Back to results
US 10,855,758 B1Granted
Decentralized computing resource management using distributed ledger
AssigneeEMC IP Holding Company LLC
InventorsMark A. O'Connell, Stephen Todd
Life of this patent
Estimating the term…
Abstract
In a network including a plurality of computing resources associated with an enterprise, an identity is established for each of the computing resources in accordance with a decentralized identity management system maintained in accordance with a distributed ledger. The plurality of computing resources is managed in association with the distributed ledger, wherein managing comprises the enterprise posting one or more commands on the distributed ledger to enable one or more of the plurality of computing resources to obtain the one or more commands. In one non-limiting example, the computing resources are part of a geographically distributed IT infrastructure associated with the enterprise.
Claims20
A method comprising:
- in a network comprising a plurality of computing resources associated with an enterprise, establishing an identity for each of the computing resources in accordance with a decentralized identity management system maintained in accordance with a distributed ledger;
- and
- managing the plurality of computing resources in association with the distributed ledger, wherein managing comprises the enterprise posting one or more commands on the distributed ledger to enable one or more of the plurality of computing resources to obtain the one or more commands;
- wherein one or more of the computing resources belong to at least one group specified by the enterprise to enable the enterprise to manage the at least one group via the one or more posted commands;
- wherein the at least one group has an encryption key associated therewith;
- wherein the enterprise publishes the encryption key in an identity profile established with the decentralized identity management system, and wherein the encryption key is encrypted with a private key of the at least one group and with a public key of a given one of the computing resources in the at least one group;
- wherein the managing step further comprises, before posting the one or more commands, encrypting the one or more commands with the encryption key associated with the group;
- wherein the managing step further comprises posting a plain-text message with the one or more encrypted commands to indicate to the one or more computing resources belonging to the at least one group that the one or more encrypted commands affect the one or more computing resources of the at least one group;
- wherein the method is implemented via one or more processing devices each comprising a processor coupled to a memory.
6 more elements
A system comprising:
- one or more processing devices configured to:
- in a network comprising a plurality of computing resources associated with an enterprise, establish an identity for each of the computing resources in accordance with a decentralized identity management system maintained in accordance with a distributed ledger;
- and
- manage the plurality of computing resources in association with the distributed ledger, wherein managing comprises the enterprise posting one or more commands on the distributed ledger to enable one or more of the plurality of computing resources to obtain the one or more commands;
- wherein one or more of the computing resources belong to at least one group specified by the enterprise to enable the enterprise to manage the at least one group via the one or more posted commands;
- wherein the at least one group has an encryption key associated therewith;
- wherein the enterprise publishes the encryption key in an identity profile established with the decentralized identity management system, and wherein the encryption key is encrypted with a private key of the at least one group and with a public key of a given one of the computing resources in the at least one group;
- wherein the managing step further comprises, before posting the one or more commands, encrypting the one or more commands with the encryption key associated with the group;
- wherein the managing step further comprises posting a plain-text message with the one or more encrypted commands to indicate to the one or more computing resources belonging to the at least one group that the one or more encrypted commands affect the one or more computing resources of the at least one group.
6 more elements
An article of manufacture comprising a non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes said at least one processing device to:
- in a network comprising a plurality of computing resources associated with an enterprise, establish an identity for each of the computing resources in accordance with a decentralized identity management system maintained in accordance with a distributed ledger;
- and
- manage the plurality of computing resources in association with the distributed ledger, wherein managing comprises the enterprise posting one or more commands on the distributed ledger to enable one or more of the plurality of computing resources to obtain the one or more commands;
- wherein one or more of the computing resources belong to at least one group specified by the enterprise to enable the enterprise to manage the at least one group via the one or more posted commands;
- wherein the at least one group has an encryption key associated therewith;
- wherein the enterprise publishes the encryption key in an identity profile established with the decentralized identity management system, and wherein the encryption key is encrypted with a private key of the at least one group and with a public key of a given one of the computing resources in the at least one group;
- wherein the managing step further comprises, before posting the one or more commands, encrypting the one or more commands with the encryption key associated with the group;
- wherein the managing step further comprises posting a plain-text message with the one or more encrypted commands to indicate to the one or more computing resources belonging to the at least one group that the one or more encrypted commands affect the one or more computing resources of the at least one group.
5 more elements
Dependencies are inferred from the claim text.