APPLICATION TOKEN THROUGH ASSOCIATED CONTAINER

• US 20180082053A1
• Filed: 05/15/2017
• Published: 03/22/2018
• Est. Priority Date: 09/21/2016
• Status: Active Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: BROWN, Michael, TELLEZ, Juan
• Application Number:
  US15/595,824
• Publication Number:
  US 20180082053A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

A method and system that implements a container manger that manages access to resources within a virtualization platform with the use of application tokens. An application token includes information identifying a primary application that can be used to manage access to the resources for the primary application. The method includes generating an application token for the primary application, where the primary application is in a first container. The method further instantiates an application helper and a second container for the application helper and provides the application token to the application helper to manage on behalf of the primary application.

Claims

1. A method for a container manger to manage access to resources within a virtualization platform with the use of application tokens, where an application token includes information identifying a primary application that can be used to manage access to the resources for the primary application, the method comprising:

generating an application token for the primary application, where the primary application is in a first container;

instantiating an application helper and a second container for the application helper; and

providing the application token to the application helper to manage on behalf of the primary application.

2. The method of claim 1, further comprising:

initiating the primary application and the first container.

3. The method of claim 1, further comprising:

receiving a renewal request for the application token from the application helper.

4. The method of claim 3, further comprising:

sending a renewed application token to the application helper, in response to the renewal request.

5. A computing system configured to implement a method for a container manger to manage access to resources within a virtualization platform with the use of application tokens, where an application token includes information identifying a primary application that can be used to manage access to the resources for the primary application, the computing system comprising:

a non-transitory machine readable medium having stored therein a container manager; and

a processor coupled to the non-transitory machine readable medium, the processor configured to execute the container manager, the container manager to generate an application token for the primary application, where the primary application is in a first container, to instantiate an application helper and a second container for the application helper, and to provide the application token to the application helper to manage on behalf of the primary application.

6. The computing system of claim 5, wherein the container manager is further to initiate the primary application and the first container.

7. The computing system of claim 5, wherein the container manager is further configured to receive a renewal request for the application token from the application helper.

8. The computing system of claim 7, wherein the container manager is further configured to send a renewed application token to the application helper, in response to the renewal request.

9. A method for an application helper to assist a primary application to access resources within a virtualization platform with the use of application tokens, where an application token includes information identifying the primary application that can be used to manage access to the resources for the primary application, the method comprising:

receiving an application programming interface (API) request from a primary application;

inserting an application token of the primary application into the API request; and

sending the API request to an API server with the application token.

10. The method of claim 9, further comprising:

receiving response from the API server; and

determining whether the received response indicates an error.

11. The method of claim 10, further comprising:

checking whether the error indicates that the application token is invalid or expired; and

returning the error to the primary application in response to the error not indicating an invalid or expired application token.

12. The method of claim 9, further comprising:

requesting renewal of the application token from a container manager; and

receiving a renewed application token from the container manager.

13. The method of claim 9, further comprising:

sending a response from the API server to the primary application.

14. A computing system configured to implement a method for an application helper to assist a primary application to access resources within a virtualization platform with the use of application tokens, where an application token includes information identifying the primary application that can be used to manage access to the resources for the primary application, the computing system comprising:

a non-transitory machine readable medium having stored therein the application helper; and

a processor coupled to the non-transitory machine readable medium, the processor configured to execute the application helper, the application helper to receive an application programming interface (API) request from a primary application, to insert an application token of the primary application into the API request, and to send the API request to an API server with the application token.

15. The computing system of claim 14, wherein the application helper is further to receive a response from the API server, and to determine whether the received response indicates an error.

16. The computing system of claim 15, wherein the application helper is further to check whether the error indicates that the application token is invalid or expired, and to return the error to the primary application in response to the error not indicating an invalid or expired application token.

17. The computing system of claim 14, wherein the application helper is further to request renewal of the application token from a container manager, and to receive a renewed application token from the container manager.

18. The computing system of claim 14, wherein the application helper is further to send a response from the API server to the primary application.