IP Library Granted Patent US 11,178,237
Granted Patent B2
US 11,178,237 · App. 16/514,286 · Granted Nov 16, 2021

Geolocation-based activation and de-activation of hardware and software functionalities in the cloud

Inventors: Ashish Kundu (Elmsford, NY); Dimitrios Pendarakis (Westport, CT)
Assignee: International Business Machines Corporation
H04L67/18G06F9/5077G06F16/215G06F16/9537H04L47/82H04W4/021H04W28/0226
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,178,237
App. No.
16/514,286
Granted
Nov 16, 2021
Kind
B2
Abstract

A method alters a computer resource while in a particular geolocation. One or more processors detect that a geolocation of a computer resource has changed from an initial geolocation to a new geolocation, where the computer resource is a virtual machine (VM). In response to detecting that the geolocation of the VM has changed from the initial geolocation to the new geolocation, the processor(s) reduce a functionality of the VM by reducing a quantity of processors and storage space available to the VM at the new geolocation as compared to the initial geolocation.

Claims (45)

1. A method comprising:

detecting, by one or more processors, that a geolocation of a computer resource has changed from an initial geolocation to a new geolocation, wherein the computer resource is a virtual machine (VM), and wherein the geolocation of the VM is detected by a physical geolocation sensor in a host computer that supports the VM;

in response to detecting that the geolocation of the VM has changed from the initial geolocation to the new geolocation, changing a functionality of the VM by reducing a quantity of processors and storage space available to the VM at the new geolocation as compared to the initial geolocation;

identifying, by one or more processors, the physical geolocation sensor as a fake geolocation sensor that is not registered with a managing computer; and

in response to identifying the geolocation sensor as a fake geolocation sensor that is not registered with the managing computer, blocking, by one or more processors, access to the VM by a requesting entity.

2. The method of claim 1 , wherein the initial geolocation and the new geolocation are within a cloud computing environment.

3. The method of claim 1 , wherein an authorization list specifies which processors are available to instantiate the VM at the new geolocation.

4. The method of claim 1 , wherein an unauthorization list specifies which processors are not available to instantiate the VM at the new geolocation.

5. The method of claim 1 , further comprising:

receiving, by one or more processors, geolocation readings from a geolocation sensor on a physical computer upon which the VM is instantiated; and

determining, by one or more processors, that the VM is operating in the new geolocation based on the geolocation readings from the geolocation sensor on the physical computer upon which the VM is instantiated.

6. The method of claim 1 , wherein the functionality of the VM is changed in order to comply with an export control policy that controls what types of virtual machines are permitted to be exported to the new geolocation.

7. The method of claim 1 , further comprising:

receiving, by one or more processors, an internet protocol (IP) address for a physical computer upon which the VM is currently instantiated; and

matching, by the managing computer, the IP address for the physical computer upon which the VM is currently instantiated to the new geolocation in order to determine that the geolocation of the VM has changed from the initial geolocation to the new geolocation.

8. The method of claim 1 , further comprising:

reserving a first Internet Protocol (IP) address of the initial geolocation to a first zone within a cloud of resources;

reserving a second IP address of the new geolocation to a second zone within the cloud of resources;

determining that an address of the VM has moved from the first IP address to the second IP address; and

determining that the VM has moved from the initial geolocation to the new location based on said determining that address of the VM has moved from the first IP address to the second IP address.

9. A computer system comprising one or more processors, one or more computer readable memories, and one or more computer readable storage mediums, and program instructions stored on at least one of the one or more computer readable storage mediums for execution by at least one of the one or more processors via at least one of the one or more computer readable memories, the stored program instructions comprising:

program instructions to detect that a geolocation of a computer resource has changed from an initial geolocation to a new geolocation, wherein the computer resource is a virtual machine (VM), and wherein the geolocation of the VM is detected by a physical geolocation sensor in a host computer that supports the VM; and

program instructions to, in response to detecting that the geolocation of the VM has changed from the initial geolocation to the new geolocation, change a functionality of the VM by reducing a quantity of processors and storage space available to the VM at the new geolocation as compared to the initial geolocation;

program instructions to identify the physical geolocation sensor as a fake geolocation sensor that is not registered with a managing computer; and

program instructions to, in response to identifying the geolocation sensor as a fake geolocation sensor that is not registered with the managing computer, block access to the VM by a requesting entity.

10. The computer system of claim 9 , wherein the initial geolocation and the new geolocation are within a cloud computing environment.

11. The computer system of claim 9 , wherein an authorization list specifies which processors are available to instantiate the VM at the new geolocation.

12. The computer system of claim 9 , further comprising:

program instructions to receive geolocation readings from a geolocation sensor on a physical computer upon which the VM is instantiated; and

program instructions to determine that the VM is operating in the new geolocation based on the geolocation readings from the geolocation sensor on the physical computer upon which the VM is instantiated.

13. A computer program product comprising one or more computer readable storage mediums, and program instructions stored on at least one of the one or more computer readable storage mediums, the stored program instructions comprising:

program instructions to detect that a geolocation of a computer resource has changed from an initial geolocation to a new geolocation, wherein the computer resource is a virtual machine (VM), and wherein the geolocation of the VM is detected by a physical geolocation sensor in a host computer that supports the VM; and

program instructions to, in response to detecting that the geolocation of the VM has changed from the initial geolocation to the new geolocation, change a functionality of the VM by reducing a quantity of processors and storage space available to the VM at the new geolocation as compared to the initial geolocation;

program instructions to identify the physical geolocation sensor as a fake geolocation sensor that is not registered with a managing computer; and

program instructions to, in response to identifying the geolocation sensor as a fake geolocation sensor that is not registered with the managing computer, block access to the VM by a requesting entity.

14. The computer program product of claim 13 , wherein the initial geolocation and the new geolocation are within a cloud computing environment.

15. The computer program product of claim 13 , wherein an authorization list specifies which processors are available to instantiate the VM at the new geolocation.

16. The computer program product of claim 13 , wherein an unauthorization list specifies which processors are not available to instantiate the VM at the new geolocation.

17. The computer program product of claim 13 , further comprising:

program instructions to receive geolocation readings from a geolocation sensor on a physical computer upon which the VM is instantiated; and

program instructions to determine that the VM is operating in the new geolocation based on the geolocation readings from the geolocation sensor on the physical computer upon which the VM is instantiated.

18. The computer program product of claim 13 , wherein the functionality of the VM is changed in order to comply with an export control policy that controls what types of virtual machines are permitted to be exported to the new geolocation.

19. The computer program product of claim 13 , further comprising:

program instructions to receive an internet protocol (IP) address for a physical computer upon which the VM is currently instantiated; and

program instructions to match the IP address for the physical computer upon which the VM is currently instantiated to the new geolocation in order to determine that the geolocation of the VM has changed from the initial geolocation to the new geolocation.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 17, 2019
From: KUNDU, ASHISH; PENDARAKIS, DIMITRIOS
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 049779/0114 →
Continuity (2)
Continuation 15396895 · Jan 3, 2017
Related Publication 20190342404A1 · Nov 7, 2019