# US 11,307,905 B2 · Method and a device comprising an edge cloud agent for providing a service > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,307,905 B2 - Document ID: US11307905B2 - Status: Granted - Kind: B2 - Application number: 16/909,473 - Filed: 2020-06-23 - Published: 2021-01-07 - Granted: 2022-04-19 - Earliest claimed: 2019-07-03 - Assignees: Telia AB - Applicants: Telia Company AB - Inventors: Rickard Damm; Michael Huber - Web page: https://patentgrep.com/patent/US11307905B2 ## CPC - G06F 9/5072: {Grid computing} - H04L 63/0272: {Virtual private networks} - G06F 3/0605: {by facilitating the interaction with a user or administrator} - G06F 3/0631: {by allocating resources to storage systems} - G06F 3/0637: {Permissions} - G06F 3/0652: {Erasing, e.g. deleting, data cleaning, moving of data to a wastebasket} - G06F 3/0673: {Single storage device} - G06F 9/546: {Message passing systems or structures, e.g. queues} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - H04L 9/50: {using hash chains, e.g. blockchains or hash trees} - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04L 67/563: Data redirection of data network streams - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract The embodiments herein relate to a device and a method performed by an edge cloud agent, the method comprising: receiving a request for resources; locating a computing device, in the network, capable in providing the requested resources; instantiating a secure container on the located computing device; setting up a VLAN/VPN connection to the secure container on the computing device; and allocating said resources to a storage instance based on available resources within the computing device. ## Claims ### Claim 1 A method performed by an edge cloud agent in an operator's network, the method comprising: receiving a request for resources; locating a computing device, in the network, capable of providing the requested resources; instantiating a secure container on the located computing device; setting up a Virtual Local Area Network/Virtual Private Network, VLAN/VPN, connection to the secure container on the computing device; allocating said resources to a storage instance based on available resources within the computing device; and for each application received at the edge cloud agent, testing to determine if the application is valid or not; if the application is determined to be valid, assigning a unique fingerprint to said valid application and storing said unique fingerprint in a shared ledger which is accessible to at least one computing device including a validation agent; and if the application is determined to be invalid, deleting the application. ### Claim 2 (depends on 1) The method according to claim 1, wherein setting up a VLAN/VPN connection includes setting up a VLAN/VPN connection from a cloud termination point of the operator to the secure container on the computing device. ### Claim 3 (depends on 1) The method according to claim 1, further comprising: detecting a presence of at least one user device connected to the network where the computing device is residing and said user device is consuming said resources; when the user device leaves said network, informing said user device that the storage instance will be terminated within a predetermined time period; and terminating said storage instance upon expiry of the predetermined time period. ### Claim 4 (depends on 1) The method according to claim 1, further comprising: acquiring storage capabilities of the computing device; and deploying or deleting at least one storage instance of the computing device on the basis of the acquired storage capabilities. ### Claim 5 (depends on 1) The method according to claim 1, further comprising: allowing different cloud applications running in the edge cloud to communicate with each other and user devices over a local messaging bus; and assigning policies to said message bus based on a set of rules. ### Claim 6 (depends on 5) The method according to claim 5, wherein the set of rules includes allowing a first service in a first container to only send messages to a second user device and a third user device, while a second service is allowed to send and receive messages to/from all user devices connected to the computing device. ### Claim 7 A device comprising an edge cloud agent in an operator's network, the device comprising a processor and a memory containing instructions executable by said processor whereby said device is operative to: receive a request for resources; locate a computing device, in the network, capable of providing the requested resources; instantiate a secure container on the located computing device; set up a Virtual Local Area Network/Virtual Private Network, VLAN/VPN, connection to the secure container on the computing device; and allocate said resources to a storage instance based on available resources within the computing device; and for each application received at the edge cloud agent, test to determine if the application is valid or not; if the application is determined to be valid, assign a unique fingerprint to said valid application and storing said unique fingerprint in a shared ledger which is accessible to at least one computing device including a validation agent; and if the application is determined to be invalid, delete the application. ### Claim 8 (depends on 7) The device according to claim 7, wherein the setting up of the VLAN/VPN connection includes setting up a VLAN/VPN connection from a cloud termination point of the operator to the secure container on the computing device. ### Claim 9 (depends on 7) The device according to claim 7, further operative to: detect a presence of at least one user device connected to the network where the computing device is residing and said user device is consuming said resources; and when the user device leaves said network, inform said user device that the storage instance will be terminated within a predetermined time period; and terminating said storage instance upon expiry of the time period. ### Claim 10 (depends on 7) The device according to claim 7, further operative to: acquire storage capabilities of the computing device; and deploy or delete at least one storage instance of the computing device on the basis of the acquired storage capabilities. ### Claim 11 (depends on 7) The device according to claim 7, further operative to: allow different cloud applications running in the edge cloud to communicate with each other and user devices over a local messaging bus; and assigning policies to said message bus based on a set of rules. ### Claim 12 (depends on 11) The device according to claim 11, wherein the set of rules includes allowing a first service in a first container to only send messages to a second user device and a third user device, while a second service is allowed to send and receive messages to/from all user devices connected to the computing device.