Multitenant hosted virtual machine infrastructure

• US 9,063,763 B2
• Filed: 06/24/2013
• Issued: 06/23/2015
• Est. Priority Date: 05/02/2008
• Status: Active Grant

• Current Assignee: Skytap Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: Skytap Incorporated (Kyndryl Holdings, Inc.)
• Inventors: Astete, Nicholas Luis, Brethorst, Aaron Benjamin, Goldberg, Joseph Michael, Hanlon, Matthew, Hutchinson, Anthony A. Jr., Janakiraman, Gopalakrishnan, Kotelnikov, Alexander, Holland, Peter, Richardson, David William, Skelly, Roxanne Camille, Slioussar, Nikolai, Weeks, Jonathan
• Primary Examiner(s): HIGA, BRENDAN Y
• Application Number:
  US13/925,682
• Publication Number:
  US 20130290960A1
• Time in Patent Office: 729 Days
• Field of Search: 709212-216, 709/223, 709225-226, 709/229, 718/1, 718/104
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 2009/4557 Distribution of virtual machine instances; Migration and load balancing
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2201/84 Using snapshots, i.e. a logical point-in-time copy of the data
• CPC Class Codes: G06F 9/44505 Configuring for program initiating, e.g. using registry, configuration files
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/5077 Logical partitioning of resources; Management or configuration of virtualized resources specific details on emulation or internal functioning of virtual machines G06F9/455
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A multi-tenant virtual machine infrastructure (MTVMI) allows multiple tenants to independently access and use a plurality of virtual computing resources via the Internet. Within the MTVMI, different tenants may define unique configurations of virtual computing resources and unique rules to govern the use of the virtual computing resources. The MTVMI may be configured to provide valuable services for tenants and users associated with the tenants.

Claims

1. A method in a computing system having a processor for sharing access to virtual machines, comprising:

generating a unique URL, wherein the generated unique URL specifies a URL handle for providing access to a plurality of virtual machines of a virtual data center, wherein the URL handle is configured to reference attributes associated with one or more of the virtual machines of the virtual data center, and wherein the attributes specify at least one user privilege;

providing the generated unique URL to a user specifically authorized to access the plurality of virtual machines of the virtual data center;

receiving an HTTP request specifying the provided URL; and

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, providing access to at least one virtual machine of the virtual data center, based on the provided URL.

2. The method of claim 1 wherein the user who issued the HTTP request is not the authorized user.

3. The method of claim 1 wherein the access is to a console of the at least one virtual machine, and wherein output of the console of the at least one virtual machine is provided in response to the HTTP request, but no input for the console of the at least one virtual machine is accepted in connection with the HTTP request.

4. The method of claim 1 wherein the access is to a console of the at least one virtual machine, and in response to the HTTP request, the user who issued the HTTP request receives output of the console of the at least one virtual machine and is permitted to provide input from the console of the at least one virtual machine.

5. A computer-readable storage device storing contents adapted to cause a computing system to perform a method for sharing access to virtual machines, the method comprising:

generating a unique URL, wherein the generated unique URL specifies a URL handle for providing access to a plurality of virtual machines of a virtual data center, wherein the URL handle is configured to reference attributes associated with one or more of the virtual machines of the virtual data center, and wherein the attributes specify at least one user privilege;

providing the generated unique URL to a user specifically authorized to access the virtual machines;

receiving an HTTP request specifying the provided URL; and

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, providing access to at least one of the plurality of virtual machines.

6. The computer-readable storage device of claim 5 wherein the user who issued the HTTP request is not the authorized user.

7. The computer-readable storage device of claim 5 wherein, in response to the HTTP request, the user who issued the http request receives output of a console of the at least one virtual machine and is permitted to provide input from the console of the at least one virtual machine.

8. The computer-readable storage device of claim 5 wherein output of a console of the at least one virtual machine is provided in response to the HTTP request, but no input for the console of the at least one virtual machine is accepted in connection with the http request.

9. A computing system, comprising:

at least one processor for sharing access to a virtual machine; and

memory storing computer program code configured to, with the at least one processor, cause the computing system to;

generate a unique URL, wherein the generated unique URL specifies a URL handle for providing access to a plurality of virtual machines, wherein the URL handle is configured to reference attributes associated with one or more of the virtual machines of the virtual data center, and wherein the attributes specify at least one user privilege;

provide the generated unique URL to a user specifically authorized to access the plurality of virtual machines;

receiver an HTTP request specifying the provided URL; and

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, provide access to at least one of the plurality of virtual machines.

10. A computer-implemented method in a virtual computing system comprising:

generating a unique URL, wherein the generated unique URL specifies a URL handle for providing access to of a plurality of virtual machines, wherein the URL handle is configured to reference attributes associated with one or more of the virtual machines of the virtual data center, and wherein the attributes specify at least one user privilege;

providing the generated unique URL to a user specifically authorized to access the plurality of the virtual machines;

receiving an HTTP request specifying the provided URL; and

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, providing access to at least one of the plurality of virtual machines.

11. A virtual computing device, comprising:

a processor;

a console; and

a storage device having instructions executable by the processor to;

generate a unique URL that specifies a URL handle for providing access to a plurality of virtual machines, wherein the URL handle is configured to reference attributes associated with one or more of the virtual machines of the virtual data center, and wherein the attributes specify at least one user privilege;

provide the generated unique URL to a user specifically authorized to access the plurality of virtual machines;

receive an HTTP request specifying the provided URL; and

in response to the HTTP request, without attempting to determine the identity of a user who issued the HTTP request, provide access to the plurality of virtual machines, wherein the access is to a console of at least one virtual machine.