-
公开(公告)号:US20160048410A1
公开(公告)日:2016-02-18
申请号:US14921824
申请日:2015-10-23
Applicant: GOOGLE INC.
Inventor: Joseph S. Beda, III , Craig I. McLuckie , Christopher L. Eck , Martin R. Gannholm , Evan K. Anderson , Matthew A. Mills
CPC classification number: G06F9/45558 , G06F17/30103 , G06F17/30112 , G06F17/30525 , G06F17/30864 , G06F17/30876 , G06F2009/4557 , G06F2009/45583
Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for associating one or more of a plurality of metadata collections with one or more respective identifiers, wherein each metadata collection includes one or more pairings of metadata attributes with metadata values, and wherein each identifier is one of a project identifier, a tag identifier or an instance identifier; identifying, based on identifier information associated with a virtual machine instance, one or more metadata values to be provided to the virtual machine instance, wherein the identifier information specifies one or more of a project identifier, a tag identifier and an instance identifier, and wherein each identified metadata value belongs to a metadata collection associated with an identifier that is specified in the identifier information; and providing, to the virtual machine instance, the identified one or more metadata values.
Abstract translation: 方法,系统和装置,包括在计算机存储介质上编码的计算机程序,用于将多个元数据集合中的一个或多个与一个或多个相应的标识符相关联,其中每个元数据集合包括元数据属性与元数据值的一个或多个配对, 并且其中每个标识符是项目标识符,标签标识符或实例标识符之一; 基于与虚拟机实例相关联的标识符信息识别要提供给虚拟机实例的一个或多个元数据值,其中所述标识符信息指定项目标识符,标签标识符和实例标识符中的一个或多个,并且其中 每个识别的元数据值属于与在标识符信息中指定的标识符相关联的元数据收集; 以及向虚拟机实例提供所标识的一个或多个元数据值。
-
公开(公告)号:US09448830B2
公开(公告)日:2016-09-20
申请号:US13830013
申请日:2013-03-14
Applicant: Google Inc.
Inventor: Evan K. Anderson , Alexander Mohr , Joseph S. Beda, III , Michael H. Waychison , Cory T. Maccarrone , Eric R. Northup , Sanjeet Singh Mehat
IPC: G06F9/455
CPC classification number: G06F9/45558 , G06F9/4555 , G06F2009/45595
Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for service bridges. In one aspect, a method includes a host operating system performs operations comprising: receiving, using one or more service bridges that execute in the host operating system, a plurality of requests from the one or more virtual machines, wherein each service bridge is associated with a different virtual machine of the one or more virtual machines, and wherein each request is a request to interface with one or more external services; modifying, using a respective service bridge, each request to be processed by the one or more external services; and providing each modified request from the respective service bridge to the one or more external services, where the respective service bridge communicates with the one or more external services over a network.
Abstract translation: 方法,系统和装置,包括在计算机存储介质上编码的用于服务桥的计算机程序。 一方面,一种方法包括主机操作系统执行操作,包括:使用在所述主机操作系统中执行的一个或多个服务桥接器接收来自所述一个或多个虚拟机的多个请求,其中每个服务桥与 所述一个或多个虚拟机的不同虚拟机,并且其中每个请求是与一个或多个外部服务接口的请求; 使用相应的服务桥修改由所述一个或多个外部服务处理的每个请求; 以及将来自相应服务网桥的每个经修改的请求提供给所述一个或多个外部服务,其中所述相应服务网桥通过网络与所述一个或多个外部服务通信。
-
公开(公告)号:US09798566B2
公开(公告)日:2017-10-24
申请号:US14921824
申请日:2015-10-23
Applicant: GOOGLE INC.
Inventor: Joseph S. Beda, III. , Craig I. McLuckie , Christopher L. Eck , Martin R. Gannholm , Evan K. Anderson , Matthew A. Mills
CPC classification number: G06F9/45558 , G06F17/30103 , G06F17/30112 , G06F17/30525 , G06F17/30864 , G06F17/30876 , G06F2009/4557 , G06F2009/45583
Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for associating one or more of a plurality of metadata collections with one or more respective identifiers, wherein each metadata collection includes one or more pairings of metadata attributes with metadata values, and wherein each identifier is one of a project identifier, a tag identifier or an instance identifier; identifying, based on identifier information associated with a virtual machine instance, one or more metadata values to be provided to the virtual machine instance, wherein the identifier information specifies one or more of a project identifier, a tag identifier and an instance identifier, and wherein each identified metadata value belongs to a metadata collection associated with an identifier that is specified in the identifier information; and providing, to the virtual machine instance, the identified one or more metadata values.
-
公开(公告)号:US09740516B1
公开(公告)日:2017-08-22
申请号:US14850483
申请日:2015-09-10
Applicant: Google Inc.
Inventor: Cristian Petrescu-Prahova , Christoph Kern , Evan K. Anderson , Joseph S. Beda, III
IPC: G06F9/455
CPC classification number: G06F9/45533 , G06F9/45558 , G06F2009/45587 , G06F2009/45595 , H04L12/4633
Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for implementing virtual network pairs between virtual machines and other devices.
-
公开(公告)号:US09231933B1
公开(公告)日:2016-01-05
申请号:US14021261
申请日:2013-09-09
Applicant: Google Inc.
Inventor: Vittaldas Sachin Shenoy , Pankaj Risbood , Vivek Sahasranaman , Christoph Kern , Evan K. Anderson
CPC classification number: H04L63/08 , G06F21/31 , G06F21/335 , G06F21/6218 , H04L9/3226 , H04L63/0815 , H04L63/0846
Abstract: In general, the subject matter described in this specification can be embodied in methods, systems, and program products for providing access to secured resources. A token providing system stores a primary authentication token that is used to obtain temporary authentication tokens. The token providing system provides, to application programs that are unable to access the primary authentication token, the temporary authentication tokens. The token providing system receives, from a first application program of the application programs, a first request to obtain a first temporary authentication token. The first request does not include the primary authentication token. The token providing system transmits a second request to obtain the first temporary authentication token. The second request includes the primary authentication token. The token providing system receives the first temporary authentication token. The token providing system provides the first temporary authentication token for use by the first application program.
-
公开(公告)号:US09178698B1
公开(公告)日:2015-11-03
申请号:US13725071
申请日:2012-12-21
Applicant: Google Inc.
Inventor: Omar S. Jarjur , Evan K. Anderson
CPC classification number: G06F21/53 , H04L9/0861 , H04L9/0891
Abstract: Methods, systems, and apparatus, including computer programs, for managing keys for virtual machines (VM). One method includes receiving a first public key associated with a first user from a first client machine (CM), receiving a second public key associated with a second user from a second CM, and updating metadata associated with a project that includes a first VM and a second VM to include the first and the second public keys. The first public key and a corresponding first private key were generated on the first CM in response to a determination that the first CM lacked a private key for communication with the first VM by the first user. The second public key and a corresponding second private key were generated on the second CM in response to a determination that the second CM lacked a private key for communication with the second VM by the second user.
Abstract translation: 用于管理虚拟机(VM)的密钥的方法,系统和装置,包括计算机程序。 一种方法包括从第一客户机(CM)接收与第一用户相关联的第一公共密钥,从第二CM接收与第二用户相关联的第二公钥,以及更新与包括第一VM的项目相关联的元数据,以及 第二VM,以包括第一和第二公钥。 响应于第一CM缺少第一用户与第一VM通信的私钥的确定,在第一CM上生成第一公钥和对应的第一私钥。 响应于第二CM缺少第二用户与第二VM进行通信的私钥的确定,在第二CM上生成第二公钥和对应的第二私钥。
-
公开(公告)号:US09170834B2
公开(公告)日:2015-10-27
申请号:US13665890
申请日:2012-10-31
Applicant: Google Inc.
Inventor: Joseph S. Beda , Craig I. McLuckie , Christopher L. Eck , Martin R. Gannholm , Evan K. Anderson , Mathew A. Mills
CPC classification number: G06F9/45558 , G06F17/30103 , G06F17/30112 , G06F17/30525 , G06F17/30864 , G06F17/30876 , G06F2009/4557 , G06F2009/45583
Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for associating one or more of a plurality of metadata collections with one or more respective identifiers, wherein each metadata collection includes one or more pairings of metadata attributes with metadata values, and wherein each identifier is one of a project identifier, a tag identifier or an instance identifier; identifying, based on identifier information associated with a virtual machine instance, one or more metadata values to be provided to the virtual machine instance, wherein the identifier information specifies one or more of a project identifier, a tag identifier and an instance identifier, and wherein each identified metadata value belongs to a metadata collection associated with an identifier that is specified in the identifier information; and providing, to the virtual machine instance, the identified one or more metadata values.
Abstract translation: 方法,系统和装置,包括在计算机存储介质上编码的计算机程序,用于将多个元数据集合中的一个或多个与一个或多个相应的标识符相关联,其中每个元数据集合包括元数据属性与元数据值的一个或多个配对, 并且其中每个标识符是项目标识符,标签标识符或实例标识符之一; 基于与虚拟机实例相关联的标识符信息来识别要提供给所述虚拟机实例的一个或多个元数据值,其中所述标识符信息指定项目标识符,标签标识符和实例标识符中的一个或多个,并且其中 每个识别的元数据值属于与在标识符信息中指定的标识符相关联的元数据收集; 以及向虚拟机实例提供所标识的一个或多个元数据值。
-
公开(公告)号:US20140123136A1
公开(公告)日:2014-05-01
申请号:US13665890
申请日:2012-10-31
Applicant: Google Inc.
Inventor: Joseph S. Beda, III , Craig I. McLuckie , Christopher L. Eck , Martin R. Gannholm , Evan K. Anderson , Mathew A. Mills
IPC: G06F9/455
CPC classification number: G06F9/45558 , G06F17/30103 , G06F17/30112 , G06F17/30525 , G06F17/30864 , G06F17/30876 , G06F2009/4557 , G06F2009/45583
Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for associating one or more of a plurality of metadata collections with one or more respective identifiers, wherein each metadata collection includes one or more pairings of metadata attributes with metadata values, and wherein each identifier is one of a project identifier, a tag identifier or an instance identifier; identifying, based on identifier information associated with a virtual machine instance, one or more metadata values to be provided to the virtual machine instance, wherein the identifier information specifies one or more of a project identifier, a tag identifier and an instance identifier, and wherein each identified metadata value belongs to a metadata collection associated with an identifier that is specified in the identifier information; and providing, to the virtual machine instance, the identified one or more metadata values.
Abstract translation: 方法,系统和装置,包括在计算机存储介质上编码的计算机程序,用于将多个元数据集合中的一个或多个与一个或多个相应的标识符相关联,其中每个元数据集合包括元数据属性与元数据值的一个或多个配对, 并且其中每个标识符是项目标识符,标签标识符或实例标识符之一; 基于与虚拟机实例相关联的标识符信息来识别要提供给所述虚拟机实例的一个或多个元数据值,其中所述标识符信息指定项目标识符,标签标识符和实例标识符中的一个或多个,并且其中 每个识别的元数据值属于与在标识符信息中指定的标识符相关联的元数据收集; 以及向虚拟机实例提供所标识的一个或多个元数据值。
-
-
-
-
-
-
-