DEVICE AND A METHOD FOR MANAGING ACCESS TO A POOL OF COMPUTER AND NETWORK RESOURCES MADE AVAILABLE TO AN ENTITY BY A CLOUD COMPUTING SYSTEM

摘要

Disclosed is a method comprising updating a first model describing a pool of computer and network resources and a second multi-level hierarchical model describing an entity, each level having at least one element containing one or more users of the entity and associated with an algorithm for allocating at least a portion of the pool, the union of the elements at any level containing all of the users, such that the first and second models represent a current state of the pool of resources and a current state of the entity.;Upon request from a user to access a resource specified in the request, resources may be identified by applying the algorithms of the second model to the current state of the pool represented by the first model, verifying compatibility between the identified resources and the resource specified in the request, and rejecting the request in the event of incompatibility.

主权项

1. A method of managing access to a pool of computer and network resources made available by a cloud computing system to an entity having a plurality of users, the method comprising:
an updating process:
of updating a first model describing the pool f computer and network resources; andof updating a second model describing the entity, the second model being hierarchical and having a plurality of levels, each level of the second model having at least one element containing one or more users of the entity, each element of a said hierarchical level being associated with an algorithm for allocating at least a portion of the pool of resources, the union of the elements of a hierarchical level containing all of the users of the entity; said updating process being performed in such a manner that the first model and the second model represent a current state of the pool of resources and a current state of the entity; on receiving a request from at least one user of the entity to access at least one resource of the pool of resources as specified in the request:
an identification process of identifying resources for said at least one user from within the pool of resources, by applying resource allocation algorithms associated with the elements of the second model kept up to date with the current state of the pool of resources represented by the first model;a verification process of verifying compatibility between the resources identified for said at least one user and said at least one resource specified in the request; anda rejection process of rejecting the request in the event of incompatibility.