Access services in hybrid cloud computing systems

Patent metadata

Field	Value
Publication number	US-10484460-B2
Application number	US-201615217522-A
Country	US
Kind code	B2
Filing date	Jul 22, 2016
Priority date	Jul 22, 2016
Publication date	Nov 19, 2019
Grant date	Nov 19, 2019

Abstract

Techniques for facilitating operations in hybrid cloud computing systems are disclosed herein. In one embodiment, a method can include receiving, at a public cloud, a plurality of applications deployable in a private cloud and informing an access service of the public cloud computing system regarding the received applications deployable in the private cloud. The method also includes receiving, from a connection service of the private cloud, a request for a list of the received applications available at the public cloud and deployable in the private cloud. The method further includes in response to the received request, selectively identifying to the private cloud the list of applications based on a service subscription associated with the connection service.

First claim

We claim:

1. A method of facilitating operations between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:
exposing, at the public cloud computing system, one or more applications deployable in the private cloud computing system to an access service of the public cloud computing system, the access service being configured to respond to one or more requests from a connection service of the private cloud computing system without having direct access to resources in the private cloud computing system;
receiving, from the connection service of the private cloud computing system, a request for a list of at least one of the one or more applications that are deployable in the private cloud computing system; and
in response to the received request,
transmitting, via the computer network, from the access service of the public cloud computing system to the connection service of the private cloud computing system, the list of at least one of the one or more applications deployable in the private cloud computing system selectively identified by the access service based on a service subscription of the connection service at the public cloud computing system; and
transmitting, from the public cloud computing system to the private cloud computing system, one or more artifacts of at least one application in the list to be deployed in the private cloud computing system.

2. The method of claim 1 , further comprising:
receiving an authentication request from the connection service of the private cloud computing system;
in response to the received authentication request, authenticating the connection service of the private cloud computing system based on the service subscription associated with the connection service of the private cloud computing system; and
wherein transmitting the list of includes transmitting the list to the private cloud computing system upon authentication of the connection service of the private cloud computing system.

3. The method of claim 1 , further comprising:
receiving an authentication request from the connection service of the private cloud computing system;
in response to the received authentication request, transmitting an access token to the private cloud computing system based on the service subscription associated with the connection service of the private cloud computing system; and
wherein receiving the request from the private cloud computing system for the list includes:
receiving the request from the private cloud computing system for the list along with the access token;
determining whether the access token is valid; and
in response to determining that he access token is valid, transmitting the list to the private cloud computing system.

4. The method of claim 1 , further comprising:
receiving an authentication request from the connection service of the private cloud computing system;
in response to the received authentication request, transmitting an access token to the private cloud computing system based on the service subscription associated with the connection service of the private cloud computing system; and
wherein receiving the request from the private cloud computing system for the list includes:
receiving the request from the private cloud computing system for the list along with the access token;
determining whether the access token is valid; and
in response to determining that he access token is invalid, rejecting the request for the list.

5. The method of claim 1 , further comprising:
receiving multiple applications, at the public cloud computing system, from one or more software vendors; and
for each of the applications,
determining whether the corresponding software vendor indicates that the application is deployable to both the public and private cloud computing systems; and
in response to determining that the corresponding software vendor indicates that the application is deployable to both the public and private cloud computing systems, adding the application to the list of applications deployable to both the private cloud computing system.

6. The method of claim 1 , further comprising:
making available the one or more applications to both users of the public cloud computing system and to the access service of the public cloud computing system; and
storing the artifacts of the one or more applications in a network storage associated with the access service in the public cloud computing system, the network storage being controllably accessible by the private cloud computing system.

7. The method of claim 1 wherein transmitting the list includes:
determining a subset of the one or more applications stored in the network storage of the public cloud computing system based on the service subscription of the connection service of the private cloud computing system; and
transmitting the determined subset of the one or more applications as the list to the private cloud computing system.

8. A method of facilitating operations between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:
transmitting, using a connection service of the private cloud computing system, a request for a list of available applications stored in a network storage at the public cloud computing system, the list of available applications being deployable at the private cloud computing system;
receiving, via an access service of the public cloud computing system, a list showing one or more available applications based on a service subscription of the connection service of the private cloud computing system to the access service of the public cloud computing system, the access service being configured to provide information to the connection service of the private cloud computing system based on the service subscription without having direct access to the private cloud computing system;
detecting a selection of one of the one or more available applications in the list for deployment; and
in response to detecting the selection,
requesting and receiving, from the public cloud computing system, one or more components of the one of the one or more available applications corresponding to the detected selection; and
deploying, in the private cloud computing system, the received one or more components of the one of the one or more available applications.

9. The method of claim 8 , further comprising:
transmitting an authentication request from the connection service of the private cloud computing system to the public cloud computing system, the authentication request including data representing the service subscription associated with the connection service; and
wherein receiving the list showing available applications includes receiving the list showing available application upon authentication of the connection service by the public cloud computing system.

10. The method of claim 8 , further comprising:
transmitting an authentication request from the connection service of the private cloud computing system to the public cloud computing system;
receiving an access token to the access service of the public cloud computing system upon authentication of the connection service by the public cloud computing system; and
wherein transmitting the request to the public cloud computing system includes transmitting the request for available applications stored in the network storage at the public cloud computing system along with the received access token.

11. The method of claim 8 , further comprising:
transmitting an authentication request from the connection service of the private cloud com

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Pogrebinsky Vladimir
• Zunino Gilles
• Bartz Bradley

Classifications

• H04L67/146

  Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding · CPC title

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L41/12

  Discovery or management of network topologies · CPC title

• G06F9/5072 Primary

  Grid computing · CPC title

• H04L67/32

  Electricity · mapped topic