Patent ID: 8978125
Filing Date: 2015-03-10
Classification: G06F

Abstract:
1. A method, comprising: sending, by a local identity service executing on a processor, a data string to a remote identity service executing in a remote processing environment, wherein the data string is randomly generated by the local identity service; receiving an encrypted version of the data string from the remote identity service, decrypting the encrypted version of the data string using a public key of the secure device to authenticate the remote processing environment; establishing, after the authentication, a secure channel between the local identity service and the remote identity service based on the remote processing environment being authenticated; acquiring operating metadata unique to the remote processing environment via the secure channel, wherein the operating metadata comprises disk subsystem configuration settings for the remote processing environment; generating, based upon the operating metadata, a unique identity for the remote processing environment; transmitting the unique identity to the remote processing environment; installing, in the remote processing environment, a policy enforcement point service; enabling a first policy decision point service to transact with the remote processing environment using the unique identity; transmitting, by the first policy decision point service, a first policy restriction to the remote processing environment, wherein the policy enforcement point service deploys and enforces the first policy restriction within the remote processing environment; acquiring, from a second policy decision point service, a second policy restriction, wherein the second policy restriction initiates the deployment of a virtual processing environment on the remote processing environment; and transmitting, to the remote processing environment, the second policy restriction.