Provisioning persistent, dynamic and secure cloud services

Patent metadata

Field	Value
Publication number	US-11902112-B2
Application number	US-202117513550-A
Country	US
Kind code	B2
Filing date	Oct 28, 2021
Priority date	Jan 18, 2014
Publication date	Feb 13, 2024
Grant date	Feb 13, 2024

Abstract

Systems and methods may provide for confirming, by a loader module having administrative rights with respect to a computing device, the operability of an activator module on the computing device. Additionally, the activator module may be used to manage an installation status of one or more service agents or software components on the computing device and making them persistent. In one example, confirming the operability of the activator module includes conducting a presence verification and/or authentication of the activator module, wherein a replacement activator module may be downloaded to the computing device if the presence verification and/or authentication is unsuccessful.

First claim

We claim:

1. A computing device, comprising:
memory;
communication circuitry to communicate with an application server and an authentication server; and
processing circuitry to:
execute activator software instructions to activate a service agent used to operate at least one service, the activator software instructions to:
download the service agent from the application server;
install the service agent on the computing device;
activate the service agent based on communications with the authentication server;
determine an installation and integrity status of the service agent;
record, in the memory, the installation and integrity status of the service agent; and
restore the service agent in response to an incorrect installation and integrity status of the service agent on the computing device; and

execute loader software instructions to load the service agent, using administrative rights on the computing device, the loader software instructions to:
identify an operational status of the activator software instructions; and
restore the activator software instructions in response to an incorrect operational status of the activator software instructions;

wherein the loader software instructions and the activator software instructions are separately installed to the computing device.

2. The device of claim 1 , the processing circuitry further to execute the service agent, using the processing circuitry, to provide at least one application on the computing device.

3. The device of claim 1 , the processing circuitry further to receive a command to activate the computing device to enable use of the service agent, using the communication circuitry.

4. The device of claim 1 , wherein the loader software instructions issue a heartbeat message to the activator software instructions.

5. The device of claim 4 , wherein the installation and integrity status of the service agent is determined based on receipt of the heartbeat message.

6. The device of claim 1 , the processing circuitry further to execute boot software instructions to invoke the loader software instructions from a factory image on a storage device of the computing device.

7. The device of claim 1 , wherein the loader software instructions are executed in a firmware of the computing device, wherein the activator software instructions are executed in an operating system of the computing device.

8. The device of claim 1 , wherein the application server and the authentication server are separate systems located remote to the computing device.

9. At least one non-transitory machine-readable storage medium comprising instructions, which when executed by processor circuitry of a computing device, cause the processor circuitry to perform operations to:
execute activator software instructions to activate a service agent used to operate at least one service, the activator software instructions to:
download the service agent from an application server;
install the service agent on the computing device;
activate the service agent based on communications with an authentication server;
determine an installation and integrity status of the service agent; and
restore to the service agent in response to an incorrect installation and integrity status of the service agent on the computing device; and

execute loader software instructions to load the service agent, using administrative rights on the computing device, the loader software instructions to:
identify an operational status of the activator software instructions; and
restore the activator software instructions in response to an incorrect operational status of the activator software instructions;
wherein the loader software instructions and the activator software instructions are separately installed to the computing device.

10. The machine-readable storage medium of claim 9 , the instructions further to cause execution of the service agent, the service agent to provide at least one application on the computing device.

11. The machine-readable storage medium of claim 9 , the instructions further to receive a command to activate the computing device for use of the service agent.

12. The machine-readable storage medium of claim 9 , wherein the loader software instructions issue a heartbeat message to the activator software instructions.

13. The machine-readable storage medium of claim 12 , wherein the installation and integrity status of the service agent is determined based on receipt of the heartbeat message.

14. The machine-readable storage medium of claim 9 , the instructions further to execute boot software instructions to invoke the loader software instructions from a factory image on a storage device of the computing device.

15. The machine-readable storage medium of claim 9 , wherein the loader software instructions are executed in a firmware of the computing device, wherein the activator software instructions are executed in an operating system of the computing device.

16. The machine-readable storage medium of claim 9 , wherein the application server and the authentication server are separate systems located remote to the computing device.

17. A method performed in a computing device, comprising:
executing activator software instructions to activate a service agent used to operate at least one service, the activator software instructions to:
download the service agent from an application server;
install the service agent on the computing device;
activate the service agent based on communications with an authentication server;
determine an installation and integrity status of the service agent; and
restore the service agent in response to an incorrect installation and integrity status of the service agent on the computing device; and

executing loader software instructions to load the service agent, using administrative rights on the computing device, the loader software instructions to:
identify an operational status of the activator software instructions; and
monitor for restore the activator software instructions in response to an incorrect operational status of the activator software instructions;

wherein the loader software instructions and the activator software instructions are separately installed to the computing device.

18. The method of claim 17 , further comprising executing the service agent to provide at least one application on the computing device.

19. The method of claim 17 , further comprising receiving a command to activate the computing device to enable use of the service agent.

20. The method of claim 17 , wherein the loader software instructions issue a heartbeat message to the activator software instructions.

21. The method of claim 20 , wherein the installation and integrity status of the service agent is determined based on receipt of the heartbeat message.

22. The method of claim 17 , further comprising executing boot software instructions to invoke the loader software instructions from a factory image on a storage device of the computing device.

23. The method of claim 17 , wherein the loader software is instructions are executed in a firmware of the computing device, wherein the activator software instructions are executed in an operating system of the computing device.

24. The method of claim 17 , wherein the application server and the authentication server are separate systems located remote to the computing device.

Assignees

• Intel Corp

Inventors

• Satapathy Jiphun C
• Garg Sharad K
• Bhumbla Aakash
• Berck Aaron R
• Maldikar Neena
• Quaranta Jr James R

Classifications

• H04L41/5041 Primary

  characterised by the time relationship between creation and deployment of a service · CPC title

• G06F8/61 Primary

  Installation · CPC title

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F9/4401

  Bootstrapping (security arrangements therefor G06F21/57) · CPC title

• G06F9/5072

  Grid computing · CPC title