Virtualized host ID key sharing
In virtualized environments a method of determining authorization to a resource cannot use a hardware specific identifier, such as a MAC address. As a result upgrading a virtual host may cause licenses associated with that host to be invalid, even though the upgraded virtual host should be authorized. Authentication methods and systems are disclosed such that a key may be shared with a second host along with a license file and, provided at least the second host has a key associated with its system identifier and a key associated with a license file, access to a licensed resource may be authorized.
1. A method of managing access to a resource in a computing system, comprising:
receiving, by a host, a first host key and a corresponding record from another host, wherein the corresponding record is a license key that enables the another host to access the resource;
storing the corresponding record in a license repository located in the host;
receiving a request to access the resource on the host, wherein the host is configured to provide a virtualized computing environment that identifies the host with a system identifier;
accessing the license repository;
determining whether the first host key matches the corresponding record in the license repository;
determining whether a second host key of the host matches the system identifier of the host; and
granting access to the resource by the host upon determining: (a) the first host key matches the corresponding record in the license repository, and (b) the second host key matches the system identifier of the host.
2. The method of claim 1 , further comprising:
granting access to the resource by the host upon determining: (c) the host does not have an associated entry in a blacklisted license repository.
3. The method of claim 1 , further comprising placing an entry associated with the host in a blacklisted license repository upon determining the second host key is not in accord with the system identifier of the host.
4. The method of claim 1 , wherein at least one of the first host key and the second host key comprises a universally unique identifier and an IP address.
5. The method of claim 4 , wherein at least one of the first host key and the second host key further comprises a timestamp.
6. The method of claim 1 , wherein at least one of the first host key and the second host key is encrypted.
7. The method of claim 1 , further comprising generating the second host key from the system identifier of the host.
8. The method of claim 1 , further comprising, upon determining the second host key is not in accord with the system identifier of the host: (a) not authorizing access to the resource; (b) copying the first host key, the second host key, and any additional host keys to a blacklist; (c) deleting all keys, and (d) updating the second host key to be associated with the known system identifier of the host.
9. A system of managing access to a resource in a computing system, comprising control circuitry configured to:
receive, by a host, a first host key and a corresponding record from another host, wherein the corresponding record is a license key that enables the another host to access the resource;
store the corresponding record in a license repository located in the host;
receive a request to access the resource on the host, wherein the host is configured to provide a virtualized computing environment that identifies the host with a system identifier;
access the license repository;
determine whether the first host key matches the corresponding record in the license repository;
determine whether a second host key of the host matches the system identifier of the host; and
grant access to the resource by the host upon determining: (a) the first host key matches the corresponding record in the license repository and (b) the second host key matches the system identifier of the host.
10. The system of claim 9 , wherein the control circuitry is further configured to:
grant access to the resource by the host upon determining: (c) the host does not have an associated entry in a blacklisted license repository.
11. The system of claim 9 , wherein the control circuitry is further configured to place an entry associated with the host in a blacklisted license repository upon determining the second host key is not in accord with the system identifier of the host.
12. The system of claim 9 , wherein at least one of the first host key and the second host key comprises a universally unique identifier and an IP address.
13. The system of claim 12 , wherein at least one of the first host key and the second host key further comprises a timestamp.
14. The system of claim 9 , wherein at least one of the first host key and the second host key is encrypted.
15. The system of claim 9 , wherein the control circuitry is further configured to generate the second host key from the system identifier of the host.
16. The system of claim 9 , wherein the control circuitry is further configured to, upon determining the second host key is not in accord with the system identifier of the host: (a) not authorize access to the resource; (b) copy the first host key, the second host key, and any additional host keys to a blacklist; (c) delete all keys, and (d) update the second host key to be associated with the known system identifier of the host.
17. A non-transitory computer-readable medium with instructions encoded thereon for managing access to a resource in a computing system, the instructions comprising:
an instruction for receiving, by a host, a first host key and a corresponding record from another host, wherein the corresponding record is a license key that enables the another host to access the resource;
an instruction for storing the corresponding record in a license repository located in the host;
an instruction for receiving a request to access the resource on the host, wherein the host is configured to provide a virtualized computing environment that identifies the host with a system identifier;
an instruction for accessing the license repository;
an instruction for determining whether the first host key matches the corresponding record in the license repository;
an instruction for determining whether a second host key of the host matches the system identifier of the host; and
an instruction for granting access to the resource by the host upon determining: (a) the first host key matches the corresponding record in the license repository, and (b) the second host key matches the system identifier of the host.
18. The non-transitory computer-readable medium of claim 17 , wherein the instructions further comprise an instruction for granting access to the resource by the host upon determining: (c) the host does not have an associated entry in a blacklisted license repository.
19. The non-transitory computer-readable medium of claim 17 , wherein the instructions further comprise an instruction for placing an entry associated with the host in a blacklisted license repository upon determining the second host key is not in accord with the system identifier of the host.
20. The non-transitory computer-readable medium of claim 17 , wherein at least one of the first host key and the second host key comprises a universally unique identifier and an IP address.