System and method for transparent cloud access

• US 8,286,232 B2
• Filed: 11/05/2009
• Issued: 10/09/2012
• Est. Priority Date: 03/13/2009
• Status: Active Grant

• Current Assignee: Micro Focus Software, Inc. (Open Text Corporation)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Jose, Jaimon, Burch, Lloyd Leon, Olds, Dale Robert, Allen, Jared Patrick, McClain, Carolyn Bennion, Carter, Stephen R.
• Primary Examiner(s): Hoffman, Brandon
• Application Number:
  US12/612,841
• Publication Number:
  US 20100235903A1
• Time in Patent Office: 1,069 Days
• Field of Search: None
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

System and method for transparent cloud access are described. In one embodiment, the system comprises an enterprise computing environment maintained by an enterprise and a cloud computing environment maintained by a cloud provider; and a secure bridge mechanism for interconnecting the enterprise computing environment and the cloud computing environment. The secure bridge mechanism comprises a first secure bridge portion associated with the enterprise and a second secure bridge portion associated with the cloud computing environment. The first and second secure bridge portions interoperate to provide transparent and secure access by resources of one of the computing environments to those of the other computing environment.

Claims

1. A system for providing transparent cloud access, the system comprising:

an enterprise computing environment;

a cloud computing environment;

a secure bridge mechanism for interconnecting the enterprise computing environment and the cloud computing environment, the secure bridge mechanism comprising;

a secure enterprise bridge portion associated with the enterprise computing environment; and

a secure cloud bridge portion associated with the cloud computing environment;

wherein the secure enterprise bridge portion is external to the cloud computing environment,

wherein the secure enterprise bridge portion is operable to initiate a process such that there is no need to punch a hole through a firewall of the enterprise computing environment, and

wherein the secure enterprise bridge portion and the secure cloud bridge portion interoperate to provide transparent and secure access by resources of one of the computing environments to resources within the other computing environment.

2. The system of claim 1 wherein each of the enterprise computing environment and cloud computing environment further comprises storage media.

3. The system of claim 2 wherein the secure enterprise bridge portion and the secure cloud bridge portion interoperate to provide transparent access by processes executing in the cloud computing environment to the storage media of the enterprise computing environment.

4. The system of claim 2 wherein the secure enterprise bridge portion and the secure cloud bridge portion interoperate to provide transparent access by processes executing in the enterprise computing environment to the storage media of the cloud computing environment.

5. The system of claim 1 wherein the secure bridge mechanism is implemented using Virtual Private Network (“

VPN”

) technology.

6. The system of claim 1 wherein the secure bridge mechanism is implemented via a proxy.

7. The system of claim 1 wherein the secure bridge mechanism is implemented via SSH tunneling.

8. A method for providing transparent access to resources maintained within an enterprise computing environment and a cloud computing environment, the method comprising:

providing a secure bridge mechanism between the enterprise computing environment and the cloud computing environment, the providing a secure bridge mechanism comprising;

providing a first secure bridge associated with the enterprise computing environment, the first secure bridge being external to the cloud computing environment; and

providing a second secure bridge associated with the cloud computing environment; and

negotiating a connection between the first and second secure bridges to provide transparent access by resources of one of the computing environments to resources within the other computing environment,

wherein negotiating the connection includes initiating a process at the first secure bridge such that there is no need to punch a hole through a firewall of the enterprise computing environment.

9. The method of claim 8 wherein the resources of each of the enterprise computing environment and the cloud computing environment include storage media.

10. The method of claim 9 further comprising causing the first and second secure bridges interoperate to provide transparent access by processes executing in the cloud computing environment to the storage media of the enterprise computing environment.

11. The method of claim 9 further comprising causing the first and second secure bridges interoperate to provide transparent access by processes executing in the enterprise computing environment to the storage media of the cloud computing environment.

12. The method of claim 8 further comprising causing the first and second secure bridges to interoperate using Virtual Private Network (“

VPN”

) technology.

13. The method of claim 8 further comprising causing the first and second secure bridges to interoperate via a proxy.

14. The method of claim 8 further comprising causing the first and second secure bridges to interoperate via SSH tunneling.

15. A system for providing transparent access to resources maintained within an enterprise computing environment and a cloud computing environment, the system comprising:

means for providing a secure bridge mechanism between the enterprise computing environment and the cloud computing environment, the providing a secure bridge mechanism comprising;

means for providing a first secure bridge associated with the enterprise computing environment, the first secure bridge being external to the cloud computing environment; and

means for providing a second secure bridge associated with the cloud computing environment; and

means for negotiating a connection between the first and second secure bridges to provide transparent access by resources of one of the computing environments to resources within the other computing environment

wherein means for negotiating the connection includes means for initiating a process at the first secure bridge such that there is no need to punch a hole through a firewall of the enterprise computing environment.

16. The system of claim 15 wherein the resources of each of the enterprise computing environment and the cloud computing environment include storage media.

17. The system of claim 16 further comprising means for causing the first and second secure bridges interoperate to provide transparent access by processes executing in the cloud computing environment to the storage media of the enterprise computing environment.

18. The system of claim 16 further comprising means for causing the first and second secure bridges interoperate to provide transparent access by processes executing in the enterprise computing environment to the storage media of the cloud computing environment.

19. The system of claim 15 further comprising means for causing the first and second secure bridges to interoperate using Virtual Private Network (“

VPN”

) technology.

20. The system of claim 15 further comprising means for causing the first and second secure bridges to interoperate via a tunneling mechanism.