CERTIFICATE CHECKIN SERVICE

• US 20150047058A1
• Filed: 08/07/2013
• Published: 02/12/2015
• Est. Priority Date: 08/07/2013
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Hayutin, Wes, Duryee, Christopher, Matthews, John, Slagle, James, Morgan, Chris, Sanders, Todd
• Granted Patent: US 9,338,160 B2
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A method and system for a content provider to enable the consumption of content by properly entitled consumers (e.g., end-users, clients, customers) within a cloud provider network. A first certificate checkin service (CCS) executed by a processing device deployed in the cloud provider network receives a first set of usage data relating to content of a content provider consumed by a client of the cloud provider network. The first CCS provides the usage data to a communicatively coupled parent CCS. The first CCS provides the parent CCS with a request for entitlement data relating to the cloud provider, and stores the entitlement data received from the parent CCS. The entitlement data may be used by the first CCS to determine if the client is entitled to consume the content.

Claims

1. A method comprising:

receiving, by a first certificate checkin service (CCS) executed by a processing device, a first set of usage data relating to content of a content provider consumed by a client of a cloud provider network;

providing, by the first CCS, the usage data to a communicatively coupled parent CCS;

providing, by the first CCS to the parent CCS, a request for entitlement data relating to the cloud provider;

storing, by the first CCS, the entitlement data received from the parent CCS; and

determining, by the first CCS, if the client is entitled to consume the content in view of the entitlement data.

2. The method of claim 1, further comprising providing, by the parent CCS, the first set of usage data to a communicatively coupled upstream CCS.

3. The method of claim 1, wherein the first CCS manages a plurality of clients within a network segment of the cloud provider network.

4. The method of claim 1, wherein the first CCS receives a second set of usage data from a communicatively coupled child CCS, the second set of usage data relating to content of the content provider consumed by another client of a cloud provider network.

5. The method of claim 1, wherein the content provider manages compliance of an agreement governing consumption of the content by the cloud provider network in view of the first set of usage data.

6. The method of claim 1, further comprising:

aggregating, by the first CCS, the first set of usage data with a plurality of additional sets of usage data received from a plurality of downstream CCSs to form an aggregated set of usage data; and

providing the aggregated set of usage data to the parent CCS for provisioning to a plurality of upstream parent CCSs for final delivery of the aggregated set of usage data to the content provider.

7. The method of claim 6, wherein the plurality of upstream parent CCSs comprises a main cloud provider CCS coupled to the content provider for the final delivery of the aggregated set of usage data.

8. A non-transitory computer readable storage medium including instructions that, when executed by a processing device, cause the processing device to:

receive, by a first certificate checkin service (CCS) executed by the processing device, a first set of usage data relating to content of a content provider consumed by a client of a cloud provider network;

provide, by the first CCS, the usage data to a communicatively coupled parent CCS;

provide, by the first CCS to the parent CCS, a request for entitlement data relating to the cloud provider;

store, by the first CCS, the entitlement data received from the parent CCS; and

determine, by the first CCS, if the client is entitled to consume the content in view of the entitlement data.

9. The non-transitory computer readable medium of claim 8, wherein the parent CCS provides the first set of usage data to a communicatively coupled upstream CCS.

10. The non-transitory computer readable medium of claim 8, wherein the first CCS manages a plurality of clients within a network segment of the cloud provider network.

11. The non-transitory computer readable medium of claim 8, wherein the first CCS receives a second set of usage data from a communicatively coupled child CCS, the second set of usage data relating to content of the content provider consumed by another client of a cloud provider network.

12. The non-transitory computer readable medium of claim 8, wherein the content provider manages compliance of an agreement governing consumption of the content by the cloud provider network in view of the first set of usage data.

13. The non-transitory computer readable medium of claim 8, the processing device to:

aggregate the first set of usage data with a plurality of additional sets of usage data received from a plurality of downstream CCSs to form an aggregated set of usage data; and

provide the aggregated set of usage data to the parent CCS for provisioning to a plurality of upstream parent CCSs for final delivery of the aggregated set of usage data to the content provider.

14. The non-transitory computer readable medium of claim 13, wherein the plurality of upstream parent CCSs comprises a main cloud provider CCS coupled to the content provider for the final delivery of the aggregated set of usage data.

15. A system comprising:

a memory comprising instructions; and

a processing device coupled to the memory, the processing device to execute the instructions to perform operations comprising;

receiving, by a first certificate checkin service (CCS) executed by the processing device, a first set of usage data relating to content of a content provider consumed by a client of a cloud provider network;

providing, by the first CCS, the usage data to a communicatively coupled parent CCS;

providing, by the first CCS to the parent CCS, a request for entitlement data relating to the cloud provider;

storing, by the first CCS, the entitlement data received from the parent CCS; and

determining, by the first CCS, if the client is entitled to consume the content in view of the entitlement data.

16. The system of claim 15, further comprising providing, by the parent CCS, the first set of usage data to a communicatively coupled upstream CCS.

17. The system of claim 15, wherein the first CCS manages a plurality of clients within a network segment of the cloud provider network.

18. The system of claim 15, wherein the first CCS receives a second set of usage data from a communicatively coupled child CCS, the second set of usage data relating to content of the content provider consumed by another client of a cloud provider network.

19. The system of claim 15, wherein the content provider manages compliance of an agreement governing consumption of the content by the cloud provider network in view of the first set of usage data.

20. The system of claim 15, further comprising:

aggregating, by the first CCS, the first set of usage data with a plurality of additional sets of usage data received from a plurality of downstream CCSs to form an aggregated set of usage data; and

providing the aggregated set of usage data to the parent CCS for provisioning to a plurality of upstream parent CCSs for final delivery of the aggregated set of usage data to the content provider.