TECHNIQUES FOR ESTABLISHING A TRUSTED CLOUD SERVICE

• US 20140351894A1
• Filed: 08/13/2014
• Published: 11/27/2014
• Est. Priority Date: 05/04/2011
• Status: Active Grant

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Bergeson, Bruce L., Tietjen, Carl, McClain, Carolyn B., Henderson, Larry Hal, Carter, Stephen R.
• Granted Patent: US 9,369,494 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Techniques for establishing a trusted cloud service are provided. Packages are created for services that include certificates, configuration information, trust information, and images for deploying instances of the services. The packages can be used to deploy the services in trusted environments and authenticated to deploy in sub environments of un-trusted environments. The sub environments are trusted by the trusted environments. Also, clouds are prospected for purposes of identifying desirable clouds and creating the packages for deployment.

Claims

1. (canceled)

6. The method of claim 1, wherein creating further includes receiving the certificates and keys from the trusted target environment.

7. The method of claim 1 further comprising, receiving notice from the trusted target environment that the instance of the migrating service is deployed for interacting with the initiating trusted environment.

8. The method of claim 1 further comprising, receiving interaction from the instance of the migrating service by one or more other services within the initiating trusted environment.

2. A method, comprising:

obtaining an environment specification for a trusted target environment, the environment specification obtained within an initiating trusted environment;

creating a package to include;

certificates, keys, a service image for a migrating service that is migrating to the trusted target environment, a service identifier for the migrating service, and a package identifier for the package;

establishing trust configuration information for the trusted target environment having a trust configuration identifier;

including the trust configuration information in the package; and

sending the package to a target service in the trusted target environment for deployment of an instance of the migrating service, via the service image, within the trusted target environment by processing components of the package.

3. The method of claim 2, wherein obtaining further includes recognizing the initiating trusted environment and the trusted target environment are in a same physical location or in clouds owned by a same cloud provider.

4. The method of claim 2, wherein obtaining further includes recognizing the initiating trusted environment and the trusted target environment are in different physical locations or in clouds owned by different cloud providers.

5. The method of claim 2, wherein creating further includes generating the certificates and the keys within the initiating trusted environment.

9. A method, comprising:

obtaining a specification for a trusted environment;

creating a package to migrate a service image for a service to the trusted environment using the specification, the package including trust configuration information; and

sending the package to the trusted environment for deploying an instance f the service using the package.

10. The method of claim 9, wherein obtaining further includes locating the specification in one or more clouds owned by a same cloud provider.

11. The method of claim 9, wherein obtaining includes acquiring the specification from the trusted environment.

12. The method of claim 9, wherein creating further includes providing certificates and keys within the package for use by the service once deployed to the trusted environment.

13. The method of claim 12, wherein providing further includes receiving the certificates and the keys from the trusted environment.

14. The method of claim 12, wherein providing further includes generating the certificate and the keys independent of the trusted environment.

15. The method of claim 9, wherein creating further includes providing a service identifier for the service within the package recognized by the trusted environment.

16. The method of claim 9 further comprising, receiving notice when the service is deployed in the trusted environment.

17. The method of claim 16 further comprising, interacting with the service once deployed in the trusted environment.

18. A system, comprising:

a processor;

an ad hoc and trusted service deployer configured and adapted to;

i) execute on the processor;

ii) create a deployment package based on a specification for a trusted environment for a service being deployed to the trusted environment, and iii) send the package to the trusted environment for deployment and initiation within the trusted environment.

19. The system of claim 18, wherein the ad hoc and trusted service deployer is further adapted and configured to create keys and certificates within the deployment package for use by the service once deployed in the trusted environment.

20. The system of claim 18, wherein the ad hoc and trusted service deployer is further configured and adapted to obtain the specification from the trusted environment.

21. The system of claim 18, wherein the ad hoc and trusted service deployer is further adapted and configured, in iii), to:

send the package to a trusted service deployer within the trusted environment.