Access services in hybrid cloud computing systems

Patent metadata

Field	Value
Publication number	US-11848982-B2
Application number	US-202117553419-A
Country	US
Kind code	B2
Filing date	Dec 16, 2021
Priority date	Jul 22, 2016
Publication date	Dec 19, 2023
Grant date	Dec 19, 2023

Abstract

Techniques for facilitating operations in hybrid cloud computing systems are disclosed herein. In one embodiment, a method can include receiving, at a public cloud, a plurality of applications deployable in a private cloud and informing an access service of the public cloud computing system regarding the received applications deployable in the private cloud. The method also includes receiving, from a connection service of the private cloud, a request for a list of the received applications available at the public cloud and deployable in the private cloud. The method further includes in response to the received request, selectively identifying to the private cloud the list of applications based on a service subscription associated with the connection service.

First claim

We claim:

1. A method of facilitating operations between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:
exposing, at the public cloud computing system, one or more applications deployable in the private cloud computing system to an access service of the public cloud computing system, the access service being configured to respond to one or more requests from a connection service of the private cloud computing system without directly accessing resources in the private cloud computing system;
receiving, from the connection service of the private cloud computing system, a request for applications that are deployable in the private cloud computing system; and
in response to the received request, determining a list of at least one of the one or more applications based on a service subscription of the connection service at the public cloud computing system; and
transmitting, via the computer network, from the access service of the public cloud computing system to the connection service of the private cloud computing system, the determined list of at least one of the one or more applications;
making available the one or more applications to users of the public cloud; and
storing artifacts of the one or more applications in a network storage controllably accessible by the private cloud computing system.

2. The method of claim 1 , further comprising:
receiving an authentication request from the connection service of the private cloud computing system;
in response to the received authentication request, authenticating the connection service of the private cloud computing system based on the service subscription associated with the connection service of the private cloud computing system; and
wherein transmitting the list includes transmitting the list to the private cloud computing system upon authentication of the connection service of the private cloud computing system.

3. The method of claim 1 , further comprising:
receiving an authentication request from the connection service of the private cloud computing system;
in response to the received authentication request, transmitting an access token to the private cloud computing system based on the service subscription associated with the connection service of the private cloud computing system; and
wherein receiving the request includes:
receiving the request from the private cloud computing system along with the access token;
determining whether the access token is valid; and
in response to determining that the access token is valid, transmitting the list to the private cloud computing system.

4. The method of claim 1 , further comprising:
receiving an authentication request from the connection service of the private cloud computing system;
in response to the received authentication request, transmitting an access token to the private cloud computing system based on the service subscription associated with the connection service of the private cloud computing system; and
wherein receiving the request from the private cloud computing system for the list includes:
receiving the request from the private cloud computing system for the list along with the access token;
determining whether the access token is valid; and
in response to determining that the access token is invalid, rejecting the request for the list.

5. The method of claim 1 , further comprising:
receiving multiple applications, at the public cloud computing system, from one or more software vendors; and
for each of the applications,
determining whether the corresponding software vendor indicates that the application is deployable to both the public and private cloud computing systems; and
in response to determining that the corresponding software vendor indicates that the application is deployable to both the public and private cloud computing systems, adding the application to the list.

6. The method of claim 1 wherein transmitting the list includes:
determining a subset of the one or more applications stored in the network storage of the public cloud computing system based on the service subscription of the connection service of the private cloud computing system; and
transmitting the determined subset of the one or more applications as the list to the private cloud computing system.

7. A method of facilitating operations between a public cloud computing system interconnected with a private cloud computing system via a computer network, the method comprising:
transmitting, using a connection service of the private cloud computing system, a request for a list of available applications stored in a network storage at the public cloud computing system, the list of available applications being deployable at the private cloud computing system;
receiving, via an access service of the public cloud computing system, a list of one or more available applications based on a service subscription of the connection service of the private cloud computing system to the access service of the public cloud computing system, the access service being configured to provide information to the connection service of the private cloud computing system based on the service subscription without having direct access to the private cloud computing system;
detecting a selection of one of the one or more available applications in the list for deployment; and
in response to detecting the selection, deploying, in the private cloud computing system, one or more components of the selected one of the one or more available applications.

8. The method of claim 7 , further comprising:
transmitting an authentication request from the connection service of the private cloud computing system to the public cloud computing system, the authentication request including data representing the service subscription associated with the connection service; and
wherein receiving the list showing available applications includes receiving the list showing available applications upon authentication of the connection service by the public cloud computing system.

9. The method of claim 7 , further comprising:
transmitting an authentication request from the connection service of the private cloud computing system to the public cloud computing system;
receiving an access token to the access service of the public cloud computing system upon authentication of the connection service by the public cloud computing system; and
wherein transmitting the request to the public cloud computing system includes transmitting the request for available applications stored in the network storage at the public cloud computing system along with the received access token.

10. The method of claim 7 , further comprising:
transmitting an authentication request from the connection service of the private cloud computing system to the public cloud computing system;
receiving an access token to the access service of the public cloud computing system upon authentication of the connection service by the public cloud computing system; and
wherein transmitting the request to the public cloud computing system includes transmitting the request for available applications stored in the network storage at the public cloud computing system along with the received access token; and
wherein receiving the list of available applications includes receiving the list of available applications based on the access token transmitted along with the request for available applications.

11. The method of claim 7 wherein:
the public cloud computing system includes a set of available applications stored in the network storage; and
the service subscription associa

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Pogrebinsky Vladimir
• Zunino Gilles
• Bartz Bradley

Classifications

• H04L67/10 Primary

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• G06F8/61

  Installation · CPC title

• G06F9/5072 Primary

  Grid computing · CPC title

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L63/10

  for controlling access to devices or network resources · CPC title