System and method for secure service delivery
AssigneeHewlett-Packard Development Company, L.P.
InventorsBryan E. Stiekes, Shawn A. Williams
Life of this patent
Estimating the term…
Abstract
A secure service delivery network, including a service delivery compartment connected to deliver services to a plurality of client networks. The secure service delivery network includes a first firewall connecting the service delivery compartment to a first virtual local area network. The secure service delivery network includes a plurality of firewalls each connecting one of the plurality of client networks to the first virtual local area network, whereby no communications between the plurality of client networks can be made over the first virtual local area network. A related method is also described.
Claims12
A secure service delivery data processing system, comprising:
- a computer for receiving requests for services from a plurality of client networks;
- a service delivery compartment application, at a computer system, connected to deliver services to a plurality of client networks using a secure service delivery network wherein said services comprise secure access to leveraged compute resources;
- a first virtual firewall, at said computer system, connecting the service delivery compartment to a first virtual local area network;
- a plurality of firewalls, at said computer system, each connecting one of the plurality of client networks to the first virtual local area network, whereby no communications between the plurality of client networks can be made over the first virtual local area network;
- a leveraged services compartment application connected to provide compute resources, the leveraged services compartment application connected to communicate with the first virtual local area network, wherein the leveraged services compartment application is connected to communicate with the first virtual local area network via the first virtual firewall;
- a plurality of virtual routing and forwarding (VRF) nodes connected between the plurality of firewalls and the first virtual local area network;
- and
- a plurality of virtual local area networks each associated with one of the plurality of client networks and connected between the plurality of firewalls and the plurality of VRF nodes, wherein none of the plurality of client networks can detect another of the plurality of client networks.
A computer-implemented method of delivering services to a plurality of client networks, comprising:
- receiving requests for services from a plurality of client networks, by a computer system, wherein said services comprise secure access to leveraged compute resources;
- delivering the services to the plurality of client networks using a secure service delivery network, by said computer system;
- and
- wherein the secure service delivery network includes a service delivery compartment application connected to deliver the services to the plurality of client networks, a first virtual firewall connecting the service delivery compartment to a first virtual local area network, and a plurality of firewalls each connecting one of the plurality of client networks to the first virtual local area network,
- wherein no communications between the plurality of client networks can be made over the first virtual local area network,
- wherein a leveraged services compartment application is connected to provide compute resources, the leveraged services compartment application is connected to communicate with the first virtual local area network and the leveraged services compartment application is connected to communicate with the first virtual local area network via the first virtual firewall,
- wherein a plurality of virtual routing and forwarding (VRF) nodes are connected between the plurality of firewalls and the first virtual local area network,
- wherein a plurality of virtual local area networks each associated with one of a plurality of client networks and connected between the plurality of firewalls and the plurality of VRF nodes, and
- wherein none of the plurality of client networks can detect another of the plurality of client networks.
Dependencies are inferred from the claim text.