Patent ID: 8788669
Filing Date: 2014-07-22
Classification: G06F,H04L

Abstract:
1. A method implemented in a non-transitory machine-readable storage medium and processed by one or more processors configured to perform the method, comprising: interrogating a resource infrastructure to acquire resource identities for resources within the resource infrastructure and to determine a stage of readiness for each resource within the resource infrastructure, hardware of the resource infrastructure for each resource is interrogated without interacting with an operating system or hypervisor of the resource infrastructure, the resource identities are specific to the resource infrastructure; managing policy specifications assigned to workload identities for workloads and assigned to requestor identities for requestors of the workloads, and each workload identity and each requester identity formulated from that identity's one or more identifiers and secrets that provide a statement of roles and permissions, which that identity has in relation to the resource identities; and dynamically provisioning the resources for handling the workloads based on: requests from the requestors, the stage of readiness for each of the resources, enforcement of the policy specifications, and the resource identities within the resource infrastructure and ensuring that policy and identity-based constraints are enforced when dynamically provisioning.