IP Library Granted Patent US 8,578,374
Granted Patent B2
US 8,578,374 · App. 12/504,297 · Granted Nov 5, 2013

System and method for managing virtual machines

Inventor: John P. Kane (Tafton, PA)
Assignee: CA, Inc.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,578,374
App. No.
12/504,297
Granted
Nov 5, 2013
Kind
B2
Abstract

In some embodiments, a method for virtual machine management includes receiving a request for a first virtual machine from a virtual host. The method also includes comparing the request for the first virtual machine to a policy. The policy includes rules that govern access to a plurality of virtual machines. In addition, the method includes providing the virtual host access to a second virtual machine in response to comparing the request for the first virtual machine to the policy.

Claims (59)

1. A computer-implemented method for virtual machine management executable on one or more processors, comprising:

receiving a request for a first virtual machine on an operating system of a device in response to user interaction with the device, the first virtual machine stored on the device;

comparing the request for the first virtual machine to a policy, the policy comprising rules that govern access to a plurality of existing virtual machines;

determining a second virtual machine of the plurality of existing virtual machines in response to comparing the request for the first virtual machine to the policy, the second virtual machine being a different version of the first virtual machine;

providing access to the second virtual machine in response to comparing the request for the first virtual machine to the policy by directing the operating system to provide the second virtual machine in response to the request for the first virtual machine;

wherein the second virtual machine is a particular virtual machine that comprises a set of alterations;

wherein the second virtual machine being the different version of the first virtual machine comprises the first virtual machine being the particular virtual machine without the set of alterations; and

wherein comparing the request for the first virtual machine to the policy comprises comparing information associated with the set of alterations to the first virtual machine.

2. The method of claim 1 , wherein comparing the request for the first virtual machine to the policy comprises determining if the user that initiated the request is allowed to access the first virtual machine.

3. The method of claim 1 , wherein comparing the request for the first virtual machine to the policy comprises determining if a location describing the origin of the request is authorized to access the first virtual machine.

4. The method of claim 1 , wherein comparing the request for the first virtual machine to the policy comprises determining if the request for the virtual machine was made during an authorized time interval.

5. The method of claim 1 , further comprising:

receiving a request sent to the operating system for a third virtual machine;

comparing the request for the third virtual machine to the policy; and

causing the operating system to indicate that the third virtual machine is not available in response to comparing the request for the virtual machine to the policy.

6. The method of claim 1 , further comprising modifying the policy in response to upgrading at least one virtual machine of the plurality of existing virtual machines.

7. The method of claim 1 , wherein:

comparing the request for the first virtual machine to the policy comprises determining that the user is not allowed to access a latest version of the first virtual machine but is allowed to access an earlier version of the first virtual machine; and

the second virtual machine being the different version of the first virtual machine comprises the second virtual machine being the earlier version of the first virtual machine.

8. A system for virtual machine management, comprising:

a policy database comprising a plurality of policies, wherein the policies comprise rules that govern access to a plurality of existing virtual machines; and

a processor configured to:

receive a request for a first virtual machine in response to user interaction with a device, the first virtual machine stored on the device;

compare the request for the first virtual machine to a policy of the plurality of policies;

determine a second virtual machine of the plurality of existing virtual machines in response to comparing the request for the first virtual machine to the policy, the second virtual machine being a different version of the first virtual machine;

cause the second virtual machine to be provided in response to comparing the request for the first virtual machine to the policy by causing an operating system of the device to provide the second virtual machine in response to the request for the first virtual machine;

wherein the second virtual machine is a particular virtual machine that comprises a set of alterations;

wherein the second virtual machine being the different version of the first virtual machine comprises the first virtual machine being the particular virtual machine without the set of alterations; and

wherein comparing the request for the first virtual machine to the policy comprises comparing information associated with the set of alterations to the first virtual machine.

9. The system of claim 8 , wherein comparing the request for the first virtual machine to the policy comprises determining if the user that initiated the request is allowed to access the first virtual machine.

10. The system of claim 8 , wherein comparing the request for the first virtual machine to the policy comprises determining if a location describing the origin of the request is authorized to access the first virtual machine.

11. The system of claim 8 , wherein comparing the request for the first virtual machine to the policy comprises determining if the request for the virtual machine was made during an authorized time interval.

12. The system of claim 8 , wherein:

the processor is operable to:

receive a request for a third virtual machine;

compare the request for the third virtual machine to a second policy of the plurality of policies; and

indicate that a virtual machine should not be provided in response to comparing the request for the third virtual machine to the second policy.

13. The system of claim 8 , wherein the policy database is configured to allow the plurality of policies to be modified in response to upgrading at least one virtual machine of the plurality of existing virtual machines.

14. The system of claim 8 , wherein:

comparing the request for the first virtual machine to the policy comprises determining that the user is not allowed to access a latest version of the first virtual machine but is allowed to access an earlier version of the first virtual machine; and

the second virtual machine being the different version of the first virtual machine comprises the second virtual machine being the earlier version of the first virtual machine.

15. A tangible, non-transitory, computer-readable medium comprising instructions that, when executed on one or more processors, are configured to:

receive a request for a first virtual machine sent to an operating system of a device in response to a user interacting with the device, the first virtual machine stored on the device;

compare the request for the first virtual machine to a policy, the policy comprising rules that govern access to a plurality of existing virtual machines;

determine a second virtual machine of the plurality of existing virtual machines in response to comparing the request for the first virtual machine to the policy, the second virtual machine being a different version of the first virtual machine;

cause the second virtual machine to be provided in response to comparing the request for the first virtual machine to the policy by causing the operating system to provide the second virtual machine in response to the request for the first virtual machine;

wherein the second virtual machine is a particular virtual machine that comprises a set of alterations;

wherein the second virtual machine being the different version of the first virtual machine comprises the first virtual machine being the particular virtual machine without the set of alterations; and

wherein comparing the request for the first virtual machine to the policy comprises comparing information associated with the set of alterations to the first virtual machine.

16. The medium of claim 15 , wherein comparing the request for the first virtual machine to the policy comprises determining if the user that initiated the request is allowed to access the first virtual machine.

17. The medium of claim 15 , wherein comparing the request for the first virtual machine to the policy comprises determining if a location describing the origin of the request is authorized to access the first virtual machine.

18. The medium of claim 15 , wherein comparing the request for the first virtual machine to the policy comprises determining if the request for the virtual machine was made during an authorized time interval.

19. The medium of claim 15 , wherein the instructions are further configured to:

receive a request sent to the operating system for a third virtual machine;

compare the request for the third virtual machine to the policy; and

indicate that the third virtual machine is not available in response to comparing the request for the virtual machine to the policy.

20. The medium of claim 15 , wherein:

comparing the request for the first virtual machine to the policy comprises determining that the user is not allowed to access a latest version of the first virtual machine but is allowed to access an earlier version of the first virtual machine; and

the second virtual machine being the different version of the first virtual machine comprises the second virtual machine being the earlier version of the first virtual machine.

Assignments (2)
MERGER Recorded Aug 30, 2013
From: COMPUTER ASSOCIATES THINK, INC.
To: CA, INC.
Reel/Frame 031120/0051 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 16, 2009
From: KANE, JOHN P.
To: COMPUTER ASSOCIATES THINK, INC.
Reel/Frame 022966/0581 →
Continuity (1)
Related Publication 20110016467A1 · Jan 20, 2011