System architecture for cloud-platform infrastructure layouts

Patent metadata

Field	Value
Publication number	US-9876684-B2
Application number	US-201514837165-A
Country	US
Kind code	B2
Filing date	Aug 27, 2015
Priority date	Sep 4, 2014
Publication date	Jan 23, 2018
Grant date	Jan 23, 2018

Abstract

A system maintains, generates, and manages infrastructure layouts. The infrastructure layouts interconnect infrastructure components and capture relational aspects between the components within the interconnections. The infrastructure layouts map northbound services, which are service outputs, to southbound services, which are service capabilities, for fulfilment. The system may traverse a mapping from a northbound service to a fulfilling southbound service to generate a workflow to support deployment of the northbound service. In various implementations, the system may compare a path, which maps a northbound service to a southbound service, to a policy model to determine compliance with the policy.

First claim

What is claimed is:

1. A device comprising:
network interface circuitry configured to send a non-compliance token to a control server for a cloud platform;
layout circuitry configured to alter a layout comprising instructions for infrastructure deployment on the cloud platform; and
policy circuitry coupled to the network interface circuitry and the layout circuitry, the policy circuitry configured to:
detect when the layout circuitry alters the layout;
responsive to the layout circuitry altering the layout, determine an altered portion of the layout altered by the layout circuitry;
access a policy database;
determine a policy model that applies to the altered portion;
responsive to the policy model, determine a source node and destination node within the altered portion;
alter the second path length by applying an expansion, a generalization, or both:
after altering the second path length, compare a first path length of the policy model to a second path length from the source node to the destination node;
responsive to a path length match, compare a first node in the policy model to a second node disposed between the source and destination nodes in the altered portion; and
responsive to a mismatch between the first and second nodes, generate the non-compliance token to indicate a violation of the policy model.

2. The device of claim 1 , where the layout circuitry is configured to alter the layout responsive to an operator selection of a service offering.

3. The device of claim 1 , where the non-compliance token is configured to trigger a re-deployment of an infrastructure component when sent to the control server for the cloud platform.

4. The device of claim 1 , where the policy circuitry is further configured to generate the non-compliance token responsive to a path length mismatch between the first and second path lengths.

5. The device of claim 4 , where the policy circuitry is further configured to forgo a comparison between the first and second nodes responsive to the path length mismatch between the first and second path lengths.

6. The device of claim 1 , where:
the layout comprises a layout for an actively deployed infrastructure instance on the cloud platform; and
the policy circuitry is configured to monitor the layout for alternations during runtime of the actively deployed infrastructure instance.

7. The device of claim 1 , where the policy model is derived from an organizational policy, a regulatory policy, or both.

8. The device of claim 7 , where the policy model is configured to govern data security, data access, availability zone, physical access, or any combination thereof.

9. The device of claim 1 , where the policy model comprises a hierarchical structure including multiple policy levels.

10. The device of claim 9 , where a third node at a first policy level of the hierarchical structure inherits properties from a fourth node at a second policy level of the hierarchical structure.

11. The device of claim 1 , where the policy circuitry is further configured to forgo generation of the non-compliance token responsive to a match between the first and second nodes.

12. A method comprising:
altering, via layout circuitry, a layout comprising instructions for infrastructure deployment on the cloud platform detect when the layout circuitry alters the layout;
with policy circuitry coupled to the layout circuitry and network interface circuitry:
responsive to the layout circuitry altering the layout, determining an altered portion of the layout altered by the layout circuitry;
accessing a policy database;
determining a policy model that applies to the altered portion;
responsive to the policy model, determining a source node and destination node within the altered portion;
altering the second path length by applying an expansion, a generalization, or both:
after altering the second path length, comparing a first path length of the policy model to a second path length from the source node to the destination node;
responsive to a path length match, comparing a first node in the policy model to a second node disposed between the source and destination nodes in the altered portion;
responsive to a mismatch between the first and second nodes, generating the non-compliance token to indicate a violation of the policy model; and

sending, via the network interface circuitry, the non-compliance token to a control server for a cloud platform.

13. The method of claim 12 , where altering the layout comprises altering the layout responsive to an operator selection of a service offering.

14. The method of claim 12 , where the non-compliance token is configured to trigger a re-deployment of an infrastructure component when sent to the control server for the cloud platform.

15. The method of claim 12 , where generating the non-compliance token comprises generating the non-compliance token responsive to a path length mismatch between the first and second path lengths.

16. The method of claim 15 , further comprising forgoing a comparison between the first and second nodes responsive to the path length mismatch between the first and second path lengths.

17. The method of claim 12 , where:
the layout comprises a layout for an actively deployed infrastructure instance on the cloud platform; and
the method further comprises monitoring the layout for alternations during runtime of the actively deployed infrastructure instance.

18. The method of claim 12 , where the policy model is derived from an organizational policy, a regulatory policy, or both.

19. The method of claim 18 , where the policy model is configured to govern data security, data access, availability zone, physical access, or any combination thereof.

20. The method of claim 12 , where the policy model comprises a hierarchical structure including multiple policy levels.

21. The method of claim 20 , where a third node at a first policy level of the hierarchical structure inherits properties from a fourth node at a second policy level of the hierarchical structure.

22. The method of claim 12 , where the policy circuitry is further configured to forgo generation of the non-compliance token responsive to a match between the first and second nodes.

23. A product comprising:
one or more machine-readable media other than a transitory signal;
instructions stored on the one or more machine-readable media, the instructions configured to, when executed, cause a machine to:
alter, via layout circuitry, a layout comprising instructions for infrastructure deployment on the cloud platform detect when the layout circuitry alters the layout;
with policy circuitry coupled to the layout circuitry and network interface circuitry:
responsive to the layout circuitry altering the layout, determine an altered portion of the layout altered by the layout circuitry;
access a policy database;
determine a policy model that applies to the altered portion;
responsive to the policy model, determine a source node and destination node within the altered portion;
alter the second path length by applying an expansion, a generalization, or both;
after altering the second path length, compare a first path length of the policy model to a second path length from the source node to the destination node;
responsive to a path length match, compare a first node in the policy model to a second node disposed between the source and destination nodes in the altered portion;
responsive to a mismatch bet

Assignees

• Accenture Global Services Ltd

Inventors

• Gomadam Karthik
• Tung Teresa Sheausan
• Xie Qing

Classifications

• H04L41/12 Primary

  Discovery or management of network topologies · CPC title

• H04L41/22

  comprising specially adapted graphical user interfaces [GUI] · CPC title

• H04L67/10

  in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title

• H04L67/34

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04L67/16

  Electricity · mapped topic