interfaces, the respective data in the other respective formats to the at least one and the at least one other of the multiple remote cloud computing service providers; and

providing, at least in part, to the multiple remote cloud computing service providers, portions of profile information associated with the at least one client computer, the portions of the profile information being to facilitate authentication and/or authorization of the at least one client computer to access the multiple remote cloud computing service providers, the authentication and/or authorization being associated, at least in part, with a single sign-on;

wherein;

the at least one interface and the other respective interfaces are mutually different from each other, at least in part;

the at least one format and the other respective formats are mutually different from each other, at least in part;

the at least one client computer, the at least one of the multiple remote cloud computing service providers, and the at least one other of the multiple remote cloud computing service providers use respective techniques for service access, data transport, and the authentication that are mutually incompatible with each other;

the operations also comprise automatically dynamically modifying, by the at least one computing machine, received data for compatibility with the respective techniques so as to permit the service access, the authentication, and the data transport; and

the at least one cloud-based subscription service and/or the at least one other cloud-based subscription service are to be implemented using a virtual machine environment.

2. The at least one non-transitory computer-readable storage medium of claim 1, wherein:

the at least one interface comprises a standardized interface; and

when the at least one computing machine is in the operation, the at least one computing machine is capable of permitting the at least one client computer to transparently access cloud-based subscription services of the multiple remote cloud computing service providers via the at least one computing machine.

3. The at least one non-transitory computer-readable storage medium of claim 2, wherein:

when the at least one computing machine is in the operation, the at least one computing machine is capable of receiving from the at least one client computer identification of types of the cloud-based subscription services to which subscription is to be sought.

4. The at least one non-transitory computer-readable storage medium of claim 3, wherein:

when the at least one computing machine is in the operation, the at least one computing machine is capable of receiving from the at least one client computer identities of the multiple remote cloud computing service providers and/or the cloud-based subscription services to which the subscription is to be sought.

5. The at least one non-transitory computer-readable storage medium of claim 4, wherein:

the at least one interface comprises an application programming interface; and

when the at least one computing machine is in the operation, the at least one computing machine is to provide connection and interoperability brokerage service between the at least one client computer and the multiple remote cloud computing service providers.

6. The at least one non-transitory computer-readable storage medium of claim 5, wherein:

the at least one computing machine is to communicate with the multiple computing service providers via associated interfaces; and

the at least one computing machine is to modify, at least in part, portions of data received via the associated interfaces for compatibility with the at least one interface for presentation to the at least one client computer.

7. At least one computing machine that is capable, when the at least one computing machine is in operation, of communicating via at least one network with at least one client computer and multiple remote cloud computing service providers, the at least one computing machine comprising:

at least one processor; and

storage to store program instructions to be executed, at least in part, by the at least one processor, the program instructions when executed, at least in part, by the at least one processor resulting in the at least one computing machine being capable of performing operations comprising;

receiving, at least in part, via at least one interface of the at least one computing machine that is associated with the at least one client computer, respective data associated with respective requests to permit at least one cloud-based subscription service of at least one of the multiple remote cloud computing service providers and at least one other cloud-based subscription service of at least one other of the multiple remote cloud computing service providers to be accessed by the at least one client computer, the respective data to be in at least one format that is compatible with the at least one interface;

modifying, at least in part, the at least one format of the respective data so to provide the respective data in other respective formats that are compatible with other respective interfaces of the at least one computing machine that are associated with the at least one and the at least one other of the multiple remote cloud computing service providers;

providing, at least in part, via the other respective interfaces, the respective data in the one other respective formats to the at least one and the at least one other of the multiple remote cloud computing service providers; and

providing, at least in part, to the multiple remote cloud computing service providers, portions of profile information associated with the at least one client computer, the portions of the profile information being to facilitate authentication and/or authorization of the at least one client computer to access the multiple remote cloud computing service providers, the authentication and/or authorization being associated, at least in part, with a single sign-on;

wherein;

the at least one interface and the other respective interfaces are mutually different from each other, at least in part;

the at least one format and the other respective formats are mutually different from each other, at least in part;

the at least one client computer, the at least one of the multiple remote cloud computing service providers, and the at least one other of the multiple remote cloud computing service providers use respective techniques for service access, data transport, and the authentication that are mutually incompatible with each other;

the operations also comprise automatically dynamically modifying, by the at least one computing machine, received data for compatibility with the respective techniques so as to permit the service access, the authentication, and the data transport; and

the at least one cloud-based subscription service and/or the at least one other cloud-based subscription service are to be implemented using a virtual machine environment.

8. The at least one computing machine of claim 7, wherein:

the at least one interface comprises a standardized interface; and

when the at least one computing machine is in the operation, the at least one computing machine is capable of permitting the at least one client computer to transparently access cloud-based subscription services of the multiple remote cloud computing service providers via the at least one computing machine.

9. The at least one computing machine of claim 8, wherein:

when the at least one computing machine is in the operation, the at least one computing machine is capable of receiving from the at least one client computer identification of types of the cloud-based subscription services to which subscription is to be sought.

10. The at least one computing machine of claim 9, wherein:

when the at least one computing machine is in the operation, the at least one computing machine is capable of receiving from the at least one client computer identities of the multiple remote cloud computing service providers and/or the cloud-based subscription services to which the subscription is to be sought.

11. The at least one computing machine of claim 10, wherein:

the at least one interface comprises an application interface; and

when the at least one computing machine is in the operation, the at least one computing machine is to provide connection and interoperability brokerage service between the at least one client computer and the multiple remote cloud computing service providers.

12. The at least one computing machine of claim 11, wherein:

the at least one computing machine is to communicate with the multiple computing service providers via associated interfaces; and

the at least one computing machine is to modify, at least in part, portions of data received via the associated interfaces for compatibility with the at least one interface for presentation to the at least one client computer.

13. At least one client computer that is capable, when the at least one client computer is in operation, of communicating via at least one network at least one computing machine, the at least one computing machine being communicate with the multiple remote cloud computing service providers via the at least one network, the at least one client computer comprising:

at least one processor; and

storage to store program instructions to be executed, at least in part, by the at least one processor, the program instructions when executed, at least in part, by the at least one processor resulting in the at least one client computer being capable of performing operations comprising;

generating, at least in part, respective data associated with respective requests to permit at least one cloud-based subscription service of at least one of the multiple remote cloud computing service providers and at least one other cloud-based subscription service of at least one other of the multiple remote cloud computing service providers to be accessed by the at least one client computer, the respective data to be received via at least one interface of the at least one computing machine that is associated with the at least one client computer, the respective data to be in at least one format that is compatible with the at least one interface, the at least one format of the respective data to be modified, at least in part, by the at least one computing machine so to provide the respective data in other respective formats that are compatible with other respective interfaces of the at least one computing machine that are associated with the at least one and the at least one other of the multiple remote cloud computing service providers, the respective data in the other respective formats to be provided, at least in part, to the at least one and the at least one other of the multiple remote cloud computing service providers;

wherein;

authentication and/or authorization of the at least one client computer to access the multiple remote cloud computing service providers is to facilitated by provision, at least in part, by the at least one computing machine to the multiple remote cloud computing service providers, of portions of profile information associated with the at least one client computer, the authentication and/or authorization being associated, at least in part, with a single sign-on;

the at least one interface and the other respective interfaces are mutually different from each other, at least in part;

the at least one format and the other respective formats are mutually different from each other, at least in part;

the at least one client computer, the at least one of the multiple remote cloud computing service providers, and the at least one other of the multiple remote cloud computing service providers use respective techniques for service access, data transport, and the authentication that are mutually incompatible with each other;

the at least one computing machine is to automatically dynamically modify received data for compatibility with the respective techniques so as to permit the service access, the authentication, and the data transport; and

the at least one cloud-based subscription service and/or the at least one other cloud-based subscription service are to be implemented using a virtual machine environment.

14. The at least one client computer of claim 13, wherein:

the at least one interface comprises a standardized interface; and

when the at least one client computer is in the operation, the at least one client computer is to transparently access cloud-based subscription services of the multiple remote cloud computing service providers via the at least one computing machine.

15. The at least one client computer of claim 14, wherein:

when the at least one client computer is in the operation, the at least one client computer is to generate, for provision to the at least one computing machine, identification of types of the cloud-based subscription services to which subscription is to be sought.

16. The at least one client computer of claim 15, wherein:

when the at least one client computer is in the operation, the at least one client computer is to generate, for provision to the at least one computing machine, identities of the multiple remote cloud computing service providers and/or the cloud-based subscription services to which the subscription is to be sought.

17. The at least one client computer of claim 16, wherein:

the at least one interface comprises an application programming interface; and

when the at least one client computer is in the operation, the at least one client computer is to receive, via the at least one computing machine, connection and interoperability brokerage service between the at least one client computer and the multiple remote cloud computing service providers.

18. The at least one client computer of claim 17, wherein:

the at least one computing machine is to communicate with the multiple computing service providers via associated interfaces; and

the at least one client computer is to be receive portions of data received by the at least one computing machine via the associated interfaces that have been modified, at least in part, by the at least one computing machine for compatibility with the at least one interface for presentation to the at least one client computer.

19. One or more non-transitory computer-readable storage media storing instructions for execution by one or more computing machines, the one or more computing machines being capable, in operation of the one or more computing machines, of communicating via one or more networks with one or more client computers and multiple remote cloud computing service providers, the instructions when executed by the one or more computing machines resulting in the one or more computing machines being capable of performing operations comprising:

receiving via one or more interfaces associated with the one or more client computers, respective data associated with respective requests to permit one or more cloud-based subscription services of one or more of the multiple remote cloud computing service providers and one or more other of the multiple remote cloud computing service providers to be accessed by the one or more client computers, the respective data to be in one or more formats that are compatible with the one or more interfaces;

modifying the one or more formats of the respective data so to provide the respective data in other respective formats that are compatible with other respective interfaces associated with the one or more and the one or more other of the multiple remote cloud computing service providers;

providing via the other respective interfaces, the respective data in the other respective formats to the one or more and the one or more other of the multiple remote cloud computing service providers; and

providing to the multiple remote cloud computing service providers, portions of profile information associated with the one or more client computers, the portions of the profile information being to facilitate authentication and/or authorization of the one or more client computers to access the multiple remote cloud computing service providers, the authentication and/or authorization being associated with a single sign-on;

wherein;

the one or more interfaces and the other respective interfaces are mutually different from each other, at least in part;

the one or more formats and the other respective formats are mutually different from each other, at least in part;

the one or more client computers, the one or more of the multiple remote cloud computing service providers, and the one or more other of the multiple remote cloud computing service providers use respective techniques for service access, data transport, and the authentication that are mutually incompatible with each other;

the operations also comprise automatically dynamically modifying, by the one or more computing machines, received data for compatibility with the respective techniques so as to permit the service access, the authentication, and the data transport; and

the one or more cloud-based subscription services and/or the one or more other cloud-based subscription services are to be implemented using a virtual machine environment.

20. The one or more non-transitory computer-readable storage media of claim 19, wherein:

the one or more interfaces comprise a standardized interface; and

when the one or more computing machines are in the operation, the one or more computing machines are capable of permitting the one or more client computers to transparently access cloud-based subscription services of the multiple remote cloud computing service providers via the one or more computing machines.

21. The one or more non-transitory computer-readable storage media of claim 20, wherein:

when the one or more computing machines are in the operation, the one or more computing machines are capable of receiving from the one or more client computers identification of types of the cloud-based subscription services to which subscription is to be sought.

22. The one or more non-transitory computer-readable storage media of claim 21, wherein:

when the one or more computing machines are in the operation, the one or more computing machines are capable of receiving from the one or more client computers identities of the multiple remote cloud computing service providers and/or the cloud-based subscription services to which the subscription is to be sought.

23. The one or more non-transitory computer-readable storage media of claim 22, wherein:

the one or more interfaces comprise an application programming interface; and

when the one or more computing machines are in the operation, the one or more computing machines are to provide connection and interoperability brokerage service between the one or more client computers and the multiple remote cloud computing service providers.

24. The one or more non-transitory computer-readable storage media of claim 23, wherein:

the one or more computing machines are to communicate with the multiple computing service providers via associated interfaces; and

the one or more computing machines are to modify, at least in part, portions of data received via the associated interfaces for compatibility with the one or more interfaces for presentation to the one or more client computers.