Unisys Corporation

Mark Steven Brandt

Robert A Johnson

Charles Austin Parker

Sarah K Inforzato

James J Leigh

Lois Bridgham Coyne

Susan Mary Jennion

Robert Frank Inforzato

Duane J McCrory

Michael T Kain

Robert K Moulton

Kathy Yishin Jaing

Jerry S Bassett

Christopher John Harrer

Frances Ann Laukagalis

Jeffrey John Wilson

Vinh Ha Le

Christopher A Byrd

Kathryn Ann McDonald

Patricia Nichols

Linh Ly

Sandy Hickoff

James E Trevdte

A system and method of initializing a virtual machine within a secure hybrid cloud is disclosed. One method includes transmitting service mode credentials to a cloud broker from a cloud-based virtual machine, receiving a service mode community of interest key from a credentialing service based on the service mode credentials, and establishing a secure service mode connection based on the service mode community of interest key. The method also includes receiving role VPN credentials at the cloud-based virtual machine and establishing a secure role connection to the cloud broker using the role VPN credentials, thereby providing, in response to the role VPN credentials, a role VPN community of interest key to a virtual data relay dedicated to the cloud-based virtual machine. The method further includes receiving role cloud credentials at the cloud-based virtual machine and establishing secure communications at the cloud-based virtual machine based on the role cloud credentials, including receiving a role cloud community of interest key at the cloud-based virtual machine used for secure communication among the cloud-based virtual machine and other cloud-based virtual machines within a common community of interest with the cloud-based virtual machine.

Remote credential management for hybrid clouds with enterprise networks

A system and method of managing secure integration of a cloud-based computing resource with a private domain are disclosed. One system includes a hybrid cloud arrangement including a plurality of virtual machines, the plurality of virtual machines including at least a first virtual machine within the private domain and a second virtual machine within a public cloud. The system also includes a virtual data relay within the private domain and associated with the second virtual machine. The virtual data relay includes a private domain interface used to establish a secure communication link according to a first security protocol with each virtual machine within the private domain that is a member of a community of interest, the virtual data relay assigned a community of interest key used by the private domain interface and defining the community of interest of which the second virtual machine is a member. The virtual data relay also includes a public cloud interface used to establish a secure communication link with the second virtual machine, the public cloud interface using a second security protocol different from the first security protocol.

Secure integration of hybrid clouds with enterprise networks

A server hosting system provides managed servers for tenants of the server hosting system. Managed servers for different tenants can have the same IP addresses and fully-qualified domain names (FQDNs). Furthermore, the server hosting system provides routers for the tenants. The router for a tenant can receive a Domain Name System (DNS) update message. The DNS update message is a request for a DNS server to associate a tenant-side FQDN with a tenant-side IP address. This tenant-side IP address can concurrently be an IP address of a managed server of another tenant. In response to receiving the DNS update request, the router sends a DNS data message to a management system for the server hosting system. The DNS data message indicates the IP address, the tenant-side FQDN, and an IP address only associated with the given tenant.

Snooping DNS messages in a server hosting system providing overlapping address and name spaces

A method, system, and computer program product specifies a communication intraconnect architecture that supports a pull model based data communication where data is sent to a receiver along with a memory address (a receiver buffer address or a reference to a pool manager or buffer pool) where the data is to be stored. CIA primitives are used to create nodes and dialog objects managed by send and receive IFEs. A logical dialog is established between corresponding send and receive dialog objects. A send dialog object includes a reference that identifies for the send IFE the corresponding receive dialog object in the receive IFE. The receive dialog object includes a reference that identifies for the receive IFE the corresponding send dialog object in the send IFE. Receive and send primitives are used to provide pull model data communication over a logical dialog. Receive with Buffer and Receive with Buffer Pool operations are provided. Multiple, full duplex, reliable virtual circuit connections can be provided for each node. Multiple dialog objects can reference a single node. Multiple outstanding CIA primitive operations are allowed on each dialog. Dialogs can handle byte stream or message oriented data Dialog operations and features further include scatter and gather support, Early-Far-End and Far-End send classes of service, automatic recurring receive option, partial sends and receives messages with substantially no restrictions on send/rcv lengths, and multiple dialog priorities. A user level management dialog is established to manage establishment of logical dialogs. Various dialog establishment services can be used. Buffer pool and pool manager operations provide address bound checking, buffer pool credits, low water mark notification, and data binding to flirter optimize data transfer performance.

Method system and computer program product for providing pull model data communication

A high speed data communications method and system is provided whereby multiple groups of software interfaces are used to link a Distributed Systems Services Unit to a Network Provider which connects to an Input/Output Interface Module which relates to external interfaces of a Network. The interfaces permit the capability of buffer sharing and lock pool sharing, in addition to improved Connection Library Element Interfaces which reduce the overhead that was previously required and further enables faster data transfer operations with reduced latency.

Multiple interface data communication system and method utilizing

A Connection Library Interface for a Process-Intercommunication Manager and a Process-Intercommunication Element provides an improved interface generating enhancements in data communication operations between a Network Provider and a Ports Unit which is part of the Master Control Program of a computer system. An improved method of data transfer involves a Distributed Systems Service/Application unit which operates through the Ports File of a Master Control Program, then uses Connection Library Interfaces to communicate with a Network Provider for data transfer to and from underlying interfaces.

An improved high-speed data communications system is provided having software functions which permit a Network Data Path Interface to work in conjunction with a Distributed System Service application and a Network Provider application for enhancing data transfers to a Input/Output module and Network Processor. The improved Network Data Path Interface functions involve transmitting data outward to Channel Adapters via the use of shared buffers which can be re-used after utilization, and also receiving data by the sharing of buffers between a Distributed System Service application software unit, a Network Provider unit, and the Network Data Path Interface, enabling data to be received by the Network Provider for transferral to the Distributed System Service application unit.

Network data path interface method and system for enhanced data

A method, system, and computer program product specifies a communication intraconnect architecture that supports a pull model based data communication where data is sent to a receiver along with a memory address (a receiver buffer address or a reference to a pool manager or buffer pool) where the data is to be stored. CIA primitives are used to create nodes and dialog objects managed by send and receive IFEs. A logical dialog is established between corresponding send and receive dialog objects. A send dialog object includes a reference that identifies for the send IFE the corresponding receive dialog object in the receive IFE. The receive dialog object includes a reference that identifies for the receive IFE the corresponding send dialog object in the send IFE. Receive and send primitives are used to provide pull model data communication over a logical dialog. Receive with Buffer and Receive with Buffer Pool operations are provided. Multiple, full duplex, reliable virtual circuit connections can be provided for each node. Multiple dialog objects can reference a single node. Multiple outstanding CIA primitive operations are allowed on each dialog. Dialogs can handle byte stream or message oriented data. Dialog operations and features further include scatter and gather support, Early-Far-End and Far-End send classes of service, automatic recurring receive option, partial sends and receives messages with substantially no restrictions on send/rcv lengths, and multiple dialog priorities. A user level management dialog is established to manage establishment of logical dialogs. Various dialog establishment services can be used. Buffer pool and pool manager operations provide address bound checking, buffer pool credits, low water mark notification, and data binding to further optimize data transfer performance.

Method, system, and computer program product for intraconnect data

An Output Interface function for a Cooperative Service Interface which allows export of data from a Distributed System Services unit (DSS) to a Network Provider unit (NP) whereby lock pools are shared as well as buffer pools in each unit. Copying of exported data from said DSS to said NP is eliminated by use of an image buffer pool in said Network Provider (NP) (Which holds pointers to data in memory) and which can export the data to an external I/O port.

Output interface method and system for enhanced data transfers via

An Input Interface functions for a Cooperative Service Interface unit and enables data from a network to be placed in a designated input buffer of a Network Provider (NP) which can convey pointers to a Distributed System Service (DSS) unit's image buffer pool for access of the data by said DSS from memory. Sharing of buffer pools and lock pools lessen the overhead and latency which would normally burden such data transfers.

Growing community of inventors

Laguna Beach, CA, United States of America

Mark Steven Brandt