Extensible and programmable multi-tenant service architecture

• US 20080256607A1
• Filed: 04/13/2007
• Published: 10/16/2008
• Est. Priority Date: 04/13/2007
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Ott, Michael James, Janedittakarn, Akezyt, dos Santos, Roberto Adlich, Ghanaie-Sicanie, Arash
• Granted Patent: US 8,019,812 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1001 for accessing one among a plurality of replicated servers
• CPC Class Codes: H04L 67/1023 based on a hash applied to IP addresses or costs
• CPC Class Codes: H04L 67/1029 using data related to the state of servers by a load balancer
• CPC Class Codes: H04L 67/1031 Controlling of the operation of servers by a load balancer, e.g. adding or removing servers that serve requests
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

An extensible, multi-tenant software-as-a-service business application platform is provided for hosting multiple organizations. Organization services are provided by virtual or physical servers with dedicated data stores assembled in scalable groups. Distributed interaction between components of the scalable groups may enable extensibility and reliability, while changes in locations of organization services are provided to the client(s) for seamless continuation of the client'"'"'s access to the services. Customizable and dynamic APIs for accessing each organization'"'"'s data and applications isolated from the others and pluggable third party authentication services may also be integrated into the platform.

Claims

1. A method to be executed at least in part in a computing device for providing an extensible multi-tenant service platform, the method comprising:

receiving a request for access from a client, wherein each client is associated with at least one organization service hosted by the platform;

determining a location of the organization service, wherein the organization services are organized in scalable groups within the platform;

providing the location of the organization service to the client to enable access to the organization service; and

if the location of the organization service changes during the access, providing the changed location to the client for continued access of the client to the organization service.

2. The method of claim 1, further comprising:

authenticating the client prior to providing the location of the organization service using one of an integrated authentication service and a third party authentication service.

3. The method of claim 2, wherein the client'"'"'s access to the requested organization service is restricted based on at least one from a set of:

a security status of client connection, a client credential, and an organization membership.

4. The method of claim 2, further comprising:

providing a plurality of authentication modes, wherein each authentication mode includes a dedicated endpoint such that the client is enabled to specify a desired authentication mode.

5. The method of claim 1, further comprising:

providing configuration information to the client associated with the client'"'"'s access to the requested organization service.

6. The method of claim 1, wherein the scalable groups are configured to enable a vertical and a horizontal extensibility of applications associated with organization services hosted by the platform.

7. The method of claim 1, wherein the platform is arranged to provide metadata access for organization services hosted by the platform.

8. A system for hosting extensible multi-tenant services, comprising:

a discovery service configured to;

receive a request for access from a client associated with at least one organization service hosted by the system;

determine a location of the requested organization service; and

provide the location of the organization service to the client to enable access to the organization service;

a plurality of scalable service clusters configured to provide the organization service; and

a configuration store associated with the discovery service arranged to store configuration and location information associated with the plurality of service clusters such that a change in the location of the organization service during the client'"'"'s access to the organization service is provided to the client for continued access of the client to the organization service.

9. The system of claim 8, wherein the discovery service and the service clusters are provided as web services.

10. The system of claim 8, wherein the discovery service is further configured to authenticate the client employing a plurality of authentication modes through a pluggable authentication service.

11. The system of claim 8, further comprising:

a plurality of dedicated Application Programming Interfaces (APIs) configured to provide access to the organization services such that data and applications associated with each organization service are isolated from other organization services.

12. The system of claim 11, wherein the APIs are customizable such that a user with permission is enabled to add at least one of a custom object and a custom operation to a selected organization service.

13. The system of claim 11, wherein the APIs are configured to enable users with permission to perform actions including:

modify data associated with an organization service;

define one of a process and a logic associated with the organization service;

invoke one of a process and a logic associated with the organization service; and

modify one of a process and a logic associated with the organization service.

14. The system of claim 11, wherein the APIs are dynamically generated such that the APIs are adapted to one of an addition and a removal of an organization service in the system.

15. The system of claim 11, wherein the service clusters include a plurality of web servers, organization databases, and asynchronous processing servers configured to interact in a distributed manner.

16. The system of claim 15, wherein at least a portion of the plurality of web servers, organization databases, and asynchronous processing servers is virtual.

17. The system of claim 15, wherein multiple instances of the plurality of web servers, organization databases, and asynchronous processing servers are provided to enable scalability, load balancing, and failure recovery.

18. A computer-readable storage medium with instructions stored thereon for providing an extensible multi-tenant service platform, the instructions comprising:

receiving a request for access from a client associated with at least one organization service hosted by the platform, wherein the request includes a credential of the client;

determining a list of organization services available to the client based on the client'"'"'s credential;

providing the list of organization services to the client;

receiving a request for accessing at least one organization service from the list;

determining a location of the at least one requested organization service, wherein the organization services are provided by scalable service clusters hosted by the platform;

providing the location of the at least one organization service to the client to enable access to the organization service; and

if the location of the organization service changes during the access, providing the changed location to the client for continued access of the client to the organization service.

19. The computer-readable storage medium of claim 18, wherein the instructions further comprise:

authenticating the client using at least one authentication mode for each organization service requested by the client.

20. The computer-readable storage medium of claim 18, wherein the instructions further comprise:

dynamically providing a set of dedicated APIs for each organization service hosted by the platform to enable modification of at least one of data and processes associated with each organization service by an administrator such that the APIs are adapted to one of an addition and a removal of an organization service in the platform.