Usage tracking in hybrid cloud computing systems

Patent metadata

Field	Value
Publication number	US-10530775-B2
Application number	US-201916257968-A
Country	US
Kind code	B2
Filing date	Jan 25, 2019
Priority date	Jul 22, 2016
Publication date	Jan 7, 2020
Grant date	Jan 7, 2020

Abstract

Techniques for facilitating usage tracking in hybrid cloud computing systems are disclosed herein. In one embodiment, a method can include receiving, from a private cloud computing system, a request for uploading usage data to a storage in a public cloud computing system. The method can also include authenticating the received request based on a service subscription of the private cloud computing system, and upon authentication, providing the private cloud computing system with an access permission to store the usage data in the storage of the computing system. The method can further include receiving the usage data from the private cloud computing system submitted with the access permission and storing the received usage data in the storage of the public cloud computing system.

First claim

I claim:

1. A method of managing application deployment between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:
transmitting, from a connection service of the private cloud computing system, an authentication request to the public cloud computing system; and
upon authentication of the connection service by the public cloud computing system,
receiving, at the private cloud computing system, data representing one or more applications deployable in the private cloud computing system; and
upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,
provisioning a compute resource at the private cloud computing system;
using the provisioned compute resource at the private cloud computing system to download, from the public cloud computing system, a digital image of the at least one application; and
deploying, based on the downloaded digital image, the at the at least one application in the private cloud computing system, thereby allowing the private cloud computing system access to the one or more applications even though the public cloud computing system has no direct access to resources in the private cloud computing system.

2. The method of claim 1 wherein receiving, at the private cloud computing system, the data representing the one or more applications deployable in the private cloud computing system includes upon authentication of the connection service at the public cloud computing system, receiving, from the public cloud computing system, an access token and transmitting, to the public cloud computing system, a request for the one or more applications along with the received access token.

3. The method of claim 1 , further comprising:
upon receiving, at the private cloud computing system, the data representing one or more applications deployable in the private cloud computing system,
outputting the one or more applications in a gallery at the private cloud computing system; and
receiving, at the private cloud computing system, the selection of at least one of the one or more applications from the gallery.

4. The method of claim 1 , further comprising:
upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,
transmitting, to the public cloud computing system, a request for details of the at least one application; and
receiving, from the public cloud computing system, data representing one or more of a shared access signature (“SAS”) key, a network location of the digital image, or a download size of the at least one application.

5. The method of claim 1 , further comprising:
upon receiving a selection of at least one of the one or more applications, at the private cloud computing system,
transmitting, to the public cloud computing system, a request for details of the at least one application;
receiving, from the public cloud computing system, data representing one or more of a shared access signature (“SAS”) key, a network location of the digital image, or a download size of the at least one application; and
wherein using the instantiated compute resource at the private cloud computing system to download the digital image of the at least one application includes:
passing the one or more SAS key, network location of the digital image, or the download size of the at least one application to the instantiated compute resource; and
downloading, from the public cloud computing system, the digital image of the at least one application using the instantiated compute resource in accordance with the one or more SAS key, network location of the digital image, or the download size of the at least one application.

6. The method of claim 1 wherein instantiating the compute resource includes instantiating, on a server at the private cloud computing system, a virtual machine, and wherein using the instantiated compute resource includes using the instantiated virtual machine at the private cloud computing system to download, from the public cloud computing system, the digital image of the at least one application.

7. The method of claim 1 wherein:
transmitting the authentication request includes transmitting, from the connection service of the private cloud computing system, the authentication request along with credentials of a subscription; and
upon authentication of the connection service at the public cloud computing system based on the subscription, receiving, at the private cloud computing system, data representing the one or more applications deployable in the private cloud computing system from an access service in the public cloud computing system to which the subscription is directed.

8. The method of claim 7 , further comprising:
receiving, from the access service at the public cloud computing system, a notification that the at least one application is to be decommissioned; and
in response to receiving the notification, deleting the digital image of the at least one application from the private cloud computing system and removing the instantiated compute resource.

9. A method of managing application deployment between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:
receiving, from a connection service of the private cloud computing system, an authentication request to the public cloud computing system along with credentials of a subscription; and
upon authentication of the connection service at the public cloud computing system based on the credentials,
providing, from an access service corresponding to the subscription, data representing one or more applications published to the public cloud computing system and deployable in the private cloud computing system to the connection service at the private cloud computing system; and
upon receiving, from the connection service at the private cloud computing system, a download request of at least one of the one or more applications, transmitting, from the public cloud computing system, a digital image of the at least one application to the private cloud computing system, thereby allowing deployment of the at the at least one application in the private cloud computing system even though the public cloud computing system has no direct access to resources in the private cloud computing system.

10. The method of claim 9 , further comprising:
upon authentication of the connection service at the public cloud computing system, providing, to the connection service at the private cloud computing system, an access token for accessing the one or more applications at the public cloud computing system.

11. The method of claim 9 , further comprising:
receiving, at the public cloud computing system, the one or more applications to be published in the public cloud computing system; and
in response to receiving the one or more application, publishing the one or more applications to the access service at the public cloud computing system to be exposed to the private cloud computing system upon authentication of the credentials of the subscription.

12. The method of claim 9 , further comprising:
upon authentication of the connection service at the public cloud computing system based on the credentials,
receiving, at the access service of the public cloud computing system, a request for details of the at least one application; and
in response to the received request, providing, from the public cloud computing system, data representing one or more of a shared access signature (“SAS”) key, a network location of the digital image, or

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Pogrebinsky Vladimir

Classifications

• H04L63/1425

  Traffic logging, e.g. anomaly detection · CPC title

• H04L12/14

  Charging, metering or billing arrangements specially adapted for data communications, e.g. authentication, authorisation and accounting [AAA] framework · CPC title

• H04L63/1416

  Event detection, e.g. attack signature detection · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title