Methods and apparatus for using tags to control and manage assets

• US 10,725,802 B2
• Filed: 06/09/2014
• Issued: 07/28/2020
• Est. Priority Date: 10/17/2006
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Fitzgerald, Joseph, Barenboim, Oleg, Tanzillo, Gregg
• Primary Examiner(s): Do, Chat C
• Assistant Examiner(s): Wheaton, Bradford F
• Application Number:
  US14/299,492
• Publication Number:
  US 20140289730A1
• Time in Patent Office: 2,241 Days
• Field of Search: 718 1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455

Abstract

By implementing various types of tags, easy management and control of assets in a business system is enabled. These assets may be virtual machines, hardware assets, personnel assets, etc. System tags are determined and associated with an asset automatically. Virtual tags and dynamic tags are tags that do not contain the information sought—rather, these tags contain instructions about how to determine the tag value associated with an asset. Management tags are user-entered tags indicating information about an asset based on the knowledge of an individual. These tags can be combined using Boolean algebraic operators, resulting in a tag-based algebra system, which enables a Tag-Based Query Language for searching a universe of assets based on the associated tags. Additionally, tag-based algebra enables access control based on tags associated with a user, assets in a universe of assets, and enables policies to be enforced in a universe of assets.

Claims

1. A method for using tags to manage virtual machines, the method comprising:

storing a plurality of virtual machines in a first location on at least one physical host machine;

associating a plurality of tags with the plurality of virtual machines, wherein each of the plurality of tags are associated with respective metadata representing a virtual machine characteristic, the plurality of tags including at least one of a dynamic tag and a virtual tag, the at least one of the dynamic tag and the virtual tag including a tag name and a separate and different namespace that is indicative of (i) a second location storing the respective metadata representing the virtual machine characteristic, wherein the second location is outside the plurality of virtual machines in the first location, and (ii) a call to at least one of a program and a database at the second location to obtain the respective metadata representing the virtual machine characteristic from the second location;

parsing the at least one of the dynamic tag and the virtual tag to determine the tag name and the namespace;

storing the plurality of tags in a third location, wherein the third location is (i) outside the plurality of virtual machines in the first location and (ii) across a network from the second location storing the respective metadata representing the virtual machine characteristic;

parsing the namespace to obtain the second location and the call; and

resolving the namespace with the second location and the call to obtain the respective metadata,

wherein no value is associated with the at least one of the dynamic tag and the virtual tag until the namespace is parsed and resolved, and

wherein the tags associated with the plurality of virtual machines allows the plurality of virtual machines to be queried using a tag-based query language, wherein the tag-based query language uses Boolean algebra.

2. The method of claim 1, wherein at least one of the plurality of the tags are associated with at least one of the plurality of virtual machines automatically.

3. The method of claim 1, wherein at least one of the plurality of tags are associated with at least one of the plurality of virtual machines based on at least one user inputted value.

4. The method of claim 1, wherein at least one of the plurality of tags are associated with at least one of the plurality of virtual machines by a user, wherein the user selects the tags to be associated with the plurality of virtual machines from a predefined set of tags.

5. The method of claim 1, wherein at least one of the plurality of tags associated with at least one of the plurality of virtual machines are virtual tags, the virtual tags containing pointers to data in a database.

6. The method of claim 1, wherein at least one of the plurality of tags associated with at least one of the plurality of virtual machines are dynamic tags, the dynamic tags referencing data via a web service call.

7. The method of claim 1, wherein at least one of the plurality of tags associated with at least one of the plurality of virtual machines are derived from an asset related to the at least one virtual machine.

8. The method of claim 1, wherein the tags associated with the plurality of virtual machines may be combined using Boolean algebra to enable a combination of tags to be applied to a set of tags to result in a truth value.

9. The method of claim 1, wherein the tags associated with the plurality of virtual machines allows access to the plurality of virtual machines to be controlled using a tag-based access control, the tag-based access control determining whether a user is authorized to access an asset based on a truth value resulting from the combination of a Boolean algebra expression and a set of tags.

10. The method of claim 1, wherein the tags associated with the plurality of virtual machines allow for management of the plurality of virtual machines using tag-based policies, wherein an enforceability of the tag-based policies is determined by a truth value resulting from the combination of a Boolean algebra expression and a set of tags associated with a virtual machine.

11. The method of claim 1, wherein each one of the plurality of virtual machines include an operating system.

12. The method of claim 1, wherein at least one virtual machine is compatible with only a single physical host machine environment.

13. The method of claim 1, wherein at least one virtual machine is compatible with at least two different physical host machine environments.

14. The method of claim 13, wherein each of the at least two different physical host machine environments runs a different operating system.

15. The method of claim 1, wherein the plurality of virtual machines include first virtual machines that run a first operating system and second virtual machines that run a second operating system, such that the plurality of virtual machines respectively run a plurality of different operating systems, and the plurality of virtual machines are run on a single physical host machine environment.

16. A method for using tags to manage assets, wherein the assets are managed by a management system, the method comprising:

associating a plurality of tags with a plurality of assets, which are in a first location, wherein each of the plurality of tags are associated with respective metadata representing an asset characteristic, the plurality of tags including at least one of a dynamic tag and a virtual tag, the at least one of the dynamic tag and the virtual tag including a tag name and a separate and different namespace that is indicative of (i) a second location of the respective metadata representing the asset characteristic, wherein the second location is outside the plurality of assets in the first location, and (ii) a call to at least one of a program and a database at the second location to obtain the respective metadata representing the asset characteristic from the second location;

parsing the at least one of the dynamic tag and the virtual tag to determine the tag name and the namespace;

storing the plurality of tags in a third location, wherein the third location is (i) outside the plurality of assets in the first location and (ii) across a network from the second location of the respective metadata representing the asset characteristic;

parsing the namespace to obtain the second location and the call;

resolving the namespace with the second location and the call to obtain the respective metadata; and

the management system using the plurality of tags to manage the assets,

wherein no value is associated with the at least one of the dynamic tag and the virtual tag until the namespace is parsed and resolved, and

wherein the tags associated with the plurality of assets allows the plurality of assets to be queried using a tag-based query language, wherein the tag-based query language uses Boolean algebra.

17. The method of claim 16, wherein at least one of the plurality of tags are automatically associated with at least one of the plurality of assets.

18. The method of claim 16, wherein at least one of the plurality of assets associated with the plurality of tags include at least one of users, hosts, storage facilities, policies, and relationships.

19. The method of claim 16, wherein at least one of the plurality of tags are stored in at least one of a database and a systems management partition.

20. A system comprising:

a memory storing a plurality of virtual machines in a first location; and

a processor associating a plurality of tags with the plurality of virtual machines, wherein each of the plurality of tags are associated with respective metadata representing a virtual machine characteristic, the plurality of tags including at least one of a dynamic tag and a virtual tag, the at least one of the dynamic tag and the virtual tag including a tag name and a separate and different namespace that is indicative of (i) a second location storing the respective metadata representing the virtual machine characteristic, wherein the second location is outside the plurality of virtual machines in the first location, and (ii) a call to at least one of a program and a database at the second location to obtain the respective metadata representing the virtual machine characteristic from the second location, wherein the plurality of tags are stored in a third location that is (i) outside the plurality of virtual machines in the first location and (ii) across a network from the second location storing the respective metadata representing the virtual machine characteristic, and the processor executing to;

parse the at least one of the dynamic tag and the virtual tag to determine the tag name and the namespace;

parse the namespace to obtain the second location and the call; and

resolve the namespace with the second location and the call to obtain the respective metadata,

wherein no value is associated with the at least one of the dynamic tag and the virtual tag until the namespace is parsed and resolved, and

wherein the tags associated with the plurality of virtual machines allows the plurality of virtual machines to be queried using a tag-based query language, wherein the tag-based query language uses Boolean algebra.