Certificate checkin service

• US 9,338,160 B2
• Filed: 08/07/2013
• Issued: 05/10/2016
• Est. Priority Date: 08/07/2013
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Matthews, John, Hayutin, Wes, Duryee, Christopher, Slagle, James, Morgan, Chris, Sanders, Todd
• Primary Examiner(s): Pyzocha, Michael
• Application Number:
  US13/961,495
• Publication Number:
  US 20150047058A1
• Time in Patent Office: 1,007 Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A method and system for a content provider to enable the consumption of content by properly entitled consumers (e.g., end-users, clients, customers) within a cloud provider network. A first certificate checkin service (CCS) executed by a processing device deployed in the cloud provider network receives a first set of usage data relating to content of a content provider consumed by a client of the cloud provider network. The first CCS provides the usage data to a communicatively coupled parent CCS. The first CCS provides the parent CCS with a request for entitlement data relating to the cloud provider, and stores the entitlement data received from the parent CCS. The entitlement data may be used by the first CCS to determine if the client is entitled to consume the content.

Claims

1. A method comprising:

receiving, by a processing device executing a first certificate checkin service (CCS), a first set of usage data relating to content of a content provider consumed by a client of a cloud provider network;

aggregating, by the first CCS, the first set of usage data with a plurality of additional sets of usage data received from a plurality of downstream CCSs to form an aggregated set of usage data;

providing the aggregated set of usage data to a parent CCS for provisioning to a plurality of upstream parent CCSs for delivery of the aggregated set of usage data to the content provider;

providing, by the first CCS to the parent CCS, a request for entitlement data relating to the cloud provider network;

receiving, via each of the plurality of upstream parent CCSs, the entitlement data from the content provider;

storing, by the first CCS, the entitlement data; and

determining, by the processing device executing the first CCS, if the client is entitled to consume the content in view of the entitlement data.

2. The method of claim 1, further comprising providing, by the parent CCS, the first set of usage data to a communicatively coupled upstream CCS.

3. The method of claim 1, wherein the first CCS manages a plurality of clients within a network segment of the cloud provider network.

4. The method of claim 1, wherein the first CCS receives a second set of usage data from a communicatively coupled child CCS, the second set of usage data relating to content of the content provider consumed by another client of a cloud provider network.

5. The method of claim 1, wherein the content provider manages compliance of an agreement governing consumption of the content by the cloud provider network in view of the first set of usage data.

6. The method of claim 1, wherein the plurality of upstream parent CCSs comprises a main cloud provider CCS coupled to the content provider for the final delivery of the aggregated set of usage data.

7. A non-transitory computer readable storage medium comprising instructions that, when executed by a processing device, cause the processing device to:

receive, by the processing device executing a first certificate checkin service (CCS), a first set of usage data relating to content of a content provider consumed by a client of a cloud provider network;

aggregate, by the first CCS, the first set of usage data with a plurality of additional sets of usage data received from a plurality of downstream CCSs to form an aggregated set of usage data;

provide the aggregated set of usage data to a parent CCS for provisioning to a plurality of upstream parent CCSs for delivery of the aggregated set of usage data to the content provider;

provide, by the processing device to the parent CCS, a request for entitlement data relating to the cloud provider network;

receive, via each of the plurality of upstream parent CCSs, the entitlement data from the content provider;

store, by the processing device, the entitlement data; and

determine, by the processing device, if the client is entitled to consume the content in view of the entitlement data.

8. The non-transitory computer readable medium of claim 7, the parent CCS to provide the first set of usage data to a communicatively coupled upstream CCS.

9. The non-transitory computer readable medium of claim 7, the processing device to manage a plurality of clients within a network segment of the cloud provider network.

10. The non-transitory computer readable medium of claim 7, the processing device to receive a second set of usage data from a communicatively coupled child CCS, the second set of usage data relating to content of the content provider consumed by another client of a cloud provider network.

11. The non-transitory computer readable medium of claim 7, the processing device to manage compliance of an agreement governing consumption of the content by the cloud provider network in view of the first set of usage data.

12. The non-transitory computer readable medium of claim 7, wherein the plurality of upstream parent CCSs comprises a main cloud provider CCS coupled to the content provider for the final delivery of the aggregated set of usage data.

13. A system comprising:

a memory to store instructions; and

a processing device operatively coupled to the memory, the processing device to execute the instructions to;

receive, by a first certificate checkin service (CCS) executed by the processing device, a first set of usage data relating to content of a content provider consumed by a client of a cloud provider network;

aggregate, by the first CCS, the first set of usage data with a plurality of additional sets of usage data received from a plurality of downstream CCSs to form an aggregated set of usage data;

provide the aggregated set of usage data to a parent CCS for provisioning to a plurality of upstream parent CCSs for delivery of the aggregated set of usage data to the content provider;

provide, by the first CCS to the parent CCS, a request for entitlement data relating to the cloud provider network;

receive, via each of the plurality of upstream parent CCSs, the entitlement data from the content provider;

store, by the first CCS, the entitlement data received from the parent CCS; and

determine, by the first CCS, if the client is entitled to consume the content in view of the entitlement data.

14. The system of claim 13, the parent CCS to provide the first set of usage data to a communicatively coupled upstream CCS.

15. The system of claim 13, wherein the processing device to execute the first CCS to manage a plurality of clients within a network segment of the cloud provider network.

16. The system of claim 13, wherein the processing device receives a second set of usage data from a communicatively coupled child CCS, the second set of usage data relating to content of the content provider consumed by another client of a cloud provider network.

17. The system of claim 13, wherein the content provider manages compliance of an agreement governing consumption of the content by the cloud provider network in view of the first set of usage data.