Method and device for managing resources with an external account

A device for managing cloud computing resources, the device comprising:

• one or more processors;
• a network interface;
• and
• a memory storing computer-executable instructions executable by the one or more processors, the instructions causing the device to:
• request, using an identity verification protocol, an identity verification for an external account via a verification server, the identity verification comprising an identifier of the external account and a verification server signature;
• verify the verification server signature returned by the verification server;
• determine that the identity of the external account is verified if the server signature is verified;
• if the identity of the external account is verified, determine whether a virtual sub-account is bound to the external account, the virtual subaccount having pre-configured rights to manage the cloud computing resources, the cloud computing resources being associated with one or more internal main accounts, the virtual sub-account being subordinate to one of the one or more internal main accounts, the determining whether the virtual sub-account is bound to the external account comprising:
• querying whether any virtual sub-accounts subordinate to the one or more internal main accounts are bound to the external account, wherein each of the one or more internal main accounts has at least one subordinate virtual sub-account;
• and
• if it is determined that the virtual sub-account is bound to the external account, allow the external account to manage the cloud computing resources associated with the internal main account based on the pre-configured rights of the virtual sub-account.

A non-transitory computer-readable storage medium storing computer-executable instructions that when executed by a processor, cause the processor to perform a method for managing cloud computing resources, the method comprising

• requesting, using an identity verification protocol, an identity verification for an external account via a verification server, the identity verification comprising an identifier of the external account and a verification server signature;
• verifying the verification server signature returned by the verification server;
• determining that the identity of the external account is verified if the server signature is verified;
• if the identity of the external account is verified, determining whether a virtual sub-account is bound to the external account, the virtual subaccount having pre-configured rights to manage the cloud computing resources, the cloud computing resources being associated with one or more internal main accounts, the virtual sub-account being subordinate to one of the one or more internal main accounts, the determining whether the virtual sub-account is bound to the external account comprising:
• querying whether any virtual sub-accounts subordinate to the one or more internal main accounts are bound to the external account, wherein each of the one or more internal main accounts has at least one subordinate virtual sub-account;
• and
• if it is determined that the virtual sub-account is bound to the external account, allowing the external account to manage the cloud computing resources associated with the internal main account based on the pre-configured rights of the virtual sub-account.

A method for managing cloud computing resources, the method comprising:

• receiving an identity verification result of an external account returned by a verification server, the verification result comprising an identifier of the external account and a verification server signature;
• verifying the verification server signature returned by the verification server;
• determining whether a virtual sub-account is bound to the external account, the virtual sub-account having pre-configured rights to manage the cloud computing resources, the cloud computing resources being associated with one or more internal main accounts, the virtual sub-account being subordinate to one of the one or more internal main accounts, the determining whether the virtual sub-account is bound to the external account comprising:
• querying whether any virtual sub-accounts subordinate to the one or more internal main accounts are bound to the external account, wherein each of the one or more internal main accounts has at least one subordinate virtual sub-account;
• and
• if it is determined that the virtual sub-account is bound to the external account, allowing the external account to manage the cloud computing resources associated with the internal main account based on the pre-configured rights of the virtual sub-account.