Method and system for policy based lifecycle management of virtual software appliances
    41.
    发明授权
    Method and system for policy based lifecycle management of virtual software appliances 有权
    虚拟软件设备的基于策略的生命周期管理方法和系统

    公开(公告)号:US09218218B2

    公开(公告)日:2015-12-22

    申请号:US12199173

    申请日:2008-08-27

    IPC分类号: G06F9/46 G06F9/50

    摘要: A system and method for managing dynamically allocated resources assigned to a service includes providing a service to be used by a plurality of sites in a federation. Usage information associated with the service is communicated to each of the plurality of sites. A disposition of the service is determined based on local policies and the usage information received from other sites by a service owner. The disposition of the service is updated across a plurality of sites in accordance with messages sent by the service owner to reduce resource usage.

    摘要翻译: 用于管理分配给服务的动态分配的资源的系统和方法包括提供要由联合中的多个站点使用的服务。 与服务相关联的使用信息被传送到多个站点中的每个站点。 根据本地策略和服务所有者从其他站点接收的使用信息确定服务的配置。 根据服务所有者发送的消息,服务的配置在多个站点上被更新以减少资源使用。

    Identity context-based access control
    42.
    发明申请
    Identity context-based access control 有权
    基于身份上下文的访问控制

    公开(公告)号:US20140075492A1

    公开(公告)日:2014-03-13

    申请号:US13608125

    申请日:2012-09-10

    IPC分类号: G06F21/00

    CPC分类号: G06F21/604 H04L63/102

    摘要: Identity context-based access control is implemented by generating an identity context expression from user identity data. In particular, users are clustered based on combinations of one or more attributes. These clusters comprise one or more identity context(s). Preferably, an intersection of attribute sets of each user in the cluster is formed. In addition, an intersection of attribute sets of each user not in the cluster also is formed. If the attribute set that is common across the cluster of users is not a subset of the attribute set that is common across the rest of the users, then the attribute set forms a unique identity context expression. To reduce the number of roles used in role-based access control (RBAC), at least one role is replaced with an identity context expression. Run-time access control is then enabled.

    摘要翻译: 通过从用户身份数据生成身份上下文表达式来实现基于身份上下文的访问控制。 特别地,基于一个或多个属性的组合来聚类用户。 这些集群包括一个或多个身份上下文。 优选地,形成群集中的每个用户的属性集的交集。 另外,也不形成不在群集中的每个用户的属性集合的交集。 如果在用户集群中通用的属性集不是其余用户常用的属性集的子集,则属性集将形成唯一的身份上下文表达式。 为了减少基于角色的访问控制(RBAC)中使用的角色数量,至少有一个角色被替换为身份上下文表达式。 然后启用运行时访问控制。

    Performance degradation root cause prediction in a distributed computing system
    43.
    发明授权
    Performance degradation root cause prediction in a distributed computing system 失效
    分布式计算系统中性能退化的根本原因预测

    公开(公告)号:US08161058B2

    公开(公告)日:2012-04-17

    申请号:US12056530

    申请日:2008-03-27

    IPC分类号: G06F7/00

    摘要: A method of identifying at least one resource in a distributed computing system which is a potential root cause of performance degradation of the system includes the steps of: computing operational bounds for the system and operational bounds for at least one resource in the system; comparing current end-to-end system performance with the operational bounds for the system; when the current end-to-end system performance is outside of the operational bounds for the system, comparing current performance of the at least one resource in the system with the operational bounds for the at least one resource; and generating at least one output identifying the at least one resource in the system which is a potential root cause of performance degradation of the system.

    摘要翻译: 识别分布式计算系统中至少一个资源的方法,该系统是系统性能下降的潜在根本原因,包括以下步骤:计算系统的操作界限和系统中至少一个资源的操作界限; 将当前的端到端系统性能与系统的操作范围进行比较; 当所述当前端对端系统性能超出所述系统的操作限制时,将所述系统中所述至少一个资源的当前性能与所述至少一个资源的操作界限进行比较; 以及生成识别系统中的至少一个资源的至少一个输出,其是系统的性能退化的潜在根本原因。

    LAYERED CAPACITY DRIVEN PROVISIONING IN DISTRIBUTED ENVIRONMENTS
    44.
    发明申请
    LAYERED CAPACITY DRIVEN PROVISIONING IN DISTRIBUTED ENVIRONMENTS 审中-公开
    分布式环境中的层级能力提升

    公开(公告)号:US20100050179A1

    公开(公告)日:2010-02-25

    申请号:US12196386

    申请日:2008-08-22

    摘要: Techniques are disclosed for providing mapping of application components to a set of resources in a distributed environment using capacity driven provisioning using a layered approach. By way of example, a method for allocating resources to an application comprises the following steps. A first data structure is obtained representing a post order traversal of a dependency graph for the application and associated containers with capacity requirements. A second data structure is obtained representing a set of resources, and associated with each resource is a tuple representing available capacity. A mapping of the dependency graph data structure to the resource set is generated based on the available capacity such that resources of the set of resources are allocated to the application.

    摘要翻译: 公开了用于使用使用分层方法的容量驱动的供应来将应用组件映射到分布式环境中的一组资源的技术。 作为示例,用于向应用分配资源的方法包括以下步骤。 获得第一数据结构,表示应用程序的依赖关系图的顺序遍历,以及具有容量要求的关联容器。 获得代表一组资源的第二数据结构,并且与每个资源相关联的是表示可用容量的元组。 基于可用容量生成依赖关系图数据结构与资源集的映射,使得资源集合的资源被分配给应用。

    METHOD FOR VISUALIZING MONITORING DATA
    45.
    发明申请
    METHOD FOR VISUALIZING MONITORING DATA 审中-公开
    可视化监控数据的方法

    公开(公告)号:US20100033485A1

    公开(公告)日:2010-02-11

    申请号:US12186580

    申请日:2008-08-06

    IPC分类号: G06T11/20

    CPC分类号: G06T11/206 G06K9/6253

    摘要: Techniques for visualizing monitoring data are provided. The techniques include generating at least one context from the monitoring data based on a user-provided schema definition, mapping the data from a high dimensional space to a lower dimensional subspace using a topology preserving mapping, organizing the mapped data into a three-dimensional space to allow dynamic selection of a context resolution level across a hierarchy of the at least one context, using the mapped data to identify at least one trend in the data, wherein identifying the at least one trend comprises observing one or more changes over time in one or more activation patterns for each of the at least one context, and visualizing the at least one quantified trend in the data.

    摘要翻译: 提供了可视化监控数据的技术。 这些技术包括基于用户提供的模式定义从监视数据生成至少一个上下文,使用拓扑保留映射将数据从高维空间映射到较低维子空间,将映射的数据组织成三维空间 以允许使用所映射的数据来识别所述数据中的至少一个趋势来动态地选择所述至少一个上下文的层次结构中的上下文分辨率级别,其中识别所述至少一个趋势包括在一个时间段内观察一个或多个随时间变化的变化 或更多的激活模式,并且可视化数据中的至少一个量化趋势。

    Systems, methods and computer programs for determining dependencies between logical components in a data processing system or network
    48.
    发明申请
    Systems, methods and computer programs for determining dependencies between logical components in a data processing system or network 失效
    用于确定数据处理系统或网络中的逻辑组件之间的依赖关系的系统,方法和计算机程序

    公开(公告)号:US20050172306A1

    公开(公告)日:2005-08-04

    申请号:US10689417

    申请日:2003-10-20

    IPC分类号: G06F13/00 H04L29/08

    CPC分类号: G06F11/008 H04L67/02

    摘要: Described are methods, apparatus and computer programs for determining run-time dependencies between logical components of a data processing environment. Components of the data processing environment are monitored by monitoring agents accessing run-time activity data via APIs of the managed system. A dependency generator identifies correlations between the run-time activity of the monitored components. For synchronous monitored systems, the dependency generator calculates an activity period for monitored components and determines which component's activity periods contain the activity periods of other components. Containment is used as an indicator of a likely dependency relationship, and a weighting is computed for each dependency relationship based on the consistency of containment.

    摘要翻译: 描述了用于确定数据处理环境的逻辑组件之间的运行时间依赖性的方法,装置和计算机程序。 数据处理环境的组件由监视代理通过受管系统的API访问运行时活动数据进行监控。 依赖生成器识别被监视组件的运行时活动之间的相关性。 对于同步监控系统,依赖生成器计算被监视组件的活动周期,并确定哪个组件的活动周期包含其他组件的活动周期。 遏制被用作可能的依赖关系的指标,并且基于遏制的一致性为每个依赖关系计算加权。