Centralized Publishing of Network Resources

• US 20090222565A1
• Filed: 02/28/2008
• Published: 09/03/2009
• Est. Priority Date: 02/28/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Parsons, John E., Ben-Shachar, Ido, Erdogan, Ersev Samim, London, Kevin Scott
• Granted Patent: US 8,683,062 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Techniques for centralized publishing of network resources within computer networks are described. Publication of and access to the network resources are controlled from a single, centralized location, advantageously improving the uniformity of network administration responsibilities, and overall robustness of the network.

Claims

1. A method, comprising:

centrally maintaining an allow list to control access to network resources;

receiving an access query for access to a particular network resource;

evaluating information in the access query against the centrally maintained allow list to ascertain whether access privilege exists for the particular network resource; and

if the access privilege is available, granting access to the particular network resource.

if the access privilege is affirmative, granting access to the user to the network resource on a specified one of the at least one resource host without regard to other possible access lists within the computer network.

2. The method of claim 1, wherein centrally maintaining an allow list includes centrally maintaining an allow list in a centralized database that is separate from the at least one resource host.

3. The method of claim 1, wherein receiving an access query includes receiving an access query via a broker configured to perform a load balancing determination between a plurality of resource hosts.

4. The method of claim 3, wherein granting access includes performing a load balancing determination between a plurality of resource hosts, and granting access to the network resource on a specified one of the plurality of resource hosts based on the load balancing determination.

5. The method of claim 1, wherein evaluating information in the access query against the centrally maintained allow list to ascertain whether access privilege exists for the particular network resource includes checking a data record that specifies an access privilege based on a user-group.

6. The method of claim 5, wherein granting access includes providing an identity of the specified resource host from which to access the network resource, and providing a protocol setting for communicating with the specified resource host.

7. The method of claim 1, wherein centrally maintaining an allow list includes centrally maintaining an allow list using an administration tool operatively communicating with a centralized database via a data server abstraction layer.

8. The method of claim 7, wherein using an administration tool includes using an administration tool operatively communicating with the centralized database via a communication protocol layer disposed between the data server abstraction layer and the centralized database, the communication protocol layer having a plurality of protocol providers that enable communications using a plurality of communication protocols.

9. The method of claim 1, wherein receiving an access query includes receiving an access query via a data server abstraction layer.

10. The method of claim 9, wherein receiving an access query further includes receiving an access query via a communication protocol layer having a plurality of protocol providers that enable communications using a plurality of communication protocols.

11. The method of claim 1, wherein receiving an access query includes receiving a request to access the particular network resource via a brokering component, the method further comprising identifying available network resources to a requester via a communication portal other than the brokering component.

12. One or more computer-readable media containing instructions that, when executed by a computer, perform a method for publishing one or more network resources in a computer network having a plurality of resource hosts, the method comprising:

enabling an allow list to be maintained in a centralized database operatively coupled to the plurality of resource hosts, the allow list being configured to control access to the one or more network resources;

enabling an access query to be received from a requester requesting access to the one or more network resources;

enabling an access privilege within the allow list of the centralized database to be determined for the requester; and

if authorized, enabling access to be granted to the one or more network resources on a specified resource host without regard to other possible access lists within the computer network.

13. The computer-readable media of claim 12, wherein enabling an allow list to be generated in a centralized database includes enabling an allow list to be generated in a centralized database that is separate from the plurality of resource hosts.

14. The computer-readable media of claim 12, wherein enabling access to be granted includes enabling a load balancing determination to be performed between the plurality of resource hosts, and enabling access to be granted based at least partially on the load balancing determination.

15. The computer-readable media of claim 12, wherein enabling access to be granted includes enabling a specified one of the plurality of resource hosts to be identified to the requester from which to access the one or more network resource, and enabling a protocol to be provided to the requester for communicating with the specified one of the plurality of resource hosts.

16. The computer-readable media of claim 12, wherein enabling an access query to be received includes enabling an access query to be received via a brokering component, the method further comprising enabling available network resources to be identified to the requester via a communication portal other than the brokering component.

17. A method, comprising:

publishing a plurality of network resources available on a computer network having a plurality of resource hosts;

maintaining an access record in a centralized database, the centralized database being distinct from the plurality of resource hosts;

receiving an access query from a requester for access to one or more of the network resources;

determining an access privilege of the requester to access one or more network resources using the access record in the centralized database without regard to other possible information sources within the computer network; and

either granting or denying access to the one or more network resources based on the access privilege.

18. The method of claim 17, wherein publishing a plurality of network resources includes publishing a plurality of applications to the requester via a portal, and wherein receiving an access query includes receiving an access query from the requester via a broker that is distinct from the portal.

19. The method of claim 18, wherein either granting or denying access to the one or more network resources based on the access privilege includes performing a load balancing determination between a plurality of terminal servers, and granting access to one of the plurality of applications on a specified one of the plurality of terminal servers based on the load balancing determination.

20. The method of claim 19, wherein either granting or denying access includes providing an identity of a specified one of the plurality of terminal servers on which to access the network resource, and providing a communication protocol setting for communicating with the specified one of the plurality of terminal servers.