Systems and Apparatuses for a Secure Mobile Cloud Framework for Mobile Computing and Communication

• US 20120258777A1
• Filed: 04/05/2012
• Published: 10/11/2012
• Est. Priority Date: 04/08/2011
• Status: Active Grant

• Current Assignee: Arizona Board of Regents (University of Arizona)
• Original Assignee: Arizona Board of Regents (University of Arizona)
• Inventors: Huang, Dijiang
• Granted Patent: US 9,357,331 B2
• Time in Patent Office: Days
• US Class Current: 455/557
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

Systems and apparatuses for a secure mobile cloud framework (referred to as MobiCloud) for mobile computing and communication are disclosed. Embodiments of MobiCloud transfer each mobile node from a traditional strictly layer-structured communication node into a service node (SN). Each SN may be used as a service provider or a service broker according its capability. Each SN may be incorporated as a virtualized component of the MobiCloud. In some embodiments, MobiCloud mirrors an SN to one or multiple virtual images in the Cloud for addressing communication and computation deficiencies of mobile devices. Virtual images can create a visualized MANET routing and communication layer that can maximally assist the mobile nodes to enable pervasive computing services for each mobile device owner. A secure data processing framework is disclosed for the MobiCloud.

Claims

1. A mobile device configured to be a member of a mobile and ad hoc network comprising:

a wireless communication interface;

a data storage device configured to store;

one or more software components;

one or more duplicated software components; and

one or more extended semi-shadow images, wherein the one or more extended shadow images may be configured to link one or more common software components through a virtual trust and provisioning domain;

a mobile processing device configured to;

optionally execute the one or more software components locally;

optionally migrate execution of the one or more software components on a cloud-based computing server;

optionally execute the one or more duplicated software components on a cloud-based computing server; and

provide sensing data.

2. The mobile device of claim 1, wherein the one or more software components may be platform dependent or platform independent.

3. The mobile device of claim 1, the mobile processing device configured to be in communication with a resource manager through the wireless communication interface.

4. The mobile device of claim 3, wherein providing sensing data comprises providing sensing data to the resource manager.

5. The mobile device of claim 1, the mobile processing device further configured to receive instructions from the resource manager instructing whether to execute, migrate, or duplicate the execution of at least one of the one or more software components.

6. The mobile device of claim 1, further comprising:

a battery power source; and

a global position system.

7. The mobile device of claim 2, wherein sensing data at least comprises mobile processing device type, utilization, battery state, and location.

8. The mobile device of claim 7, wherein sensing data at least comprises mobile processing device type, utilization, battery power source state, and location, the location determined using the global positioning system.

9. The mobile device of claim 1, the virtual trust and provisioning domain configured to isolate information flows between the software components contained in the extended semi-shadow images.

10. A mobile and ad hoc network comprising:

one or more mobile devices configured to be members of the mobile and ad hoc network, the mobile devices comprising;

a wireless communication interface;

a data storage device configured to store;

one or more software components;

one or more duplicated software components; and

one or more extended semi-shadow images, wherein the one or more extended shadow images may be configured to link one or more common software components through a virtual trust and provisioning domain;

a mobile processing device configured to;

optionally execute the one or more software components;

optionally migrate execution of the one or more software components on a cloud-based computing server;

optionally execute the one or more duplicated software components on a cloud-based computing server; and

provide sensing data;

the cloud-based computing server optionally configured to execute the one or more software components whose execution has been migrated; and

a resource manager configured to provide instructions to the one or more mobile devices whether to execute at least one of the one or more software components or migrate the execution of at least one of the one or more software components to the cloud-based computing server.

11. The network of claim 10, wherein the one or more software components may be platform dependent or platform independent.

12. The network of claim 10, the mobile processing device configured to be in communication with a resource manager through the wireless communication interface.

13. The network of claim 12, wherein providing sensing data comprises providing sensing data to the resource manager.

14. The network of claim 13, the resource manager further configured to determine the instructions based on the sensing data.

15. The network of claim 10, further comprising:

a battery power source; and

a global position system.

16. The network of claim 11, wherein sensing data at least comprises mobile processing device type, utilization, battery state, and location.

17. The network of claim 16, wherein sensing data at least comprises mobile processing device type, utilization, battery power source state, and location, the location determined using the global positioning system.

18. The network of claim 10, the virtual trust and provisioning domain configured to isolate information flows between the software components contained in the extended semi-shadow images.