USAGE TRACKING IN HYBRID CLOUD COMPUTING SYSTEMS

• US 20190158499A1
• Filed: 01/25/2019
• Published: 05/23/2019
• Est. Priority Date: 07/22/2016
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Pogrebinsky, Vladimir
• Granted Patent: US 10,530,775 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 12/14 Charging , metering or billing arrangements for data wireline or wireless communications
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0892 by using authentication-authorization-accounting [AAA] servers or protocols
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

Techniques for facilitating usage tracking in hybrid cloud computing systems are disclosed herein. In one embodiment, a method can include receiving, from a private cloud computing system, a request for uploading usage data to a storage in a public cloud computing system. The method can also include authenticating the received request based on a service subscription of the private cloud computing system, and upon authentication, providing the private cloud computing system with an access permission to store the usage data in the storage of the computing system. The method can further include receiving the usage data from the private cloud computing system submitted with the access permission and storing the received usage data in the storage of the public cloud computing system.

Claims

1-20. -20. (canceled)

21. A method of managing application deployment between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:

transmitting, from a connection service of the private cloud computing system, an authentication request to the public cloud computing system; and

upon authentication of the connection service by the public cloud computing system,

receiving, at the private cloud computing system, data representing one or more applications deployable in the private cloud computing system; and

upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,

instantiating a compute resource at the private cloud computing system;

using the instantiated compute resource at the private cloud computing system to download, from the public cloud computing system, a digital image of the at least one application; and

deploying, based on the downloaded digital image, the at the at least one application in the private cloud computing system, thereby allowing the private cloud computing system access to the one or more applications even though the public cloud computing system has no direct access to resources in the private cloud computing system.

22. The method of claim 21 wherein receiving, at the private cloud computing system, the data representing the one or more applications deployable in the private cloud computing system includes upon authentication of the connection service at the public cloud computing system, receiving, from the public cloud computing system, an access token and transmitting, to the public cloud computing system, a request for the one or more applications along with the received access token.

23. The method of claim 21, further comprising:

upon receiving, at the private cloud computing system, the data representing one or more applications deployable in the private cloud computing system,

outputting the one or more applications in a gallery at the private cloud computing system; and

receiving, at the private cloud computing system, the selection of at least one of the one or more applications from the gallery.

24. The method of claim 21, further comprising:

upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,

transmitting, to the public cloud computing system, a request for details of the at least one application; and

receiving, from the public cloud computing system, data representing one or more of a shared access signature (“

SAS”

) key, a network location of the digital image, or a download size of the at least one application.

25. The method of claim 21, further comprising:

upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,

transmitting, to the public cloud computing system, a request for details of the at least one application;

receiving, from the public cloud computing system, data representing one or more of a shared access signature (“

SAS”

) key, a network location of the digital image, or a download size of the at least one application; and

wherein using the instantiated compute resource at the private cloud computing system to download the digital image of the at least one application includes;

passing the one or more SAS key, network location of the digital image, or the download size of the at least one application to the instantiated compute resource; and

downloading, from the public cloud computing system, the digital image of the at least one application using the instantiated compute resource in accordance with the one or more SAS key, network location of the digital image, or the download size of the at least one application.

26. The method of claim 21 wherein instantiating the compute resource includes instantiating, on a server at the private cloud computing system, a virtual machine, and wherein using the instantiated compute resource includes using the instantiated virtual machine at the private cloud computing system to download, from the public cloud computing system, the digital image of the at least one application.

27. The method of claim 21 wherein:

transmitting the authentication request includes transmitting, from the connection service of the private cloud computing system, the authentication request along with credentials of a subscription; and

upon authentication of the connection service at the public cloud computing system based on the subscription, receiving, at the private cloud computing system, data representing the one or more applications deployable in the private cloud computing system from an access service in the public cloud computing system to which the subscription is directed.

28. The method of claim 27, further comprising:

receiving, from the access service at the public cloud computing system, a notification that the at least one application is to be decommissioned; and

in response to receiving the notification, deleting the digital image of the at least one application from the private cloud computing system and removing the instantiated compute resource.

29. A method of managing application deployment between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:

receiving, from a connection service of the private cloud computing system, an authentication request to the public cloud computing system along with credentials of a subscription; and

upon authentication of the connection service at the public cloud computing system based on the credentials,

providing, from an access service corresponding to the subscription, data representing one or more applications deployable in the private cloud computing system to the connection service at the private cloud computing system; and

upon receiving, from the connection service at the private cloud computing system, a download request of at least one of the one or more applications, transmitting, from the public cloud computing system, a digital image of the at least one application to the private cloud computing system, thereby allowing deployment of the at the at least one application in the private cloud computing system even though the public cloud computing system has no direct access to resources in the private cloud computing system.

30. The method of claim 29, further comprising:

upon authentication of the connection service at the public cloud computing system, providing, to the connection service at the private cloud computing system, an access token for accessing the one or more applications at the public cloud computing system.

31. The method of claim 29, further comprising:

receiving, at the public cloud computing system, the one or more applications to be published in the public cloud computing system; and

in response to receiving the one or more application, publishing the one or more applications to the access service at the public cloud computing system to be exposed to the private cloud computing system upon authentication of the credentials of the subscription.

32. The method of claim 29, further comprising:

upon authentication of the connection service at the public cloud computing system based on the credentials,

receiving, at the access service of the public cloud computing system, a request for details of the at least one application; and

in response to the received request, providing, from the public cloud computing system, data representing one or more of a shared access signature (“

SAS”

) key, a network location of the digital image, or a download size of the at least one application to the connection service at the private cloud computing system.

33. The method of claim 29, further comprising:

receiving, at the access service of the public cloud computing system, a notification that the at least one application is to be decommissioned; and

in response to receiving the notification, deleting the digital image of the at least one application from the public cloud computing system and informing the connection service of the private cloud service that the at least one application is to be decommissioned.

34. A server in a private cloud computing system interconnected to a public cloud computing system via a computer network, the server comprising:

a processor; and

a memory operatively coupled to the processor, the memory containing instructions executable by the processor to cause the server to;

transmit an authentication request to the public cloud computing system via the computer network; and

upon authentication of the connection service at the public cloud computing system,

receive data representing one or more applications deployable in the private cloud computing system; and

upon receiving a selection of at least one of the one or more applications, instantiate a compute resource at the server in the private cloud computing system, use the instantiated compute resource at the private cloud computing system to download, from the public cloud computing system, a digital image of the at least one application, and deploy, based on the downloaded digital image, the at the at least one application to other servers in the private cloud computing system, thereby allowing the private cloud computing system access to the one or more applications even though the public cloud computing system has no direct access to resources in the private cloud computing system.

35. The server of claim 34 wherein to receive the data representing the one or more applications deployable in the private cloud computing system includes upon authentication of the connection service at the public cloud computing system, to receive, from the public cloud computing system, an access token and transmit, to the public cloud computing system, a request for the one or more applications along with the received access token.

36. The server of claim 34 wherein the memory includes additional instructions executable by the processor to cause the server to:

upon receiving, at the private cloud computing system, the data representing one or more applications deployable in the private cloud computing system,

output the one or more applications in a gallery at the private cloud computing system; and

receive, at the private cloud computing system, the selection of at least one of the one or more applications from the gallery.

37. The server of claim 34 wherein the memory includes additional instructions executable by the processor to cause the server to:

upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,

transmit, to the public cloud computing system, a request for details of the at least one application; and

receive, from the public cloud computing system, data representing one or more of a shared access signature (“

SAS”

) key, a network location of the digital image, or a download size of the at least one application.

38. The server of claim 34 wherein the memory includes additional instructions executable by the processor to cause the server to:

upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,

transmit, to the public cloud computing system, a request for details of the at least one application;

receive, from the public cloud computing system, data representing one or more of a shared access signature (“

SAS”

) key, a network location of the digital image, or a download size of the at least one application; and

wherein to use the instantiated compute resource at the private cloud computing system to download the digital image of the at least one application includes to;

pass the one or more SAS key, network location of the digital image, or the download size of the at least one application to the instantiated compute resource; and

download, from the public cloud computing system, the digital image of the at least one application using the instantiated compute resource in accordance with the one or more SAS key, network location of the digital image, or the download size of the at least one application.

39. The server of claim 34 wherein to instantiate the compute resource includes to instantiate, on the server at the private cloud computing system, a virtual machine, and wherein to use the instantiated compute resource includes to use the instantiated virtual machine at the private cloud computing system to download, from the public cloud computing system, the digital image of the at least one application.

40. The server of claim 34 wherein the memory includes additional instructions executable by the processor to cause the server to:

receiving, from the public cloud computing system, a notification that the at least one application is to be decommissioned; and

in response to receiving the notification, delete the digital image of the at least one application from the private cloud computing system.