DYNAMIC PROVISIONING OF VIRTUAL SYSTEMS

• US 20130275967A1
• Filed: 04/12/2012
• Published: 10/17/2013
• Est. Priority Date: 04/12/2012
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Jenne, Nathan
• Granted Patent: US 9,129,124 B2
• Time in Patent Office: Days
• US Class Current: 718/1
• CPC Class Codes: G06F 2009/45595 Network integration; Enabling network access in virtual machine instances
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

A method for dynamic provisioning of virtual systems includes, with a server system that hosts virtual systems, detecting a new virtual system on the server system, and with the server system, using a physical address of the new virtual system to perform network authentication on behalf of the new virtual system.

Claims

1. A method for dynamic provisioning of virtual systems, the method comprising:

with a server system that hosts virtual systems, detecting a new virtual system on said server system;

with said server system, using a physical address of said new virtual system to perform network authentication on behalf of said new virtual system.

2. The method of claim 1, further comprising, with a neighboring network device to said server system, receiving provisioning information for said new virtual system from an authentication server.

3. The method of claim 2, with said neighboring network device, applying said provisioning information to a port connecting said neighboring network device to said server system.

4. The method of claim 1, wherein said new virtual system is a newly created virtual system.

5. The method of claim 1, wherein said new virtual system is transferred from a different server system that hosts virtual systems.

6. The method of claim 1, further comprising, with said server system, removing said new virtual system from said network in response to said new virtual system being removed from said server system.

7. The method of claim 1, further comprising, with said server system, transmitting and sending network traffic for said new virtual system by impersonating said physical address of said new virtual system.

8. A server system to host a number of virtual systems, the server system comprising:

at least one processor;

a memory communicatively coupled to the at least one processor, the memory comprising computer executable code that, when executed by the at least one processor, causes the at least one processor to;

detect a new virtual system on said server system; and

use a physical address of said new virtual system to perform network authentication on behalf of said new virtual system.

9. The system of claim 8, wherein in response to said network authentication, a neighboring network device to said server system receives provisioning information for said new virtual system.

10. The system of claim 9, wherein said neighboring network device is to apply said provisioning information to a port connecting said neighboring network device to said server system.

11. The system of claim 8, wherein said new virtual system is a newly created virtual system.

12. The system of claim 8, wherein said new virtual system is transferred from a different server system that hosts virtual systems.

13. The system of claim 8, wherein said processor is further to remove said new virtual system from said network in response to said new virtual system being removed from said server system.

14. The system of claim 8, wherein said processor is further to transmit and send network traffic for said new virtual system by impersonating said physical address of said new virtual system.

15. A method for dynamic provisioning of virtual systems, the method comprising:

with a server system that hosts virtual systems, detecting a new virtual system on said server system;

with said server system, transmitting an authentication request, a data packet associated with said request indicating the source of the packet by the physical address of a virtual system running on said server system;

with said server system, transmitting data packets associated with said virtual system to a neighboring network device, said network device to allow transmission of data packets associated with said virtual system as a result of said authentication request.