Secure metering and accounting for cloud services
View Patent ↗A method, apparatus, and computer program product for managing a service is disclosed. A computer system collects information about the use of a set of resources by the service. Responsive to receiving a request to verify information about the use of the set of resources by the service, the computer system generates a description of the use of the set of resources by the service using the information collected. The computer system then creates a response to the request using the generated description of the use of the set of resources by the service as proof of the validity of the information.
1. A computer for managing a service, the computer comprising:
a bus;
a processor unit connected to the bus; and
a computer readable storage device connected to the bus, wherein the computer readable storage device stores program instructions that are executable by the processor unit to:
collect information about use of a set of resources by the service, wherein the computer stores the collected information about the set of resources used by the service in a usage graph, and wherein the computer digitally signs the usage graph storing the collected information about the set of resources used by the service;
receive a request to verify information regarding a selected portion of a period of time during the use of the set of resources by the service;
generate a description of the use of the set of resources by the service during the selected portion of the period of time using the collected information in response to receiving the request to verify the information regarding the selected portion of the period of time during the use of the set of resources by the service, wherein the computer generates and verifies the description of the use of the set of resources by the service using the collected information in the digitally signed usage graph; and
create a response to the request using the generated description of the use of the set of resources by the service during the selected portion of the period of time as proof of validity of the information.
2. The computer of claim 1 , wherein the collected information about the use of the set of resources by the service includes a set of digitally signed time stamps identifying each particular use of each resource in the set of resources by the service, and wherein the computer digitally signs each time stamp in the set of time stamps identifying each particular use of each resource in the set of resource by the service, and wherein collecting the information about the use of the set of resources by the service further comprises the processor unit executing the program instructions to:
digitally sign the information about each particular use.
3. A computer program product for managing a service, the computer program product comprising a computer readable storage device having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to:
collect information about use of a set of resources by the service, wherein the computer stores the collected information about the set of resources used by the service in a usage graph, and wherein the computer digitally signs the usage graph storing the collected information about the set of resources used by the service;
receive a request to verify information regarding a selected portion of a period of time during the use of the set of resources by the service;
generate a description of the use of the set of resources by the service during the selected portion of the period of time using the collected information in response to receiving the request to verify the information regarding the selected portion of the period of time during the use of the set of resources by the service, wherein the computer generates and verifies the description of the use of the set of resources by the service using the collected information in the digitally signed usage graph; and
create a response to the request using the generated description of the use of the set of resources by the service during the selected portion of the period of time as proof of validity of the information.
4. The computer program product of claim 3 , wherein the collected information about the use of the set of resources by the service includes a set of digitally signed time stamps identifying each particular use of each resource in the set of resources by the service, and wherein collecting the information about the use of the set of resources by the service further comprises the computer executing the program instructions to:
digitally sign the information about each particular use.
5. A computer for managing metering of a service, the computer comprising:
a bus;
a processor unit connected to the bus; and
a computer readable storage device connected to the bus, wherein the computer readable storage device stores program instructions that are executable by the processor unit to:
identify a private key corresponding to the service;
collect information about use of a set of resources by the service, wherein the computer stores the collected information about the set of resources used by the service in a usage graph, and wherein the computer digitally signs the usage graph storing the collected information about the set of resources used by the service, and wherein the computer generates and verifies a description of the use of the set of resources by the service using the collected information in the digitally signed usage graph;
sign the collected information using the identified private key, to form signed information;
receive a request to verify information regarding a selected portion of a period of time during the use of the set of resources by the service; and
create a response to the request using the signed information as proof of validity of the information in response to receiving the request to verify the information regarding the selected portion of the period of time during the use of the set of resources by the service.
6. The computer of claim 5 , wherein the collected information about the set of resources used by the service comprises metering data that is generated by the service and a set of time stamps identifying each particular use, by the service, of each resource in the set of resources.
7. The computer of claim 5 , wherein the service is one of a software component and a hardware component configured to execute in a cluster of two or more computer systems in a cloud computing environment, and wherein collecting the information about the use of the set of resources by the service further comprises the computer executing the program instructions to collect the information about the use of the set of resources by the service in each computer system in the cluster of two or more computer systems in the cloud computing environment, and wherein creating the response to the request using the signed information as proof of the validity of the information includes grouping the signed information about the use of the set of resources by the service.
8. A computer program product for managing metering of a service, the computer program product comprising a computer readable storage device having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to:
identify a private key corresponding to the service;
collect information about use of a set of resources by the service, wherein the computer stores the collected information about the set of resources used by the service in a usage graph, and wherein the computer digitally signs the usage graph storing the collected information about the set of resources used by the service, and wherein the computer generates and verifies a description of the use of the set of resources by the service using the collected information in the digitally signed usage graph;
sign the collected information using the identified private key, to form signed information;
receive a request to verify information regarding a selected portion of a period of time during the use of the set of resources by the service; and
create a response to the request using the signed information as proof of validity of the information in response to receiving the request to verify the information regarding the selected portion of the period of time during the use of the set of resources by the service.
9. The computer program product of claim 8 , wherein the collected information about the set of resources used by the service comprises metering data that is generated by the service and a set of time stamps identifying each particular use, by the service, of each resource in the set of resources.
10. The computer program product of claim 8 , wherein the service is one of a software component and a hardware component configured to execute in a cluster of two or more computer systems in a cloud computing environment, and wherein collecting the information about the use of the set of resources by the service further comprises the computer executing the program instructions to collect the information about the use of the set of resources by the service in each computer system in the cluster of two or more computer systems in the cloud computing environment, and wherein creating the response to the request using the signed information as proof of the validity of the information includes grouping the signed information about the use of the set of resources by the service.