Patent ID: 9246985
Filing Date: 2016-01-26
CPC Classification: G06F,H04L,H04W

Claim Text:
1. A method implemented in a non-transitory machine-readable storage medium and processed by one or more processors configured to perform the method, comprising: determining to move a remotely-housed resource from a first machine to a second machine over a network based on a policy evaluation for the remotely-housed resource and the policy evaluation indicating a change in a current location for the remotely-housed resource on the first machine is to be made to a new location on the second machine and the policy evaluation identifying the second machine, and a policy evaluated in the policy evaluation is randomly generated based on time, the remotely-housed resource is a particular resource that is managed over the network and is external or remote from a requesting principal that requests the remotely-housed resource, and wherein the remotely-housed resource is a document; acquiring configuration details for the second machine, the configuration details include specific metadata for creating the second machine as a dynamically created and installed virtual machine; wherein acquiring further includes generating the configuration details for a newly created virtual machine (VM), which is the second machine, or a workload and the configuration details include a randomly generated Internet Protocol (IP) address and a randomly generated communication port for communicating with the newly created VM or the workload; obtaining an encryption key for the second machine that machine, the second machine generating the encryption key and the encryption key is for and associated with the second machine; facilitate moving of the remotely-housed resource in an encrypted format using the encryption key from the first machine to the second machine; and updating a mapping that maps the remotely-housed resource to the second machine, the mapping originally mapped the remotely-housed resource to the first machine.