System and method for extending cloud services into the customer premise

Patent metadata

Field	Value
Publication number	US-11736345-B2
Application number	US-202016809354-A
Country	US
Kind code	B2
Filing date	Mar 4, 2020
Priority date	Jan 10, 2011
Publication date	Aug 22, 2023
Grant date	Aug 22, 2023

Abstract

A cloud extension agent can be provided on a customer premise for interfacing, via an outbound secure connection, cloud based services. The cloud extension agent can reach the cloud based services through existing firewall infrastructure, thereby providing simple, secure deployment. Furthermore, the secure connection can enable substantially real-time communication with a cloud service to provide web-based, substantially real time control or management of resources on the customer premises via the cloud extension agent.

First claim

What is claimed is:

1. A method, comprising:
initiating, by a hardware resource executing a cloud extension agent on a local network, a first connection to at least one external server, over a wide area network external from the local network and separated by at least one firewall, using a standard internet protocol, wherein the first connection comprises a secure and persistent channel directly between the local network and the at least one external server;
receiving, at the cloud extension agent through the at least one firewall via the first connection, a first set of instructions to manage a configuration of policies corresponding to the first set of mobile devices, wherein the first set of mobile devices connect to the local network and are managed by one or more local servers on the local network;
changing the configuration, at the one or more local servers, of the policies corresponding to the first set of mobile devices in response to the first set of instructions, wherein the configuration of the policies corresponding the first set of mobile devices includes quarantine settings of the first set of mobile devices and a security policy of the first set of mobile devices; and
transmitting, via the first connection, status and configuration information comprising data indicative of changes to the configuration of the policies corresponding to the first set of mobile devices to the external server made in response to the first set of instructions.

2. The method of claim 1 , further comprising:
gathering the status and configuration information from the one or more local servers on the local network.

3. The method of claim 2 , wherein gathering the status and configuration information is performed after initiation of the first connection.

4. The method of claim 1 , wherein the local network is a customer premise network.

5. The method of claim 1 , wherein the first connection is a secure connection.

6. The method of claim 5 , wherein the set of instructions are received by the cloud extension agent using an Extensible Messaging and Presence Protocol (XMPP) over the secure connection.

7. The method of claim 1 , further comprising determining, by the cloud extension agent, whether any updates from the at least one external server are waiting to be sent.

8. An apparatus, comprising:
a hardware resource to execute a cloud extension agent on a local network to:
initiate a first connection to at least one external server, over a wide area network external from the local network and separated by at least one firewall, using a standard internet protocol, wherein the first connection comprises a secure and persistent channel directly between the local network and the at least one external server;
receive, through the at least one firewall via the first connection, a first set of instructions to manage a configuration of policies corresponding to the first set of mobile devices, wherein the first set of mobile devices connect to the local network and are managed by one or more local servers on the local network;
change the configuration, at the one or more local servers, of the policies corresponding to the first set of mobile devices in response to the first set of instructions, wherein the configuration of the policies corresponding to the first set of mobile devices includes quarantine settings of the first set of mobile devices and a security policy of the first set of mobile devices; and
transmit, via the first connection, status and configuration information comprising data indicative of changes to the configuration of the policies corresponding to the first set of mobile devices to the external server made in response to the first set of instructions.

9. The apparatus of claim 8 , wherein the hardware resource is further to: gather the status and configuration information from the one or more local servers on the local network.

10. The apparatus of claim 9 , wherein the hardware resource is to gather the status and configuration information after initiation of the first connection.

11. The apparatus of claim 8 , wherein the local network is a customer premise network.

12. The apparatus of claim 8 , wherein the first connection is a secure connection.

13. The apparatus of claim 12 , wherein the set of instructions are received by the cloud extension agent using an Extensible Messaging and Presence Protocol (XMPP) over the secure connection.

14. The apparatus of claim 8 , wherein the hardware resource is further to determine whether any updates from the at least one external server are waiting to be sent.

15. A non-transitory computer readable storage media having program instructions to be executed by a hardware resource to:
initiate, by the hardware resource executing a cloud extension agent on a local network, a first connection to at least one external server, over a wide area network external from the local network and separated by at least one firewall, using a standard internet protocol, wherein the first connection comprises a secure and persistent channel directly between the local network and the at least one external server;
receive, through the at least one firewall via the first connection, a first set of instructions to manage a configuration of policies corresponding to the first set of mobile devices, wherein the first set of mobile devices connect to the local network and are managed by one or more local servers on the local network;
change the configuration, at the one or more local servers, of the policies corresponding to the first set of mobile devices in response to the first set of instructions, wherein the configuration of the policies corresponding to the first set of mobile devices includes quarantine settings of the first set of mobile devices and a security policy of the first set of mobile devices; and
transmit, via the first connection, status and configuration information comprising data indicative of changes to the configuration of the policies corresponding to the first set of mobile devices to the external server made in response to the first set of instructions.

16. The non-transitory computer readable storage media of claim 15 , wherein the hardware resource is further to:
gather the status and configuration information from the one or more local servers on the local network.

17. The non-transitory computer readable storage media of claim 16 , wherein the hardware resource is to gather the status and configuration information after initiation of the first connection.

18. The non-transitory computer readable storage media of claim 15 , wherein the local network is a customer premise network.

19. The non-transitory computer readable storage media of claim 15 , wherein the first connection is a secure connection.

20. The non-transitory computer readable storage media of claim 19 , wherein the set of instructions are received by the cloud extension agent using an Extensible Messaging and Presence Protocol (XMPP) over the secure connection.

21. The non-transitory computer readable storage media of claim 15 , wherein the hardware resource is further to determine whether any updates from the at least one external server are waiting to be sent.

Assignees

• Snowflake Inc

Inventors

• Narasimhan Vineeth
• Lambert Joshua
• Herchek Thomas
• Hope Ryan Elliot
• Jha Nitish
• Jain Rahul
• Singh Sumeet

Classifications

• H04L41/0806 Primary

  for initial configuration or provisioning, e.g. plug-and-play · CPC title

• H04L41/046 Primary

  comprising network management agents or mobile agents therefor · CPC title

• H04L41/0816

  the condition being an adaptation, e.g. in response to network events · CPC title

• H04L43/00

  Arrangements for monitoring or testing data switching networks · CPC title

• H04L47/825

  Involving tunnels, e.g. MPLS · CPC title