Multitenant hosted virtual machine infrastructure

• US 8,473,627 B2
• Filed: 10/18/2011
• Issued: 06/25/2013
• Est. Priority Date: 05/02/2008
• Status: Active Grant

• Current Assignee: Skytap Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: Skytap Incorporated (Kyndryl Holdings, Inc.)
• Inventors: Astete, Nicholas Luis, Brethorst, Aaron Benjamin, Goldberg, Joseph Michael, Hanlon, Matthew, Hutchinson, Anthony A. Jr., Janakiraman, Gopalakrishnan, Kotelnikov, Alexander, Novodvorskiy, Petr, Richardson, David William, Skelly, Roxanne Camille, Slioussar, Nikolai, Weeks, Jonathan
• Primary Examiner(s): HIGA, BRENDAN Y
• Application Number:
  US13/276,153
• Publication Number:
  US 20120096158A1
• Time in Patent Office: 616 Days
• Field of Search: 709203-205, 709212-219, 709/229, 709/223, 709225-226, 718/1, 718/104
• US Class Current: 709/229
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2201/84 Using snapshots, i.e. a logical point-in-time copy of the data
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A multi-tenant virtual machine infrastructure (MTVMI) allows multiple tenants to independently access and use a plurality of virtual computing resources via the Internet. Within the MTVMI, different tenants may define unique configurations of virtual computing resources and unique rules to govern the use of the virtual computing resources. The MTVMI may be configured to provide valuable services for tenants and users associated with the tenants.

Claims

1. A method in a computing system having a processor for sharing access to a virtual machine, comprising:

generating a unique URL corresponding to the virtual machine;

providing the generated URL to a user specifically authorized to access the virtual machine;

receiving an HTTP request specifying the provided URL;

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, providing access to the virtual machine; and

receiving from the user specifically authorized access the virtual machine input specifying timing restrictions on access to the virtual machine using the provided URL, and wherein access is only provided in connection with the HTTP request if the HTTP request is received at a time consistent with the specified timing restrictions.

2. The method of claim 1 wherein the user rho issued the HTTP request is not the authorized user.

3. The method of claim 1 wherein the output of the console of the virtual machine is provided in response to the HTTP request, but no input for the console of the virtual machine is accepted in connection with the HTTP request.

4. The method of claim 1 wherein, in response to the HTTP request, the user who issued the HTTP request receives the output of the console of the virtual machine and is permitted to provide input from the console of the virtual machine.

5. The method of claim 1, wherein the access is to a console of the virtual machine.

6. A computer-readable device storing contents adapted to cause a computing system to perform a method for sharing access to a virtual machine, the method comprising:

generating a unique URL corresponding to the virtual machine;

providing the generated URL to a user specifically authorized to access the virtual machine;

receiving an HTTP request specifying the provided URL;

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, providing access to the virtual machine; and

receiving from the user specifically authorized access the virtual machine input specifying timing restrictions on access to the virtual machine using the provided URL, and wherein access is only provided in connection with the HTTP request if the HTTP request is received at a time consistent with the specified timing restrictions.

7. The computer-readable device of claim 6 wherein the user who issued the HTTP request is not the authorized user.

8. The computer-readable device of claim 6 wherein the output of the console of the virtual machine is provided in response to the HTTP request, but no input for the console of the virtual machine is accepted in connection with the http request.

9. The computer-readable device of claim 6 wherein, in response to the HTTP request, the user who issued the http request receives the output of the console of the virtual machine and is permitted to provide input from the console of the virtual machine.

10. The computer readable device of claim 6, wherein the access is to a console of the virtual machine.

11. A computing system comprising:

at least one processor for sharing access to a virtual machine; and

memory comprising computer program code configured to, with the at least one processor, cause the computing system to;

generate a unique URL corresponding to the virtual machine;

provide the generated URL to a user specifically authorized to access the virtual machine;

receive an HTTP request specifying the provided URL;

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, provide access to the virtual machine; and

receive from the user specifically authorized access the virtual machine input specifying timing restrictions on access to the virtual machine using the provided URL,

and wherein access is only provided in connection with the HTTP request if the HTTP request is received at a time consistent with the specified timing restrictions.

12. The computing system of claim 11 wherein the user who issued the HTTP request is not the authorized user.

13. The computing system of claim 11 wherein the output of the console of the virtual machine is provided in response to the HTTP request, but no input for the console of the virtual machine is accepted in connection with the http request.

14. The computing system of claim 11 wherein, in response to the HTTP request, the user who issued the http request receives the output of the console of the virtual machine and is permitted to provide input from the console of the virtual machine.

15. The computing system of claim 11 wherein the access is to a console of the virtual machine.