Cloud federation as a service

• US 8,924,569 B2
• Filed: 12/17/2009
• Issued: 12/30/2014
• Est. Priority Date: 12/17/2009
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Li, Hong
• Primary Examiner(s): Gillis, Brian J
• Application Number:
  US12/653,701
• Publication Number:
  US 20110153727A1
• Time in Patent Office: 1,839 Days
• Field of Search: 709/217, 709/226, 709/227, 709/228
• US Class Current: 709/227
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 9/5055 considering software capabilities, i.e. software resources associated or available to the machine
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/63 Routing a service request depending on the request content or context

Abstract

A Cloud federator may be used to allow seamless and transparent access by a Cloud Client to Cloud services. Federation may be provided on various terms, including as a subscription based real-time online service to Cloud Clients. The Cloud federator may automatically and transparently effect communication between the Cloud Client and Clouds and desired services of the Clouds, and automatically perform identity federation. A Service Abstraction Layer (SAL) may be implemented to simplify Client communication, and Clouds/Cloud services may elect to support the SAL to facilitate federation of their services.

Claims

1. A federation method for a Cloud Client seeking a cloud service from a Cloud, comprising:

receiving a request from the Cloud Client to subscribe to a profile federation service, wherein the profile federation service includes at least one of passing of identity information associated with a Cloud Client being applied across multiple Clouds, transmitting multiple copies of an identity customer profile to one or more Cloud providers, and causing to be stored portions of the identity customer profile in parts across the multiple Clouds;

authenticating the Cloud Client based at least in part on the request;

retrieving at least a portion of a Cloud Client profile associated with the Cloud Client;

providing the portion of the Cloud Client profile to facilitate the Cloud Client to access the cloud service of the Cloud;

identifying an interface for the Cloud providing the cloud service;

comparing the interface to an interface preference associated with the Cloud Client; and

transparently mapping the interface to the interface preference.

2. The method of claim 1, wherein the portion of the Cloud Client profile is provided to selected ones of:

the Cloud Client, or the Cloud providing the cloud service.

3. The method of claim 1, further comprising authenticating the Cloud Client based at least in part on a characteristic associated with the Cloud Client.

4. The method of claim 3 wherein the characteristic is a selected one of:

a cached data associated with the Cloud Client, a Cloud Client location, a communication speed with the Cloud Client, a communication throughput with the Cloud Client, a communication cost associated with the Cloud Client, and a maximum payment preference.

5. The method of claim 1, further comprising:

identifying validation data required to allow the Cloud Client to access the cloud service of the Cloud;

wherein the at least a portion includes the identified validation data.

6. The method of claim 1 further comprising:

proxying communication between the Cloud Client and the Cloud.

7. The method of claim 1 wherein selected ones of the Cloud Client and the Cloud are virtual machines.

8. The method of claim 7, further comprising mapping data transparently to the Cloud Client.

9. The method of claim 7, further comprising:

identifying a second interface of a second Cloud corresponding to the interface preference, the second interface having a second format different from the first format; and

mapping data between the Cloud Client and the second Cloud to make data from the second Cloud having the second format to be in accord with an interface preference.

10. An article comprising a non-transitory machine-accessible medium having one or more associated instructions for federating Cloud Client access to a cloud service of a Cloud, wherein the one or more instructions, when executed, results in a machine performing:

receiving a request from the Cloud Client to subscribe to a profile federation service, wherein the profile federation service includes at least one of passing identity information associated with a Cloud Client being applied across multiple Clouds, transmitting multiple copies of an identity customer profile to one or more Cloud providers, and causing to be stored portions of the identity customer profile in parts across the multiple Clouds;

authenticating the Cloud client based at least in part on the request;

retrieving at least a portion of a profile associated with the Cloud Client;

providing the portion of the Cloud Client profile to facilitate the Cloud Client accessing the cloud service of the Cloud;

identifying an interface for the Cloud providing the cloud service;

comparing the interface to an interface preference associated with the Cloud Client; and

transparently mapping the interface to the interface preference.

11. The article of claim 10 wherein the machine-accessible medium further includes instructions, when executed, results in the machine performing:

authenticating the Cloud Client based at least in part on a characteristic associated with the Cloud Client, the characteristic being a selected one of;

a cached data associated with the Cloud Client, a Cloud Client location, a communication speed with the Cloud Client, a communication throughput with the Cloud Client, a communication cost associated with the Cloud Client, and a maximum payment preference.

12. The article of claim 10 wherein the machine-accessible medium further includes instructions, when executed, results in the machine performing:

proxying communication between the Cloud Client and the Cloud.