Systems and methods for implementing an on-demand computing network environment

• US 9,935,850 B1
• Filed: 11/11/2015
• Issued: 04/03/2018
• Est. Priority Date: 11/18/2014
• Status: Active Grant

• Current Assignee: Cyber IP Holdings LLC
• Original Assignee: Berryville Holdings, LLC
• Inventors: Delaney, Christopher Edward, Jacobs, Carl Bailey, Jurado, Chava Louis, Jackson, Christopher Edward
• Primary Examiner(s): Meky, Moustafa M
• Assistant Examiner(s): Rubin, Blake
• Application Number:
  US14/937,978
• Time in Patent Office: 874 Days
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/5051 Service on demand, e.g. definition and deployment of services in real time
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/563 Data redirection of data network streams
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Systems and methods are provided for a computer-implemented method of implementing an on-demand computing network environment. A network specification is received from a user. Resources from one or more resource providers are provisioned. The on-demand computing network is configured, where configuring comprises assigning a first provisioned resource as a hub device and assigning one or more second provisioned resources as rim devices, where rim devices are configured to communicate with one another only via the hub device.

Claims

1. A computer-implemented method of implementing an on-demand computing network environment, comprising:

providing a user interface that presents available computing resources and physical locations of those computing resources, wherein a first type of computing resource is available from multiple physical locations;

receiving a network specification from a user via the user interface, wherein the network specification includes a plurality of resources and selected physical locations for each of the plurality of resources;

provisioning the plurality of resources from one or more resource providers;

configuring the on-demand computing network, wherein configuring comprises;

assigning a first provisioned resource as a hub device;

assigning one or more second provisioned resources as rim devices, wherein a particular rim device comprises a bridge device, wherein the bridge device repackages data received from the on-demand computing network prior to forwarding that data such that the data received from the on-demand computing network appears to terminate at the bridge device to an observer viewing the data between the hub device and the bridge device.

2. The method of claim 1, wherein a particular rim device is designated as an exit point, wherein the on-demand computing network transmits traffic out of the on-demand computing network only through the particular exit point rim device or another rim device identified as an exit point.

3. The method of claim 2, where two or more rim devices are identified as exit points, wherein a service broker module at the hub device is configured to receive a user command to designate one of the exit point rim devices from which to transmit traffic from the on-demand computing network.

4. The method of claim 3, wherein the service broker is configured to direct traffic transmission from a different exit point rim device upon receipt of a user command.

5. The method of claim 4, wherein the user interface is configured to:

identify one or more types of traffic and identifications of the exit point rim devices;

upon user selection of a traffic type and a specific exit point rim device, direct traffic of the selected traffic type from the on-demand computing network via the specific exit point rim device.

6. The method of claim 5, further comprising:

upon user selection of the traffic type and a second specific exit point hub device, directing traffic of the selected traffic type from the on-demand computing network via the second specific exit point rim device.

7. The method of claim 6, wherein the user is connected to the hub device via a VPN connection, wherein the second specific exit point is selected in favor of the specific exit point for transmission of traffic without requiring the user to reconnect to the VPN connection.

8. The method of claim 1, wherein configuring further comprising:

assigning a plurality of joints between a particular rim device and the hub device via one or more joint relay provisioned resources, wherein the hub device is unaware of a physical address of the particular rim device and the particular rim device is unaware of a physical address of the hub device.

9. The method of claim 8, wherein the joint relay provisioned resources communicate via an SSH protocol, wherein the hub device and the particular rim device communicate with one another via the joint relay provisioned resources via VPN.

10. The method of claim 1, wherein a first rim device is configured to send and receive data via a cellular network, wherein the first rim device is configured to transmit data within the on-demand computing network via the hub device and one or more non-cellular proxy server relays to a second rim device, wherein the second rim device is configured to send and receive data via a second cellular network.

11. The method of claim 10, wherein an address for communicating with the first rim device is provided to a first user, wherein an address for communicating with the second rim device is provided to a second user, wherein the first rim device is unaware of a physical address of the second rim device and the second rim device is unaware of a physical address of the first rim device.

12. The method of claim 10, wherein the first rim device is configured to communicate with a cellular phone via an Andriod, iOS, or Windows Mobile protocol.

13. The method of claim 1, wherein at least one rim device is a non-exit point, wherein the non-exit point rim device provides a computing service.

14. The method of claim 13, wherein the computing service is a file server service or a mail server service.

15. The method of claim 1, wherein the resources are provisioned from a plurality of disparate service providers.

16. The method of claim 1, wherein the resources include an email account, a social media account, and a third party compute service provider processing resource.

17. The method of claim 1, wherein the on-demand computing network includes a single hub device.

18. The method of claim 1, wherein the configuring is performed using an external engine, wherein resources can be added and removed from the on-demand network only using the engine.

19. The method of claim 18, further comprising:

de-provisioning a provisioned resource assigned to the on-demand computing network using the engine, wherein the engine does not communicate with the provisioned resource being de-provisioned.

20. The method of claim 18, wherein the engine does not communicate with the on-demand computing network when the on-demand computing network is in an active state.

21. The method of claim 1, wherein the hub device and a particular rim device are located at different locations in disparate legal jurisdictions.

22. The method of claim 21, wherein the particular rim device is located in a different country than the hub device.

23. The method of claim 1, wherein a first rim device is configured to communicate with a user, wherein a second rim device is configured to communicate with a service that is external to the on-demand network, wherein the first rim device communicates with the second rim device via the hub device, wherein the first rim device is located in a different country than the second rim device, wherein the external service is unable to discern that commands transmitted from the second rim device via the hub and the first rim device are coming from a different country than the country of the second rim device.

24. The method of claim 1, wherein a first rim device anonymizes a source of data that is provided from the network to a client via the first rim device, wherein that data is received by the on-demand computing network at a second rim device.

25. The method of claim 1, wherein an external computing device that communications with a first rim device comprises a memory, a processor, and a network interface.

26. A computer-implemented system for implementing an on-demand computing network environment, comprising:

a provisioned resource data store configured to store records associated with resources provisioned from one or more resource providers, wherein records in the provisioned resources data store include an identification of a particular resource and a particular on-demand computing network to which the particular resource has been assigned;

a network implementation engine configured to;

provide a user interface that presents available computing resources and physical locations of those computing resources, wherein a first type of computing resource is available from multiple physical locations;

receive a network specification from a user via the user interface, wherein the network specification includes a plurality of resources and selected physical locations for each of the plurality of resources;

assign a first provisioned resource as a hub device to the particular on-demand computing network and to update the provisioned resource data store; and

assign one or more second provisioned resources as rim devices, wherein a particular rim device comprises a bridge device, wherein the bridge device repackages data received from the on-demand computing network prior to forwarding that data such that the data received from the on-demand computing network appears to terminate at the bridge device to an observer viewing the data between the hub device and the bridge device.