Cross-data center interoperation and communication

• US 10,581,670 B2
• Filed: 10/02/2015
• Issued: 03/03/2020
• Est. Priority Date: 10/02/2015
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Hawking, Robert G., Dong, Shiguang, Taboada, Roberto C., Gopal, Burra, Mani, Seshadri
• Primary Examiner(s): Chea, Philip J
• Assistant Examiner(s): Ahmed, Mohammed
• Application Number:
  US14/874,156
• Publication Number:
  US 20170099181A1
• Time in Patent Office: 1,614 Days
• CPC Class Codes: G06F 16/972 Access to data in other repository systems, e.g. legacy data or dynamic Web page generation
• CPC Class Codes: G06F 3/04842 Selection of displayed objects or displayed text elements G06F3/0482 takes precedence
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 67/306 User profiles

Abstract

Users in a given organization are tagged with a data center identifier (or data location) that identifies a data center where the user'"'"'s resources are located. A user request is detected, that indicates that the user wishes to access a resource that is tied to the user. The user is automatically navigated to the user'"'"'s corresponding data center, where the user permissions are analyzed to selectively grant access to the requested resource.

Claims

1. A computing system, comprising:

at least one processor; and

memory storing instructions executable by the at least one processor, wherein the instructions, when executed, configure the computing system to provide;

a user tagging component configured to;

identify a first user associated with an organization; and

store a user tag that corresponds to the first user and includes a data center association identifier, that associates a given data center in a remote server environment with the first user; and

a provision routing system configured to;

automatically detect an administrator user input, at an administrative user system, indicative of a request from an administrator user to provision a computing resource for the first user;

access the stored user tag that corresponds to the first user;

based on the data center association identifier in the stored user tag, expose, to the administrative user system, a data center-specific link to a provisioning system in the given data center;

direct the administrative user system to the provisioning system, at the given data center, using the data center-specific link, the provisioning system being configured to provision a computing resource in the given data center for the first user.

2. The computing system of claim 1 wherein the data center-specific link comprises a data center-specific uniform resource locator.

3. The computing system of claim 1 wherein the instructions configure the computing system to provide:

a data center configuration system configured to;

generate a data center configuration user interface display that is displayed by the administrative user system and includes a user input mechanism; and

based on an indication of actuation of the user input mechanism, configure a data center for the organization.

4. The computing system of claim 3 wherein the user input mechanism comprises an addition user input mechanism that is actuated to add a new data center to the computing system for the organization.

5. The computing system of claim 4 wherein the data center configuration system is configured to, in response to detecting actuation of the addition user input mechanism, display a data restriction user input mechanism that is actuated to set data restrictions for handling data at the new data center.

11. The computing system of claim 1 wherein the provisioning system is configured to:

generate a user interface; and

based on input received from the administrative user system through the user interface, provision the computing resource.

6. A computer implemented method, comprising:

identifying a first user within an organization;

storing a user tag that corresponds to the first user and includes;

a data center association identifier, that associates a given data center in a remote server environment with the first user, and

an organization presence indicator that associates the first user with the organization;

automatically detecting an administrator user input, at an administrative user system, indicative of a request from an administrator user to provision resources for the first user;

accessing the stored user tag that corresponds to the first user;

based on the data center association identifier in the stored user tag, exposing, to the administrative user system, a data center-specific navigation link to a provisioning system in the given data center; and

directing the administrative user system to the provisioning system in the given data center using the data center-specific navigation link.

7. The computer implemented method of claim 6 wherein tagging comprises:

accessing a set of data center association rules for the organization; and

tagging the user based on the data center association rules.

8. The computer implemented method of claim 6 and further comprising:

generating a data center configuration user interface display that is displayed by the administrative user system and includes a user input mechanism that is actuatable to configure a data center for the organization.

9. The computer implemented method of claim 8 wherein generating the data center configuration user interface display comprises:

displaying an addition user input mechanism that is actuated to add a new data center to the computing system for the organization; and

in response to detecting actuation of the addition user input mechanism, displaying a data restriction user input mechanism that is actuated to set data restrictions for handling data at the new data center.

10. A computing system, comprising:

at least one processor; and

memory storing instructions executable by the at least one processor, wherein the instructions, when executed, configure the computing system to;

identify a first user associated with an organization;

store a user tag that corresponds to the first user and includes a data center association identifier, that associates a given data center in a remote server environment with the first;

automatically detect an administrator user input, from an administrative user system, indicative of a request from an administrator user to provision a computing resource for the first user;

access the stored user tag that corresponds to the first user;

based on the data center association identifier in the stored user tag, expose, to the administrative user system, a data center-specific link to a provisioning system in the given data center;

direct the administrative user system to the provisioning system, at the given data center, using the data center-specific link, the provisioning system being configured to provision a computing resource in the given data center for the first user;

receive a search request from the first user; and

based on the data center association identifier in the stored user tag, execute the search request in the given data center that is configured to respond to the search request by performing permission processing to enforce a permission associated with the first user.