System and method for serving and managing independent access devices
View Patent ↗A third party service provider can provide data, management, and configuration services to a plurality of unrelated entities. The services are separated from the management and configuration aspect, and a system of trust is arranged to avoid the unrelated parties affecting one another.
1. A method of providing services from a service provider to a plurality of independent entities, the method comprising:
facilitating, on a first set of one or more servers of said service provider, a first set of services that require said first set of one or more servers to trust said independent entities, wherein said trust is established by a first one-way trust that extends from said first set of one or more servers to said independent entities;
facilitating, on a second set of one or more servers of said service provider, a second set of services that require said independent entities to trust said second set of one or more servers, wherein said trust is established by a second one-way trust that extends from said independent entities to said second set of one or more servers; and
providing said first and second set of services to said independent entities based on the first and second one-way trusts, wherein said first and second one-way trusts prevent transitive trust between each entity in said plurality of independent entities.
2. The method of claim 1 wherein a third one-way trust is established so that said first set of servers trusts said second set of servers.
3. The method of claim 2 wherein said first set of servers provides data services and wherein said second set of services provides management and configuration services.
4. The method of claim 3 wherein each of said independent entities is organized as a single forest.
5. The method of claim 3 wherein each of said entities is organized as a single domain.
6. The method of claim 3 wherein at least one of said independent entities is embodied as a forest of computers that spans multiple customer sites.
7. The method of claim 1 wherein said first set of services comprises at least one of the following: virus protection services, remote access, backup, software sharing, and telephony services, and wherein said second set of services comprises at least one of the following: security, password management, software update, software distribution, access control.
8. A system comprising:
a first set of one or more servers having a first one-way trust connection to a second set of one or more servers; and
a third set of one or more servers interacting with the second set of servers through a second one-way trust connection from the second set of servers to the third set of servers, wherein said first and second one-way trusts prevent transitive trust between each server in said second set of one or more servers.
9. The system of claim 8 wherein the third set of servers form part of a service provider providing services to the second set of servers.
10. The system of claim 9 wherein the service provider is operable to provide software distribution to the second set of servers.
11. The system of claim 9 wherein the second set of servers may store an access control list to determine what entities may access the second set of servers.
12. The system of claim 11 wherein the access control list enables the third set of servers to access the second set of servers.
13. The system of claim 8 wherein the first set of servers is connected to one or more of: a public switched telephone network and a data network.
14. The system of claim 8 wherein the first set of servers has a third one-way trust connection to the third set of servers.