SECURE ACCESS DEVICE FOR CLOUD COMPUTING

• US 20110231670A1
• Filed: 03/16/2010
• Published: 09/22/2011
• Est. Priority Date: 03/16/2010
• Status: Abandoned Application

• Current Assignee: Broadlands Technologies LLC, GBS Laboratories LLC
• Original Assignee: Broadlands Technologies LLC
• Inventors: SHEVCHENKO, Oleksiy Yu., Pyntikov, Alexander V.
• Application Number:
  US12/724,801
• Publication Number:
  US 20110231670A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A secure access device for providing secure access of a computing resources (CR) user, such as a cloud user, to remote computing resources offered by multiple CR providers, such as cloud providers. The device has a network interface circuit for providing interface to a data network configured for accessing the remote computing resources offered by the multiple CR providers. A network access controller is configured to interact with the network interface for controlling access of the CR user to the remote computing resources. Multiple data storage sections may be provided. Each of them keeps computing environment data (CED) associated with a particular CR provider. The CED define a secure local computing environment prescribed by the CR provider for accessing the remote computing resources offered by this CR provider. The network access controller enables the CR provider to manage the CED and prevents the CED from being modified even by the CR user.

Claims

1. Secure access device for providing secure access of a computing resources (CR) user to remote computing resources offered by multiple CR providers, the secure access device comprising:

a network interface for providing interface to a data network configured for accessing the remote computing resources offered by the multiple CR providers,

a network access controller configured to interact with the network interface for controlling access of the CR user to the remote computing resources,

multiple data storage sections, each data storage section being configured to keep computing environment data (CED) associated with a particular CR provider of the multiple CR providers, the CED defining a secure local computing environment prescribed by the CR provider for accessing the remote computing resources offered by the CR provider,

the network access controller being configured for enabling the CR provider to manage the CED and for preventing the CED from being modified.

2. The device of claim 1, wherein the network access controller is further configured for preventing an unauthorized party from accessing remote computing resources associated with the CR user.

3. The device of claim 2, further comprising a security controller for controlling the network controller so as to enable the CR user to access the remote computing resources and to prevent an unauthorized party from accessing the remote computing resources associated with the CR user.

4. The device of claim 3, wherein the security controller is configured to encrypt data of the CR user stored at a remote storage of a CR provider.

5. The device of claim 1, wherein the network access controller is configured to enable the CR provider to control user'"'"'s access to the remote computing resources so as to allow the user'"'"'s access only in a manner prescribed by the CR provider.

6. The device of claim 1, wherein the network access controller is configured to enable the CR provider to prevent a data processing unit from producing the local computing environment for access to the remote computing resources, without authorization of the CR provider.

7. The device of claim 6, wherein the network access controller is controllable by the CR provider to allow the data processing unit to run the CED so as to produce the local computing environment.

8. The device of claim 1, wherein the network access controller is controllable by the CR provider to prevent an unauthorized user of the secure access device from accessing the computing resources offered by the CR provider.

9. The device of claim 1 further comprising an internal data processing unit configured for receiving the CED to produce the prescribed local computing environment.

10. The device of claim 9, wherein the network access controller is configured to allow the CED to be transferred to the internal data processing unit only after receiving authorization from the CR provider.

11. The device of claim 9 further comprising a data flow control circuit configured for selectively transferring the CED to the internal data processing unit or to an external computer device externally coupled to the secure access device.

12. The device of claim 11, wherein the data flow control circuit is configured for preventing the external computer device from receiving the CED when the internal data processing unit is selected for producing the prescribed local computing environment.

13. The device of claim 11 further configured for preventing the secure access device from receiving an input signal from the external computer device.

14. The device of claim 11 further comprising an input device controller configured for receiving an input signal from an input device used by the CR user, the input device controller being configured for forwarding the input signal to the internal data processing unit when the CED is transferred to the internal data processing unit, and for forwarding the input signal to the external computer device when the CED is transferred to the external computer device.

15. The device of claim 14, wherein the input device controller is configured to prevent the input signal from being forwarded to the external computer device, when the CED is transferred to the internal data processing unit.

16. The device of claim 14, wherein the input device controller is configured to prevent the input signal from being forwarded to the internal data processing unit, when the CED is transferred to external computer device.

17. The device of claim 14, wherein the input device controller is configured to prevent the input signal from being forwarded to the external computer device when the CR user enters sensitive information using the input device.

18. The device of claim 1, further comprising a buffer memory configured for preloading the CED data from the data storage section while the network access controller obtains the CR provider'"'"'s authorization to transfer the CED for producing the local computing environment.

19. The device of claim 1 configured for providing the CR user with secure access to cloud providers that offer cloud computing resources.

20. The device of claim 1 configured for providing the CR user with secure access to medical data stored by remote medical information providers.

21. The device of claim 1, further including an operating memory for storing data and software resources when the CR user operates with remote resources of a CR provider, wherein the CED includes a hibernate file for restoring content of the operating memory to a state that existed before the CR user terminated previous access to the resources of the CR provider.

22. The device of claim 1, further including an operating memory for storing data and software resources when the CR user operates with remote resources of a particular CR provider, wherein a snapshot of content of the operating memory is created when the CR user terminates access to resources of a first CR provider, the snapshot being stored in the device so as to enable the CR user to operate with the resources of the first CR provider while the CR user operates with resources of a second CR provider.

23. A method of enabling a CR user to access remote computing resources offered by multiple CR providers over a data network, the method comprising the steps of:

enabling multiple CR providers to manage access data in an access device available for the CR user, the access data being provided to enable the CR user to access the remote computing resources over the data network,

maintaining the access data in the access device so as to prevent the CR user from modifying the access data, and

enabling the CR user to prevent an authorized party from accessing the remote computing resources associated with the CR user.

24. The method of claim 23 further comprising the step of based on the access data, producing a local computing environment for accessing the remote computing resources.

25. The method of claim 24 further comprising the step of enabling the CR user to select between producing the local computing environment in the access device, and producing the local computing environment in an external computer device.

26. The method of claim 25 further comprising the step of preventing the external computer device from receiving an input signal from an input device when the CR user enters sensitive information using the input device.

27. The method of claim 25 further comprising the step of preventing the external computer device from receiving an input signal from an input device used by the CR user when the local computing environment is produced in the access device.

28. The method of claim 25 further comprising the step of preventing the external computer device from receiving the access data from the access device when the local computing environment is produced in the access device.