Information level agreements for enterprise cloud data

• US 9,621,555 B2
• Filed: 04/29/2013
• Issued: 04/11/2017
• Est. Priority Date: 04/29/2013
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP SE
• Inventors: Odenheimer, Jens
• Primary Examiner(s): Vaughan, Michael R
• Assistant Examiner(s): Savenkov, Vadim
• Application Number:
  US13/873,088
• Publication Number:
  US 20140325600A1
• Time in Patent Office: 1,443 Days
• Field of Search: 726 4, 726 30
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

In some example implementations, a method may include receiving, at a broker, authorization to access at least one cloud service provider; receiving, at the broker, a message representative of at least one of a submission of data to or a request for data from the at least one cloud service provider; determining, by the broker based on a classification of the data, whether to authorize the at least one of the submission of data to or the request for data from the at least one cloud service provider; and forwarding, by the broker based on the determining, the at least one of the submission of data to or the request for data from the at least one cloud service provider, wherein the receiving authorization, the receiving the message, the determining, and the forwarding are implemented by at least one processor. Related systems, methods, and articles of manufacture are also provided.

Claims

1. A method comprising:

receiving, at a broker interfacing at least one cloud service provider and client system associated with a user, data being submitted to or received from the at least one cloud service provider;

analyzing, by the broker, the content of the data to determine whether the data is authorized to be submitted, by the client system, to the at least one cloud service provider, or to be received, by the client system, from the at least one cloud service provider;

assigning, by the broker and based on the analyzing, a classification to the data, the classification indicating whether the data is authorized to be submitted, by the client system, to the at least one cloud service provider, or to be received, by the client system, from the at least one cloud service provider;

determining, by the broker and based on the assigned classification, whether to transmit the data for submission to the cloud service provider or transmit the data to the client system, the data further classified in accordance with a cloud service provider type; and

forwarding, by the broker and based on the determining, the data to the at least one cloud service provider or to the client system, wherein the broker comprises at least one processor.

2. The method of claim 1, wherein the broker includes one or more rules to classify, for the client system, the data in accordance with the cloud service provider type.

3. The method of claim 2 further comprising:

classifying, by the broker, data based on the one or more rules, the one or more rules classifying data into categories based on the cloud service provider type, including a first level classification corresponding to a private cloud including private data accessible to only the client system, a second level classification corresponding to a public cloud including public data accessible publically, and a third level classification corresponding to a peer cloud including peer-sharable data accessible to the client system and at least one other peer client system designated by the client system.

4. The method of claim 1, wherein the at least one cloud service provider includes at least one of the following cloud service provider types a private cloud storing data classified as private, a public cloud storing data classified as public, or a business cloud storing data classified as sharable among peers.

5. The method of claim 1, wherein the content of the data includes business information.

6. The method of claim 1, wherein the at least one cloud service provider includes metadata associated with the data stored in the at least one cloud service provider, and the method further comprises:

updating the metadata associated with the data stored in the at least one cloud service provider to include the determined classification of the data.

7. The method of claim 1, wherein the data comprises accompanying metadata containing information about the data and the method further comprises:

updating the metadata accompanying the data to include the determined classification of the data.

8. A non-transitory computer-readable storage medium including computer code, which when executed by at least one processor provides operations comprising:

receiving, at a broker interfacing at least one cloud service provider and a client system associated with a user, data being submitted to or received from the at least one cloud service provider;

analyzing, by the broker, the content of the data to determine whether the data is authorized to be submitted, by the client system, to the at least one cloud service provider, or to be received, by the client system, from the at least one cloud service provider;

assigning, by the broker and based on the analyzing, a classification to the data, the classification indicating whether the data is authorized to be submitted, by the client system, to the at least one cloud service provider, or to be received, by the client system, from the at least one cloud service provider;

determining, by the broker and based on the assigned classification, whether to transmit the data for submission to the cloud service provider or transmit the data to the client system, the data further classified in accordance with a cloud service provider type; and

forwarding, by the broker and based on the determining, the data to the at least one cloud service provider or to the client system.

9. The non-transitory computer-readable storage medium of claim 8, wherein the broker includes one or more rules to classify, for the at least one client system, the data in accordance with the cloud service provider type.

10. The non-transitory computer-readable storage medium of claim 9 further comprising:

classifying, by the broker, data based on the one or more rules, the one or more rules classifying data into categories based on the cloud service provider type, including a first level classification corresponding to a private cloud including private data accessible to only the client system, a second level classification corresponding to a public cloud including public data accessible publically, and a third level classification corresponding to a peer cloud including peer-sharable data accessible to the client system and at least one other peer client system designated by the client system.

11. The non-transitory computer-readable storage medium of claim 8, wherein the at least one cloud service provider includes at least one of the following cloud service provider types a private cloud storing data classified as private, a public cloud storing data classified as public, or a business cloud storing data classified as sharable among peers.

12. The non-transitory computer-readable storage medium of claim 8, wherein the data comprises accompanying metadata containing information about the data, and further comprising:

updating the metadata accompanying the data to include the determined classification of the data.

13. A system comprising:

at least one processor; and

at least one memory including computer code, which when executed by the at least one processor provides operations comprising;

receiving, at a broker interfacing at least one cloud service provider and a client system associated with a user, data being submitted to or received from the at least one cloud service provider;

analyzing, by the broker, the content of the data to determine whether the data is authorized to be submitted, by the client system, to the at least one cloud service provider, or to be received, by the client system, from the at least one cloud service provider;

assigning, by the broker and based on the analyzing, a classification to the data, the classification indicating whether the data is authorized to be submitted, by the client system, to the at least one cloud service provider, or to be received, by the client system, from the at least one cloud service provider;

determining, by the broker and based on the assigned classification, whether to transmit the data for submission to the cloud service provider or transmit the data to the client system, the data further classified in accordance with a cloud service provider type; and

forwarding, by the broker and based on the determining, the data to the at least one cloud service provider or to the client system.

14. The system of claim 13, wherein the broker includes one or more rules to classify, for the at least one client system, the data in accordance with the cloud service provider type.

15. The system of claim 14 further comprising:

classifying, by the broker, data based on the one or more rules, the one or more rules classifying data into categories based on the cloud service provider type, including a first level classification corresponding to a private cloud including private data accessible to only the client system, a second level classification corresponding to a public cloud including public data accessible publically, and a third level classification corresponding to a peer cloud including peer-sharable data accessible to the client system and at least one other peer client system designated by the client system.

16. The system of claim 13, wherein the at least one cloud service provider includes at least one of the following cloud service provider types a private cloud storing data classified as private, a public cloud storing data classified as public, or a business cloud storing data classified as sharable among peers.

17. The system of claim 13, wherein the data comprises accompanying metadata containing information about the data, the operations further comprising:

updating the metadata accompanying the data to include the determined classification of the data.