Compute resource configuration and verification systems and methods
AssigneeCloud Raxak, Inc.
InventorsPrasanna Mulgaonkar, Seshashayee Murthy
Life of this patent
Estimating the term…
Abstract
Systems and methods for compute resource configuration, verification, and remediation are provided herein. An example method includes verifying compliance of an operating system and compute assets provisioned configured within a middleware of a computing device using a pre-defined configuration profile, the compliance being determined by comparison of run-time hardware and software attributes of the compute assets to the pre-defined configuration profile comprising hardware and software requirements for the client.
Claims21
A method for providing tamper proof configurations for run-time compute resources in a server, the method comprising:
- configuring compute resources for a client, the compute resources comprising a boot-time state that has been verified against a hardware-based measurement stored in a signed datastore;
- utilizing a pre-defined configuration profile for a client by the verified compute resources, the pre-defined configuration profile comprising hardware and software requirements for the client;
- and
- verifying, at run-time, compliance of a run-time state of the compute resources with the pre-defined configuration profile, by a verification system validating the run-time state that comprises:
- configuration of an operating system of the compute resources;
- configuration files for middleware;
- compute assets provisioned by the middleware;
- computational assets executing on the compute assets provisioned by the middleware;
- and
- the middleware comprising an operating system kernel and configurations, and compute resources boot files.
A method, comprising:
- verifying compliance of an operating system and compute assets provisioned by middleware of a computing device using a pre-defined configuration profile, the compliance being determined by comparison of run-time hardware and software attributes of the compute assets to the pre-defined configuration profile comprising hardware and software requirements for a client;
- validating;
- configuration files for the middleware;
- compute assets provisioned by the middleware;
- computational assets executing on the compute assets provisioned by the middleware;
- and
- the middleware comprising an operating system kernel and configurations, and compute resources boot files.
A system, comprising:
- a cloud comprising:
- middleware comprising an operating system kernel and configurations;
- compute resources provisioned by the middleware, the compute resources comprising an operating system kernel and configurations, and boot files;
- a configuration and verification system that generates boot-time profiles of the operating system kernel and the boot files;
- a signed store that stores the boot-time profiles;
- a cloud server that:
- provisions the compute resources;
- and
- compares boot-time attributes of the compute resources to the boot-time profiles in the signed store to determine if the compute resources are verified;
- and
- wherein the configuration and verification system verifies, using the hardware-verified compute resources, run-time resources comprising:
- a configuration of an operating system of the compute resources;
- and
- configuration files for the middleware.
A method executing during run-time of a compute resource in a cloud network, the method comprising:
- applying a pre-defined run-time configuration profile to hardware verified compute resources provisioned for a client by a hardware verified operating system kernel, the pre-defined configuration profile comprising hardware and software requirements for the client;
- verifying compliance with the pre-defined run-time configuration profile, by a verification system validating:
- configuration of an operating system of the compute resources;
- configuration files for middleware;
- compute assets provisioned by the middleware;
- and
- computational assets executing on the compute assets provisioned by the middleware;
- and
- providing access to the compute resource if compliance is verified and denying access to the compute resource if compliance cannot be verified.
Dependencies are inferred from the claim text.