US 2006/0224736 A1Published application

Distributed service deliver model

AssigneeMicrosoft Corporation

InventorsBradley Graziado, Ganesh Pandy, Douglas Cavit

Life of this patent

Estimating the term…

Loading patent…

Abstract

A root silo that authorizes one or more clients to access one or more services at one or more servicing silos receives a request from a client for interaction with a service. The root silo identifies a servicing silo as an available provider of the service for interacting with the client and generates a servicing certificate that contains (i) service entitlement information showing that the client is entitled to interact with the service at the servicing silo, (ii) location information identifying a location of the servicing silo, and (iii) one or more keys for use in secure communication between the client and the servicing silo. Having generated the servicing certificate, the root silo sends the servicing certificate to the client for the client to use when interacting with the service at the servicing silo.

Claims20

Dependent claims

For a distributed computer system comprising one or more clients, one or more servicing silos that provide one or more services to the one or more clients, and a root silo that authorizes the one or more clients to access the one or more services at the one or more servicing silos, a method of identifying a servicing silo as a provider of a service desired by a client and entitling the client to interact with the servicing silo, without requiring the client to authenticate to the root silo each time the client interacts with the service at the servicing silo, the method comprising the root silo performing acts of:

receiving a request from the client for interaction with a service;
identifying the servicing silo as an available provider of the service for interacting with the client;
generating a servicing certificate that contains (i) service entitlement information showing that the client is entitled to interact with the service at the servicing silo, (ii) location information identifying a location of the servicing silo, and (iii) one or more keys for use in secure communication between the client and the servicing silo;
and
sending the servicing certificate to the client for the client to use when interacting with the service at the servicing silo.

2 more elements

A computer program product for use in a distributed computer system comprising one or more clients, one or more servicing silos that provide one or more services to the one or more clients, a root silo that authorizes the one or more clients to access the one or more services at the one or more servicing silos, the computer program product comprising one or more computer readable media with computer executable instructions that implement a method of identifying a servicing silo as a provider of a service desired by a client and entitling a client to interact with a servicing silo, without requiring the client to authenticate to the root silo each time the client interacts with the service at the servicing silo, the method comprising the client performing steps for:

directing a request for interaction with a service to the root silo;
acquiring a servicing certificate from the root silo that contains (i) service entitlement information showing that the client is entitled to interact with the service at the servicing silo, (ii) location information identifying a location of the servicing silo, and (iii) one or more keys for use in secure communication between the client and the servicing silo;
directing a request to the servicing silo for interaction with the service using the location information in the servicing certificate acquired from the root silo;
providing at least the entitlement information to the servicing silo to show that the client is entitled to interact with the service at the servicing silo;
and
interacting with the service at the servicing silo.

3 more elements

In distributed computer system comprising one or more clients, a servicing silo that provides one or more services to the one or more clients, and a root silo that authorizes the one or more clients to access the one or more services at the servicing silo, without requiring one or more clients to authenticate to the root silo each time the one or more clients interact with the one or more services at the servicing silo, the servicing silo comprising:

a network interface for communicating with the one or more clients;
one or more computer readable media with computer executable instructions, the computer executable instructions comprising:
computer executable instructions for receiving provisioning data created by the root silo indicating that the servicing silo should allocate and initialize storage for the client, the provisioning data being received from the client;
computer executable instructions for receiving a servicing certificate created by the root silo, the servicing certificate containing (i) service entitlement information showing that the client is entitled to interact with the service at the servicing silo, (ii) location information identifying a location of the servicing silo, and (iii) one or more keys for use in secure communication between the client and the servicing silo;
computer executable instructions for implementing at least a portion of the service;
and
computer executable instructions for interacting with the client in accordance with the service;
and
a processing unit coupled to the network connection and the one or more computer readable media for sending and receiving data over the network connection and for executing the computer executable instructions.

6 more elements

Dependencies are inferred from the claim text.