System and method for restricting data transfers and managing software components of distributed computers

• US 7,016,950 B2
• Filed: 12/08/2004
• Issued: 03/21/2006
• Est. Priority Date: 10/24/2000
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Tabbara, Bassam, Hunt, Galen C., Welland, Robert V., Hydrie, Aamer, Stutz, David S., Levi, Steven P.
• Primary Examiner(s): Jaroenchonwanit, Bunjob
• Assistant Examiner(s): Maniwang, Joseph
• Application Number:
  US11/007,141
• Publication Number:
  US 20050102403A1
• Time in Patent Office: 468 Days
• Field of Search: 709/223, 709/224, 709/225, 709/229, 709/245, 713/200, 713/201, 713/202
• US Class Current: 709/223
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

A controller, referred to as the “BMonitor”, is situated on a computer. The BMonitor includes a plurality of filters that identify where data can be sent to and/or received from, such as another node in a co-location facility or a client computer coupled to the computer via the Internet. The BMonitor further receives and implements requests from external sources regarding the management of software components executing on the computer, allowing such external sources to initiate, terminate, debug, etc. software components on the computer. Additionally, the BMonitor operates as a trusted third party mediating interaction among multiple external sources managing the computer.

Claims

1. One or more computer-readable media having stored thereon instructions that, when executed by one or more processors of a system, cause the one or more processors to:

allow management devices corresponding to a plurality of management agents responsible for managing the system to access the system; and

implement a controller to operate as a trusted third party mediating interaction among the plurality of management agents by assigning each of the plurality of management agents to a different one of a plurality of ownership domains and restricting the rights of each ownership domain in the system, wherein one of the plurality of ownership domains is a top-level ownership domain having a first set of rights, wherein each of the other ownership domains in the plurality of ownership domains has a second set of rights, and wherein the controller allows a device corresponding to any one of the other ownership domains to revoke the top-level ownership domain, and wherein the controller erases a system memory during the revocation process.

2. One or more computer-readable media as recited in claim 1, where each of the plurality of management agents corresponds to one or more management devices that are coupled to the system.

3. One or more computer-readable media as recited in claim 1, wherein the controller is further to terminate execution of a software engine in the system in response to a request from a management device corresponding to the one management agent having the extended set of rights.

4. One or more computer-readable media as recited in claim 1, wherein the controller is further to initiate execution of a software engine in the system in response to a request from a management device corresponding to the one management agent having the extended set of rights.

5. One or more computer-readable media as recited in claim 1, wherein the system comprises a node in a co-location facility.

6. A system comprising:

interface means for allowing management devices corresponding to a plurality of management agents responsible for managing the system to access the system; and

controller means for operating as a trusted third party mediating interaction among the plurality of management agents by assigning each of the plurality of management agents to a different one of a plurality of ownership domains and restricting the rights of each ownership domain in the system, wherein one of the plurality of ownership domains is a top-level ownership domain having a first set of rights, wherein each of the other ownership domains in the plurality of ownership domains has a second set of rights, and wherein the controller allows a device corresponding to any one of the other ownership domains to revoke the top-level ownership domain, and wherein the controller erases a system memory during the revocation process.

7. A system as recited in claim 6, where each of the plurality of management agents corresponds to one or more management devices that are coupled to the system.

8. A system as recited in claim 6, wherein the controller means includes means for terminating execution of a software engine in the system in response to a request from a management device corresponding to the one management agent having the extended set of rights.

9. A system as recited in claim 6, wherein the controller means includes means for initiating execution of a software engine in the system in response to a request from a management device corresponding to the one management agent having the extended set of rights.

10. A system as recited in claim 6, wherein the system comprises a node in a co-location facility.

11. A computer comprising:

a processor; and

a memory, coupled to the processor, storing instructions that, when executed by the processor, cause the processor to;

allow management devices corresponding to a plurality of management agents responsible for managing the computer to access the computer; and

implement a controller to operate as a trusted third party mediating interaction among the plurality of management agents by assigning each of the plurality of management agents to a different one of a plurality of ownership domains and restricting the rights of each ownership domain in the computer, wherein one of the plurality of ownership domains is a top-level ownership domain having a first set of rights, wherein each of the other ownership domains in the plurality of ownership domains has a second set of rights, and wherein the controller allows a device corresponding to any one of the other ownership domains to revoke the top-level ownership domain, and wherein the controller erases a system memory during the revocation process.

12. A computer as recited in claim 11, where each of the plurality of management agents corresponds to one or more management devices that are coupled to the computer.

13. A computer as recited in claim 11, wherein the controller is further to terminate execution of a software engine in the computer in response to a request from a management device corresponding to the one management agent having the extended set of rights.

14. A computer as recited in claim 11, wherein the controller is further to initiate execution of a software engine in the computer in response to a request from a management device corresponding to the one management agent having the extended set of rights.

15. A computer as recited in claim 11, wherein the computer comprises a node in a co-location facility.