COMPOUND CERTIFICATIONS FOR ASSURANCE WITHOUT REVEALING INFRASTRUCTURE

• US 20140325047A1
• Filed: 09/12/2012
• Published: 10/30/2014
• Est. Priority Date: 09/12/2012
• Status: Active Grant

• Current Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC)
• Original Assignee: Empire Technology Development LLC (Allied Inventors Management, LLC)
• Inventors: Kruglick, Ezekiel
• Granted Patent: US 9,210,051 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: H04L 41/5041 characterised by the time relationship between creation and deployment of a service

Abstract

Technologies are presented for providing compound certificates via a certificate intermediary. In some examples, a certificate intermediary may generate a compound certificate that captures the certified behavior of an application and its underlying sub-services without revealing the identities of the sub-services for providing to a customer. The certificate intermediary may receive individual certificates from a certification authority. In other examples, the certification authority may generate the compound certificate, or the certificate intermediary may act as the certification authority for at least a portion of the sub-services.

Claims

1. A method to employ compound certification for assurance, the method comprising:

receiving, at an intermediary certification service, a redirected request for certification from a service application;

requesting certificates associated with the service application and service elements of the service application from a certification authority;

receiving the certificates;

composing a compound certificate based on the received certificates, wherein the compound certificate suppresses identities of the service elements and indicates a lowest common compliance level in the compound certificate in response to a determination that compliance levels of two or more service elements as defined by their respective certificates differ; and

providing the compound certificate in response to the redirected request.

2. The method according to claim 1, further comprising composing the compound certificate as a logic combination of the received certificates.

3. The method according to claim 1, wherein the received certificates establish compliance of each service element with one or more of predefined rules, standards, and/or practices.

5. The method according to claim 3, wherein the certificates prove compliance with one or more of payment card industry (PCI), health insurance portability and accountability act (HIPAA), controlled commerce list (CCL), ISO certifications, or international traffic in arms regulations (ITAR).

6. The method according to claim 1, further comprising receiving the certificates from a plurality of certification authorities.

7. The method according to claim 1, wherein the service elements include one or more of a computation service, a storage service, a platform service, and an interaction service.

8. The method according to claim 1, further comprising performing one or more of testing and certification tasks for at least one of the service elements at the intermediary certification service.

9. The method according to claim 1, further comprising enabling the service application to price certified and noncertified services by choosing whether to invoke the intermediary certification service.

4. (canceled)

10. (canceled)

11. A method to employ compound certification for assurance, the method comprising:

receiving a request for service from an application hosted by a datacenter, wherein the request includes a request for certification;

separating the request for certification from the request for service;

requesting certificates associated with the application and service elements of the application from a certification authority;

receiving the certificates;

composing a compound certificate based on the received certificates, wherein the compound certificate suppresses identities of the service elements and indicates a lowest common compliance level in the compound certificate in response to a determination that compliance levels of two or more service elements as defined by their respective certificates differ; and

providing the compound certificate in response to the request for service.

13. The method according to claim 11, further comprising:

intercepting the request for service that includes the request for certificate;

separating the request for certificate; and

forwarding the request for certificate to an intermediary certification service at one of a gateway or a session border controller of the datacenter hosting the application.

14. The method according to claim 11, wherein the application has a service-based architecture.

18. The method according to claim 11, wherein the service elements include one or more of a computation service, a storage service, a platform service, and an interaction service.

20. The method according to claim 11, further comprising enabling the application to price certified and noncertified services by choosing whether to invoke the compound certificate.

21. The method according to claim 11, further comprising:

enabling the service elements to provide tokens to the application; and

receiving the tokens from the application for delivery to the certification authority.

12. (canceled)

15-17. -17. (canceled)

19. (canceled)

22-31. -31. (canceled)

32. A cloud-based datacenter configured to employ compound certification for assurance, the datacenter comprising:

a plurality of virtual machines operable to be executed on one or more physical machines, wherein at least one of the virtual machines hosts a service application configured to provide a combination service to customers; and

a datacenter controller configured to;

receive a request for service from the service application hosted by the datacenter, wherein the request includes a request for certification;

separate the request for certification from the request for service; and

forward the request for certificate to an intermediary certification service such that a compound certificate composed of individual certificates for sub-services that suppresses identities of service elements and indicates a lowest common compliance level in the compound certificate in response to a determination that compliance levels of two or more service elements as defined by their respective certificates differ is provided by the intermediary certification service in response to the request for service.

33. The datacenter according to claim 32, wherein the intermediary certification service is further configured to compose the compound certificate as a logic combination of the received certificates.

34. The datacenter according to claim 32, wherein the datacenter controller is one of a gateway or a session border controller interfacing with the service application.

35. The datacenter according to claim 32, wherein the intermediary certification service is provided by the datacenter.

36. The datacenter according to claim 32, wherein the certificates establish compliance of each service element with one or more of predefined rules, standards, and/or practices.

39. The datacenter according to claim 32, wherein the service elements include one or more of a computation service, a storage service, a platform service, and an interaction service.

40. The datacenter according to claim 32, wherein the intermediary certification service is further configured to receive the certificates from a plurality of certification authorities.

41. The datacenter according to claim 32, wherein the service application is enabled to price certified and noncertified services by choosing whether to invoke the compound certificate.

42. The datacenter according to claim 32, wherein the datacenter controller is further configured to:

enable the service elements to provide tokens; and

provide the tokens to the intermediary certification service.

37-38. -38. (canceled)

43-63. -63. (canceled)