A user device transmits a login request. A provider server, receives a random number from and transmits other information to an authentication server. The provider server transmits the random number to the device. The random number is transferred to a second user device, which transmits it to the authentication server. The authentication server transmits provider authentication policy requirements and further transmits the other information to the second device. The second device transmits user validation information to the authentication server. The authentication server determines that the transmitted validation information corresponds to the service provider authentication policy requirements, compares the validation information with stored validation information for the user to authenticate the user. The second device transmits a message, including the random number and the other information, signed with a user credential to the authentication server. The authentication server transmits notice of authentication and the signed message to the provider server.

Secure authentication in a multi-party system

An authentication and authorization plug-in model for a cloud computing environment enables cloud customers to retain control over their enterprise information when their applications are deployed in the cloud. The cloud service provider provides a pluggable interface for customer security modules. When a customer deploys an application, the cloud environment administrator allocates a resource group (e.g., processors, storage, and memory) for the customer's application and data. The customer registers its own authentication and authorization security module with the cloud security service, and that security module is then used to control what persons or entities can access information associated with the deployed application. The cloud environment administrator, however, typically is not registered (as a permitted user) within the customer's security module; thus, the cloud environment administrator is not able to access (or release to others, or to the cloud's general resource pool) the resources assigned to the cloud customer (even though the administrator itself assigned those resources) or the associated business information. To further balance the rights of the various parties, a third party notary service protects the privacy and the access right of the customer when its application and information are deployed in the cloud.

Authentication and authorization methods for cloud computing security

A system and method can deploy and manage software services in virtualized and non-virtualized environments. The system provides an enterprise application virtualization solution that allows for centralized governance and control over software and Java applications. Operations teams can define policies, based on application-level service level agreements (SLA) that govern the allocation of hardware and software resources to ensure that quality of service (QoS) goals are met across virtual and non-virtualized platforms. The system use a rules engine that can compare administrator defined constraints with runtime metrics; generate events when a constraint is violated by a metric of the runtime metrics and generate events when a constraint is violated by a metric of the runtime metrics.

Operation control for deploying and managing software service in a virtual environment

Host state monitoring

A method for in-vehicle dynamic virtual reality includes receiving vehicle data from one or more vehicle systems of a vehicle, wherein the vehicle data includes vehicle dynamics data and receiving user data from a virtual reality device. The method includes generating a virtual view based on the vehicle data, the user data and a virtual world model, the virtual world model including one or more components that define the virtual view, wherein generating the virtual view includes augmenting one or more components of the virtual world model according to at least one of the vehicle data and the user data and rendering the virtual view to an output device by controlling the output device to update display of the virtual view according to the vehicle dynamics data.

System and method for dynamic in-vehicle virtual reality

A mobile device is described herein that provides a user interface experience to a user who is operating the mobile device within a vehicle. The mobile device provides the user interface experience using mode functionality. The mode functionality operates by receiving inference-input information from one or more input sources. At least one input source corresponds to at least one movement-sensing device, provided by the mobile device, that determines movement of the mobile device. The mode functionality then infers a state of the vehicle based on the inference-input information and presents a user interface experience that is appropriate for the vehicle state. In one scenario, the mode functionality can also infer that the vehicle is in a distress condition. In response, the mode functionality can solicit assistance for the user.

Providing a user interface experience based on inferred vehicle state

A network with authentication implemented using a client health enforcement framework. The framework is adapted to receive plug-ins on clients that generate health information. Corresponding plug-ins on a server validate that health information. Based on the results of validation, the server may instruct the client to remediate or may authorize an underlying access enforcement mechanism to allow access. A client plug-in that generates authentication information formatted as a statement of health may be incorporated into such a framework. Similarly, on the server, a validator to determine, based on the authentication information, whether the client should be granted network access can be incorporated into the framework. Authentication can be simply applied or modified by changing the plug-ins, while relying on the framework to interface with an enforcement mechanism. Functions of the health enforcement framework can be leveraged to provide authentication-based functionality, such as revoking authorized access after a period of user inactivity or in response to a user command.

Authentication in a network using client health enforcement framework

A network resource management (NRM) system is described for allocating portions of available network capacity to applications, where the available network capacity is treated as a pool of virtual network resources. The NRM system operates by receiving a service level agreement (SLA) that specifies network resources that are requested by an application. The NRM system also receives network topology information regarding features of a physical communication network, which define, in turn, the available network capacity. Based on these inputs, the NRM system allocates a portion of the available network capacity to the application, to produce an SLA assignment. The NRM system then monitors events that may affect the SLA assignment. If such an event is detected, the NRM system can modify the SLA assignment, e.g., by changing or releasing the network resources assigned to the application, etc.

Application sla based dynamic, elastic, and adaptive provisioning of network capacity

Embodiments related to a multi-server unit having a direct network topology are disclosed. For example, one disclosed embodiment provides a multi-server unit including a plurality of server nodes connected in a direct network topology including distributed switching between the plurality of server nodes. The plurality of server nodes further comprises a router server node having one or more ports configured to communicate with an outside network, one or more ports configured to communicate with other server nodes of the plurality of server nodes, a logic subsystem, and instructions executable to implement a router configured to direct traffic between the one or more ports configured to communicate with an outside network and the one or more ports configured to communicate with other server nodes of the plurality of server nodes via the direct network.

Direct networking for multi-server units

A framework that enables a local computing cloud infrastructure for rural (and third world) populations with the ability to connect into the global cloud. The framework include is a low cost architecture of long distance, wireless based, renewable energy powered, and small datacenter (DC) (referred to as a pico-DC) nodes that can fully operate off-grid, both power-wise and Internet connection-wise at a very low cost. Additionally, the framework includes power management and storage techniques that effectively enable low power and efficient power use. Thus, systems are self-sufficient, low maintenance and weather proof with no need for power or data connections.

Sreenivas Addagatla

Papers

Providing a user interface experience based on inferred vehicle state

Authentication in a network using client health enforcement framework

Application sla based dynamic, elastic, and adaptive provisioning of network capacity

Direct networking for multi-server units

Wireless cloud-based computing for rural and developing areas