METHOD AND DEVICE FOR CUSTOMIZING SECURITY SERVICE

• US 20160248811A1
• Filed: 07/29/2014
• Published: 08/25/2016
• Est. Priority Date: 10/25/2013
• Status: Active Grant

• Current Assignee: Xi'An Zhongxing New Software Co., Ltd. (ZTE Corporation)
• Original Assignee: ZTE Corporation
• Inventors: CHEN, Xiaohua
• Granted Patent: US 10,686,837 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The disclosure provides a method for customizing a security service and device, relates to the field of information security and solves the problem of incapability of an undiversified security service provision manner in meeting requirements of different tenants. The method includes that: a cloud computing data centre acquires at least one security service type selected by a tenant; and the cloud computing data centre executes corresponding security service according to the at least one security service type selected by the tenant. The technical solutions provided by the disclosure are applicable to a cloud computing system, and enables the cloud computing data centre to provide security service according to a requirement of the tenant.

Claims

1. A method for customizing a security service, comprising:

acquiring, by a cloud computing data centre, at least one security service type selected by a tenant; and

executing, by the cloud computing data centre, at least one security service corresponding to the at least one security service type according to the at least one security service type selected by the tenant.

2. The method for customizing the security service according to claim 1, wherein acquiring, by the cloud computing data centre, the at least one security service type selected by the tenant comprises:

after receiving a resource list sent by the tenant, determining, by the cloud computing data centre, at least one security service type of a virtual machine tenanted by the tenant, wherein the resource list contains the virtual machine requested to be tenanted by the tenant and a parameter of the virtual machine;

providing, by the cloud computing data centre, at least one determined security service type suitable for the virtual machine for the tenant to select; and

receiving, by the cloud computing data centre, information about one or more security service types selected by the tenant.

3. The method for customizing the security service according to claim 2, wherein providing, by the cloud computing data centre, the one or more determined security service types suitable for the virtual machine for the tenant to select comprises:

generating, by the cloud computing data centre, an optional security service type list according to the information about the determined security service types suitable for the virtual machine, wherein the optional security service type list comprises multiple entries and each entry corresponds to information about one optional security service wherein receiving, by the cloud computing data centre, the information about the one or more security service types selected by the tenant comprises;

receiving, by the cloud computing data centre, a selected security service type list returned by the tenant, wherein the selected security service type list contains one or more optional security service types selected by the tenant.

5. The method for customizing the security service according to claim 2, wherein determining, by the cloud computing data centre, the at least one security service type of the virtual machine tenanted by the tenant after receiving the resource list sent by the tenant comprises:

determining, by the cloud computing data centre, the at least one security service type suitable for the virtual machine as the optional security service type according to the parameter of the virtual machine.

6. The method for customizing the security service according to claim 1, further comprising:

configuring a virtual machine security service type list of the tenant in a security component of an access gateway, wherein the virtual machine security service type list comprising the at least one security service type selected by the tenant.

8. The method for customizing the security service according to claim 1, wherein acquiring, by the cloud computing data centre, the at least one security service type selected by the tenant comprises:

after receiving an virtual machine application sent by the tenant, determining, by the cloud computing data centre, at least one security service type of a virtual machine tenanted by the tenant, wherein the virtual machine application carries the virtual machine requested to be tenanted by the tenant, a parameter of the virtual machine and the at least one security service type requested by the tenant;

determining, by the cloud computing data centre, the at least one optional security service type of the tenant according to the parameter of the virtual machine; and

determining, by the cloud computing data centre, at least one optional security service type of a virtual machine requested by the tenant as the at least one security service type selected by the tenant.

9. The method for customizing the security service according to claim 1, after executing, by the cloud computing data centre, the corresponding security service according to the at least one security service type selected by the tenant, further comprising:

feeding back, by the cloud computing data centre, to the tenant a result of execution of the security service corresponding to at least one security service type selected by the tenant.

4. (canceled)

7. The method for customizing the security service according to claim 4, wherein acquiring, by the cloud computing data centre, the at least one security service type selected by the tenant comprises:

in a case that the tenant accesses the cloud computing data centre through the access gateway, sending, by the security component, the virtual machine security service type list to the cloud computing data centre; and

determining, by the cloud computing data centre according to the virtual machine security service type list of the at least one security service type selected by the tenant.

10. A method for customizing a security service, comprising:

selecting, by a tenant, at least one required security service type; and

submitting, by the tenant, the selected at least one security service type to a cloud computing data centre, to request for at least one security service corresponding to the at least one security service type.

11. The method for customizing the security service according to claim 10, wherein selecting, by the tenant, the required at least one security service type comprises:

sending, by the tenant, a resource list to the cloud computing data centre, the resource list containing a virtual machine requested to be tenanted by the tenant and a parameter of the virtual machine;

receiving, by the tenant, at least one security service type returned by the cloud computing data centre; and

selecting, by the tenant, at least one optional security service type from an optional security service type list.

12. The method for customizing the security service according to claim 11, wherein receiving, by the tenant, the at least one security service type returned by the cloud computing data centre is implemented as follows:

receiving, by the tenant, the optional security service type list returned by the cloud computing data centre, the optional security service type list comprising multiple entries and each entry corresponding to information about an optional security service type.

13. The method for customizing the security service according to claim 12, wherein submitting, by the tenant, the selected at least one security service type to the cloud computing data centre and making the request for the corresponding security service comprises:

generating, by the tenant, a selected security service type list according to the information about the selected optional at least one security service type, the selected security service type list containing at least one optional security service type selected by the tenant; and

sending, by the tenant, the selected security service type list to the cloud computing data centre.

14. The method for customizing the security service according to claim 10, wherein selecting, by the tenant, the required at least one security service type comprises:

configuring, by the tenant, a virtual machine security service type list of the tenant in a security component of an access gateway, the virtual machine security service type list comprising the at least one security service type selected by the tenant.

15. The method for customizing the security service according to claim 14, wherein submitting, by the tenant, the selected at least one security service type to the cloud computing data centre and making the request for the corresponding security service comprises:

in the case that the tenant accesses the cloud computing data centre through the access gateway, sending, by the security component, the virtual machine security service type list to the cloud computing data centre.

16. The method for customizing the security service according to claim 10, wherein submitting, by the tenant, the selected at least one security service type to the cloud computing data centre and making the request for the corresponding security service comprises:

sending, by the tenant, a virtual machine application to the cloud computing data centre, the virtual machine application carrying the virtual machine requested to be tenanted by the tenant, the parameter of the virtual machine and the at least one security service type requested by the tenant.

17. The method for customizing the security service according to claim 10, after the step of submitting, by the tenant, the selected at least one security service type to the cloud computing data centre and making the request for the corresponding security service, further comprising:

receiving, by the tenant, a result, fed back by the cloud computing data centre, of execution of the security service corresponding to the at least one security service type.

18. A device for customizing a security service, comprising:

a service type acquisition component, configured to acquire at least one security service type selected by a tenant; and

a service execution component, configured to execute corresponding security service according to the at least one security service type selected by the tenant.

19. The device for customizing the security service according to claim 18, wherein the service type acquisition component comprises:

a first request receiving unit, configured to determine at least one security service type of a virtual machine tenanted by the tenant after receiving a resource list sent by the tenant, wherein the resource list contains the virtual machine requested to be tenanted by the tenant and a parameter of the virtual machine;

a first service provision unit, configured to provide at least one determined security service type suitable for the virtual machine for the tenant to select; and

a first selection receiving unit, configured to receive information about at least one security service type selected by the tenant

wherein the service type acquisition component further comprises;

a second selection receiving unit, configured to receive a virtual machine security service type list sent by a security component in the case that the tenant accesses a cloud computing data centre through an access gateway, and determine the at least one security service type selected by the tenant according to the virtual machine security service type list.

21. The device for customizing the security service according to claim 19, wherein the service type acquisition component further comprises:

a third request receiving unit, configured to determine the at least one security service type of the virtual machine tenanted by the tenant after receiving a virtual machine application sent by the tenant, the virtual machine application containing the virtual machine requested to be tenanted by the tenant, the parameter of the virtual machine and at least one security service type requested by the tenant;

a third optional determination unit, configured to determine optional at least one security service type of the tenant according to the parameter of the virtual machine; and

a third selection unit, configured to determine the optional at least one security service type requested by the tenant as the at least one security service type selected by the tenant.

22. The device for customizing the security service according to claim 18, further comprising:

a result feedback component, configured to feed back a result of execution of the security service corresponding to the at least one security service type selected by the tenant to the tenant.

20. (canceled)