CN102546735A - Cloud computing system, cloud computing method and cloud - Google Patents

Abstract

The invention discloses a cloud computing system. A terminal and/or a door function unit build/builds a safety mechanism with cloud and send/sends cloud service request to the cloud. After the cloud receives the cloud service request, other cloud is accessed by the cloud itself and/or through a cloud interworking function, cloud computing resource is arranged, and cloud service is provided for the terminal and/or the door function unit. The invention further discloses a cloud computing method and the cloud. By means of the technical scheme, integration, virtualization and automation of the cloud computing system can be achieved, the cloud can coordinate uniformly and arrange the cloud computing resource automatically, efficiency is improved, and defect that the existing cloud computing system can not arrange the cloud computing resource automatically is overcome.

Description

Cloud computing system and method and cloud

Technical Field

The invention relates to the internet communication technology, in particular to a cloud computing system, a cloud computing method and a cloud.

Background

Cloud computing is a pay-per-use model that provides convenient access to a customizable shared pool of IT resources, including networks, servers, storage, applications, services, over the internet, that can be deployed quickly and with little administrative effort or interaction with service providers.

The cloud computing has the main characteristics that:

self-service as required: consumers can deploy resources unilaterally, such as servers and network storage resources, as needed without manual interaction by service providers;

obtaining through the Internet: resources can be acquired through the Internet and can be accessed in a standard mode so as to be popularized and used through a thin client or a rich client, for example, the resources are popularized and used through a mobile phone, a notebook computer, a PDA and the like;

site-independent resource pools: the provider's resources are pooled for use by all customers in a multi-user leasing mode, while different physical and virtual resources can be dynamically allocated and reallocated according to customer needs, the customer generally having no control or knowledge of the exact location of the resources, including storage, processors, memory, network bandwidth, and virtual machines;

rapid expansion and contraction: resources can be deployed quickly and flexibly for quick expansion and quick release, resources that can be acquired appear to customers to be unlimited, and any number of resources can be purchased at any time;

pay per use: the charging of resources is either a metered one-time-payment, or an advertisement-based charging model to facilitate optimal utilization of resources, such as metering storage, bandwidth, and consumption of computing resources, monthly charges based on actual usage by the user, and clouds within an organization may calculate fees between departments, but not necessarily usage opportunity currencies.

Based on the above characteristics of cloud computing, cloud computing software fully utilizes the advantages of a cloud computing model by focusing on service-oriented services of stateless, low coupling, modularization, and semantic interoperability.

At present, the delivery modes of cloud computing mainly include:

software As a Service (SaaS, Software As a Service): the services provided to the customer are applications that the facilitator runs on the cloud computing infrastructure and can be accessed on various client devices through a thin client interface, such as a browser; the consumer does not need to manage or control the underlying cloud computing infrastructure, including networks, servers, operating systems, storage systems, or even the functionality of individual applications, with the possible exception of the limited number of customer-customizable configuration settings.

Platform As a Service (PaaS, Platform As a Service): provided to the consumer is the deployment of applications created by the customer using vendor-supplied development languages and tools (e.g., Java, python,. Net) onto the cloud computing infrastructure; the consumer does not need the underlying cloud infrastructure to manage or control, including networks, servers, operating systems, storage systems, but the consumer can control the deployed applications and possibly the hosted environment configuration of the applications.

Infrastructure As a Service (IaaS, Infrastructure As a Service): it is provided to consumers to lease processing power, storage, network and other basic computing resources, consumers can deploy and run arbitrary software, including operating systems and applications, the consumer does not manage or control the underlying cloud computing infrastructure, but can control the operating system, storage, deployed applications, and possibly also select network components, such as firewalls, load balancers.

The existing deployment modes of cloud computing include: private, community, public, and hybrid clouds; wherein,

private cloud: the cloud infrastructure is owned or leased by a single organization, the infrastructure being managed entirely by the organization;

community cloud: the infrastructure is shared by some organizations and serves a community with common concerns, such as mission, security requirements, policy and compliance considerations;

public cloud: the infrastructure is owned by an organization that sells cloud computing services to the general public or a wide industrial community;

mixing cloud: the infrastructure is made up of two or more clouds (private, community or public) each still kept separate but combined with standard or proprietary technology for data and application portability, e.g., to handle bursty loads.

Although early cloud computing demonstrated the great advantages of virtual technologies and success in market operations, early cloud computing still had some limitations, including:

the cloud service is provided without quality guarantee and a safety controllable mechanism, which are important for telecommunication operators; the implementation model of the cloud service is based on a specific private protocol and does not meet the requirement of interconnection and intercommunication of telecommunication operators; the type of cloud service is limited to several specific single cloud services, i.e. not all applications of the telecom operator can be effectively implemented in a common cloud.

At present, different manufacturers all provide their own clouds, and there is no unified cloud computing standard architecture in the industry, so that a cloud service provider needs to select a proper scheme for different manufacturers when building a cloud computing system, and if the cloud service provider selects equipment of multiple manufacturers, the problem of intercommunication and compatibility of the equipment exists. Especially for the cloud constructed by the telecom operator, in order to migrate the original telecom service system to the cloud, it is more necessary to provide a cloud computing architecture with unified standard.

Disclosure of Invention

In view of this, the present invention provides a cloud computing system, method and cloud, which can coordinate and automatically arrange cloud computing resources of the cloud in a unified manner, and provide a cloud computing architecture with a unified standard.

In order to achieve the purpose, the technical scheme of the invention is realized as follows:

the invention provides a cloud computing system, which comprises: a terminal and/or portal function unit, a cloud; wherein,

the terminal and/or portal function unit is used for establishing a security mechanism with the cloud, sending a cloud service request to the cloud, and implementing access to the cloud and/or management and monitoring of the cloud;

and the cloud is used for accessing other clouds, arranging cloud computing resources and providing cloud services for the terminal and/or the portal function unit after receiving the cloud service request and/or through the cloud intercommunication function.

In the above scheme, the cloud is specifically configured to select a most appropriate model, template, script, or plan according to the context information, schedule the cloud computing resources of the cloud and/or other clouds accessed through the cloud interworking function, and perform automated deployment and operation as needed; or, in the process of running the service combination of the cloud interworking function and/or other clouds accessed by the cloud interworking function, the copy with the optimal quality of service (QoS) is dynamically selected, and the local and global optimization of the service combination is realized.

In the above solution, the cloud includes: the cloud service management system comprises a cloud service arrangement function unit, a cloud virtualization resource function unit and a cloud intercommunication function unit; wherein,

the cloud service arranging functional unit is used for arranging the cloud computing resources provided by the cloud virtualization resource functional unit according to the cloud service request, and/or accessing other clouds through the cloud intercommunication functional unit to arrange the cloud computing resources;

the cloud virtualization resource function unit is used for providing management and monitoring functions of cloud computing resources and/or cloud computing resources;

and the cloud intercommunication function unit is used for providing an intercommunication interface and/or an intermediary agent service and realizing intercommunication with clouds of a plurality of cloud service providers.

In the foregoing solution, the cloud service orchestration functional unit includes: a control function module, a configuration function module, a flow transmission function module and a recording function module, wherein,

the control function module is used for controlling corresponding cloud computing resources of the cloud service request provided by the cloud virtualization resource function unit according to the cloud service request, and/or accessing other clouds through the cloud intercommunication function unit to control corresponding cloud computing resources of the cloud service request;

the configuration function module comprises a database and/or supply information and is used for arranging or customizing the cloud computing resources;

the flow transmission function module is used for supporting the safe access of the terminal and/or the portal function unit and/or realizing network monitoring;

the recording function module is used for storing the record generated by the activity of at least one of the following modules: the system comprises a control function module, a configuration function module and a flow transmission function module.

In the foregoing solution, the cloud computing resources provided by the cloud virtualization resource function unit include at least one of the following: virtual resources, physical resources, and underlying software resources.

In the foregoing solution, the cloud interworking function unit includes: the cloud service system comprises a cloud service publishing interface, a cloud service consuming interface, a cloud service processing module and a cloud service adapting module; wherein,

the cloud service publishing interface is used for subscribing cloud computing service and resource information provided by at least one cloud service provider;

the cloud service consumption interface is used for providing a consumption interface for accessing a cloud service provider;

the cloud service processing module is used for processing the cloud service request;

and the cloud service adaptation module is used for protocol adaptation of cloud computing resources provided by a cloud service provider.

In the foregoing solution, the cloud further includes: the cloud application function unit, the cloud management function unit and the cloud security function unit; wherein,

the cloud application function unit is used for providing at least one of the following on-demand services: IaaS, PaaS, SaaS, Service delivery platform as a Service (SDPaaS, SDP as a Service);

the cloud management function unit is used for managing the cloud;

and the cloud security function unit is used for providing a security mechanism of the cloud.

In the above scheme, the cloud interworking function unit is a third party service broker.

In the above scheme, the cloud management function unit and/or the cloud security function unit are integrated in the cloud service orchestration function unit or exist independently.

In the above scheme, the control function module is a cloud service broker; and/or the presence of a gas in the gas,

the flow transmission function module is a cloud service gateway.

In the above scheme, the cloud service orchestration functional unit is implemented by SDPaaS.

The invention provides a cloud computing method, which comprises the following steps:

the terminal and/or the portal and the cloud establish a security mechanism and send a cloud service request to the cloud;

after the cloud service request is received by the cloud, other clouds are accessed by the cloud and/or through the cloud intercommunication function, cloud computing resources are arranged, and cloud services are provided for the terminal and/or the portal.

In the above scheme, the accessing other clouds and arranging cloud computing resources at the cloud and/or through the cloud interworking function is: the cloud selects the most appropriate model, template, script or plan according to the context information, schedules the cloud computing resources of the cloud and/or other clouds accessed through the cloud intercommunication function, and carries out automatic deployment and operation according to the needs; or dynamically selecting the copy of the optimal QoS in the process of running the service combination of the self and/or other clouds accessed through the cloud intercommunication function, and realizing the local and global optimization of the service combination.

In the foregoing solution, the cloud computing resource includes at least one of: virtual resources, physical resources, and underlying software resources.

In the above scheme, the method further comprises: after the cloud receives the cloud service request, the cloud provides at least one of the following on-demand services according to the cloud service request: IaaS, PaaS, SaaS, SDPaaS.

The invention provides a cloud, comprising: the cloud service management system comprises a cloud service arrangement function unit, a cloud virtualization resource function unit and a cloud intercommunication function unit; wherein,

the cloud service arranging functional unit is used for arranging the cloud computing resources provided by the cloud virtualization resource functional unit according to the cloud service request, and/or accessing other clouds through the cloud intercommunication functional unit to arrange the cloud computing resources;

the cloud virtualization resource function unit is used for providing management and monitoring functions of cloud computing resources and/or cloud computing resources;

and the cloud intercommunication function unit is used for providing an intercommunication interface and/or an intermediary agent service and realizing intercommunication with clouds of a plurality of cloud service providers.

According to the cloud computing system, the cloud computing method and the cloud, after the cloud receives a cloud service request, other clouds are accessed by the cloud and/or through a cloud intercommunication function, cloud computing resources are arranged, and cloud services are provided for terminals and/or portals; therefore, integration, virtualization and automation of the cloud computing system can be realized, the cloud can uniformly coordinate and automatically arrange cloud computing resources, efficiency is improved, the defect that the existing cloud computing system cannot automatically arrange the cloud computing resources is overcome, the intercommunication function among different clouds can be efficiently realized through the cloud intercommunication function, the problem that the efficiency of intercommunication negotiation among the existing different cloud computing systems is low is solved, and a cloud computing system architecture with a uniform standard is provided for the industry.

Drawings

FIG. 1 is a schematic diagram of a cloud computing system implemented in accordance with the present invention;

FIG. 2 is a schematic structural diagram of a cloud computing system when the cloud service orchestration functional unit is implemented as an SDPaaS according to the present invention;

fig. 3 is a schematic structural diagram of a cloud computing system when a cloud virtualized resource function unit according to the present invention includes a service of a cloud application function unit, a cloud management function unit, and a cloud security function unit, which are integrated in a cloud service orchestration function unit;

fig. 4 is a schematic flow chart of a cloud computing method implemented by the present invention.

Detailed Description

The basic idea of the invention is: after the cloud service request is received by the cloud, other clouds are accessed by the cloud and/or through the cloud intercommunication function, cloud computing resources are arranged, and cloud services are provided for the terminal and/or the portal.

The invention is further described in detail below with reference to the figures and the specific embodiments.

The present invention implements a cloud computing system, as shown in fig. 1, the system including: a terminal and/orportal function unit 11, acloud 12; wherein,

the terminal and/orportal function unit 11 is configured to establish a security mechanism with thecloud 12, send a cloud service request to thecloud 12, and implement access to thecloud 12 and/or management and monitoring of cloud computing services;

the cloud service request may include one of: allocating cloud computing resources, consuming and using cloud services, managing thecloud 12, such as monitoring cloud computing resources, monitoring service level permissions (SLAs) and performance of services, and the like;

the sending of the cloud service request to thecloud 12 may be performed by one of the following methods: cloud primitives, extensible message processing field protocol (XMPP), hypertext transfer protocol (HTTP), Session Initiation Protocol (SIP), representational state transition (REST), Simple Object Access Protocol (SOAP), XML-based hypertext markup language version 5(XHTML5), Application Programming Interface (API), Command Line (CLI), Simple Network Management Protocol (SNMP), common information model management interface (CIM), dedicated commands;

the cloud service request can be sent independently or combined in a business process; wherein business processes, which can be described using abstract languages and processes such as Business Process Execution Language (BPEL), Business Process Model Notation (BPMN), can abstract lifecycle management, policies, and SLAs based on cloud APIs and apply to cloud services;

thecloud 12 is used for accessing other clouds by itself and/or through a cloud intercommunication function after receiving the cloud service request, arranging cloud computing resources and providing cloud services for the terminal and/or theportal function unit 11;

thecloud 12 accesses other clouds by itself and/or through a cloud interworking function, and arranges corresponding cloud computing resources of the cloud service request, specifically: thecloud 12 selects the most appropriate model, template, script, or plan according to the context information, schedules the cloud computing resources of itself and/or other clouds accessed through the cloud interworking function, and performs automatic deployment and operation as required, or dynamically selects the copy of the optimal quality of service (QoS) in the process of the service combination operation of itself and/or other clouds accessed through the cloud interworking function, so as to realize the local and global optimization of the service combination. During the on-demand deployment and operation of the service combination, conversion is required to be performed between various structures such as completely distributed operation, fragmented operation and the like according to the resource utilization condition and SLA constraint, so that the bottleneck of single-point performance is avoided, and the on-demand deployment and efficient operation of the service combination task are realized; the context information at least comprises one or more of the following: network status, user status, service status, policy, SLA, etc.;

thecloud 12 includes: a cloud service orchestration function unit 121, a cloud virtualized resource function unit 122, and a cloud interworking function unit 123; wherein,

the cloud service orchestration functional unit 121 is configured to orchestrate, according to the cloud service request, cloud computing resources provided by the cloud virtualization resource functional unit 122, and/or access other clouds through the cloud interworking functional unit 123 to orchestrate the cloud computing resources;

a cloud virtualization resource function unit 122, configured to provide an interface to the cloud service orchestration function unit 121, and provide a management and monitoring function of cloud computing resources and/or cloud computing resources, so as to implement uniform coordination and orchestration of the cloud computing resources;

the management and monitoring functions of the cloud computing resources comprise functions of resource scheduling, resource archives, resource intercommunication and the like;

further, the cloud computing resource management and monitoring function may also be implemented on the cloud service orchestration function unit 121, that is, the cloud service orchestration function unit 121, and is further used for cloud computing resource management and monitoring;

the cloud interworking function unit 123 is configured to provide a public, open, and standardized interworking interface and/or an intermediary agent service, and implement interworking with clouds of multiple cloud service providers;

the cloud interworking function 123 is generally a third party service broker; the third-party service broker can be located inside the cloud, can also be located outside the cloud, and is provided by other cloud service providers;

the terminal and/orportal function unit 11 comprises a cloud API function module 111 and a cloud securityaccess function module 112; wherein,

the cloud API function module 111 is configured to send a cloud service request to thecloud 12, and implement access to thecloud 12 and/or management and monitoring of cloud computing services, such as creating, deleting, modifying, and configuring cloud computing resources;

cloud services can be controlled through the cloud API function module 111, and different kinds of management programs can call the same API; the functions of the cloud API function module 111 may specifically include functions of service creation, service customization, service monitoring, SLA reporting and compliance;

the cloud securityaccess function module 112 is configured to establish a security mechanism with thecloud 12, and specifically may include functions such as VPN access, authentication, and authorization;

the cloud service orchestration function unit 121 specifically includes: a control function module, a configuration function module, a flow transmission function module and a recording function module, wherein,

the control function module is configured to control, according to the cloud service request, cloud computing resources corresponding to the cloud service request provided by the cloud virtualized resource function unit 122, including operations such as creating, modifying, customizing, unloading, and running; when there is no corresponding cloud computing resource of the cloud service request in the cloud virtualized resource function unit 122, accessing other clouds through the cloud interworking function unit 123, and controlling the corresponding cloud computing resource of the cloud service request;

the control function module controls the corresponding cloud computing resource of the cloud service request provided by the cloud virtualized resource function unit 122, specifically: the control function module selects the most appropriate model, template, script or plan according to the context information, and schedules the cloud virtualization resource function 122 for automatic deployment and operation as required; or, in the process of running the service combination provided by the cloud virtualized resource function unit 122, a copy of the optimal QoS is dynamically selected, so as to implement local and global optimization of the service combination. During the on-demand deployment and operation of the service combination, conversion is required to be performed between various structures such as completely distributed operation, fragmented operation and the like according to the resource utilization condition and SLA constraint, so that the bottleneck of single-point performance is avoided, and the on-demand deployment and efficient operation of the service combination task are realized; the context information at least comprises one or more of the following: network status, user status, service status, policy, SLA, etc.;

the control function module supports a notification and request response mechanism for enabling periodic interaction with capability and availability information between cloud virtualized resource function 122;

further, the control function module is further configured to maintain a network status directory and update a network status in the availability function, update a domain name record of the cloud name server using a dynamic domain name service request, and send charging information to the recording function block;

further, the control function block is also configured to perform specific operations according to a policy for configuring the function module.

The control function block can be specifically a cloud service intermediary which is positioned in the cloud and provides functions of capacity registration, arrangement control, service monitoring, service charging, domain name record management and the like;

the configuration function module comprises various databases and supply information and is used for coordination or customization of cloud computing resources;

the various databases and supply information may specifically be: predefining a service template, visually combining manual services, automatically combining services according to needs and oriented to large-scale and dynamic environments, realizing efficient and reliable combined application operation under the condition of large concurrency and the like, wherein the multi-mode rapid application modeling based on the automatic service combination can be realized by adopting methods such as WS-BEPL program generation and auxiliary tools of process modeling and the like;

the configuration function module specifically includes: the cloud user database is used for authenticating and authorizing users; the cloud name server is used for providing domain name service; the cloud policy server is used for storing various policies and plans; the cloud automatic configuration server is used for providing automatic configuration of cloud resources; the cloud software server is used for storing various operating system/virtual machine images and middleware and other application software;

the automated configuration may be: the method comprises the steps of automatic IP address configuration by using a Dynamic Host Configuration Protocol (DHCP), self-starting configuration of equipment by using a bootstrap protocol (BOOTP), firmware updating by using a pre-starting execution environment (PXE), self-configuration starting by using a Linux Kickstart program and the like.

The flow transmission function module is used for supporting the safe access of a terminal and/or a portal function unit, including Virtual Private Network (VPN) connection, tunnel access in various forms and control on users and flow, and/or is used for realizing network monitoring of end-to-end delay, jitter, bandwidth and the like, such as QoS (quality of service) measurement, so as to ensure that the requirements of end-to-end delay, jitter and bandwidth are met;

further, the traffic transmission function module is further configured to select a best or most appropriate network element to provide access to the terminal and/or theportal function unit 11 according to the network status in the availability function;

the flow transmission function module can be specifically a cloud service gateway and provides functions of network monitoring, network reservation, service charging and the like;

the recording function module is used for storing the record generated by the activity of at least one of the following modules: the control function module, the configuration function module, the flow transmission function module and other network entities, and the stored record logs can be used for client auditing, SLA auditing or legal monitoring and the like; wherein the stored logging comprises: the method comprises the following steps of obtaining a cloud charging function ticket log, a cloud SLA compliance function log used for SLA audit, a cloud legal monitoring function log and the like, wherein the cloud charging function ticket log generally comprises one or more of the following items: user information, resource information, usage time, usage pattern, etc.

The specific functions of the recording function module can comprise a cloud charging function, a cloud SLA compliance function, a cloud legal monitoring function and the like;

the cloud computing resources provided by the cloud virtualized resource function unit 122 include at least one of: virtual resources, physical resources, basic software resources; wherein,

the virtual resources include: virtual computing resources, such as virtual machines, operating systems, middleware; virtual storage resources, such as virtual storage local area networks (V-SANs), virtual network attached storage (V-NAS); virtual network resources such as VPNs, virtual firewalls (V-FWs), virtual switches (V-switches), virtual routers (V-routers), etc.;

the physical resources comprise computing resources, storage resources, network resources and the like;

the base software resources include at least one of: distributed databases, distributed file systems, distributed computing frameworks, distributed caches, distributed storage, and the like.

The cloud interworking function unit 123 is specifically configured to abstract incompatible capabilities and interfaces between different clouds, provide a public, open, and standardized interworking interface and/or an intermediate proxy service, and solve the problem of incompatibility between different cloud platforms/cloud computing services; the method specifically comprises the following steps: the cloud service system comprises a cloud service publishing interface, a cloud service consuming interface, a cloud service processing module and a cloud service adapting module; wherein,

the cloud service publishing interface is used for subscribing cloud computing services and resource information provided by at least one cloud service provider, and comprises: subscribing cloud service providers such as private cloud, community cloud, public cloud or hybrid cloud and publishing supported cloud computing service and resource information; cloud service providers such as the private cloud, the community cloud, the public cloud, or the hybrid cloud can issue notification of cloud computing services and resource information supported by the cloud interworking function unit 123;

a cloud service consumption interface for providing a consumption interface for accessing a cloud service provider to the terminal and/or theportal function unit 11; through the cloud service consumption interface, the terminal and/or theportal function unit 11 can access cloud computing services and resources of cloud service providers such as private cloud, community cloud, public cloud, or hybrid cloud;

the cloud service processing module is used for processing the cloud service request;

the basic working mode of the cloud service processing module for processing the cloud service request is a conversion/translation mode, and at least one of the following service function modes can be provided: agent services, security services, quality of service QoS/quality of service agreement SLA control services, mask services, substitution services, composition services, and the like;

the cloud service adaptation module is used for adapting the cloud computing resources provided by the cloud service provider through the protocol, and comprises the adaptation of an API (application program interface) function, parameters, a transmission protocol and the like;

thecloud 12 further comprises: a cloud application function unit 124, a cloudmanagement function unit 125, and a cloudsecurity function unit 126; wherein,

the cloud application function unit 124 is configured to provide an on-demand service, and includes at least one of: SaaS, PaaS, IaaS, SDPaaS, and the like; wherein, the IaaS may further include: the distributed file system comprises resources such as a distributed database, a distributed file system, a distributed computing framework, a distributed cache, distributed storage and the like;

the SDPaaS comprises service creation environment capacity, service execution environment capacity, service release support capacity, service test environment capacity and other service release platform (SDP) capacity;

the terminal and/orportal function unit 11 is further configured to access the cloud application function unit 124, and directly use the on-demand service provided by the cloud application function unit 124;

the cloud service orchestration functional unit 121 is further configured to uniformly schedule and orchestrate the on-demand services provided by the cloud application functional unit 124;

further, the cloud application function unit 124 is further configured to access the cloud virtualized resource function unit 122, and schedule the use of the cloud computing resource;

and/or the cloud application function unit 124 is further configured to implement management as a service through the cloudmanagement function unit 125;

and/or the cloud application function unit 124 is further configured to invoke a cloudsecurity function unit 126, so as to implement a security mechanism of on-demand service;

and/or the cloud application function unit 124 is further configured to access the clouds of other cloud service providers by accessing the cloud interworking function unit 123, so as to implement interworking service between the clouds.

The cloudmanagement function unit 125 is configured to manage theentire cloud 12, and includes: performance management, configuration management, fault tolerance management, account management, availability function management, and the like;

specifically, the cloudmanagement function unit 125 provides a method for managing thecloud 12 for the terminal and/or theportal function unit 11; providing the cloud service orchestration function 121 with implementation management capabilities for theentire cloud 12; provide management as a service for the cloud application function unit 124; performing cloud computing resource management for the cloud virtualized resource function unit 122;

the cloudsecurity function unit 126 is configured to provide a security mechanism of theentire cloud 12, and specifically may include functions such as authentication, authorization, accounting (AAA), identity management (IDM), access control, and policy;

specifically, the cloudsecurity function unit 126 provides various security mechanisms for the terminal and/or theportal function unit 11, including a secure channel, authentication, authorization, and the like, to implement overall cloud security access; a security mechanism for cloud service orchestration is provided for the cloud service orchestration function 121; providing a security mechanism for the services of the cloud application function unit 124, such as SaaS, PaaS, IaaS, SDPaaS, and the like; secure access to various resources is provided to cloud virtualized resource function 122.

Further, in the system, when a telecom operator deploys a cloud as a solution of a service publishing platform, as shown in fig. 2, the cloud service orchestration functional unit 121 may be directly implemented by an SDPaaS; alternatively, as shown in fig. 3, the on-demand service provided by the cloud application function unit 124 is included as a resource in the cloud virtualized resource function unit 122.

Further, in the present system, the cloudmanagement function unit 125 and/or the cloudsecurity function unit 126 may be integrated in the cloud service orchestration function unit 121, or may separately exist in the cloud, as shown in fig. 3, and the cloudmanagement function unit 125 and the cloudsecurity function unit 126 are integrated in the cloud service orchestration function unit 121.

By the system, the integration, the virtualization and the automation of the cloud computing system can be realized, and the system is specifically represented as follows:

integrating, wherein the cloud service arrangement functional unit becomes a data exchange platform after resource virtualization, provides logic service for physical resources, and provides dynamic service deployment for application requirements;

virtualization, wherein a cloud virtualization resource function unit provides virtual resources, so that the management and maintenance complexity can be reduced, the equipment utilization rate can be improved, and a foundation is laid for automatically realizing resource coordination and configuration;

automation: on the basis of integration and virtualization, underlying resources and functions can be automatically and dynamically called and managed by the cloud service arranging functional unit in a conditional mode, the cloud service arranging functional unit automatically completes scheduling of relevant physical resources through optimized calculation and resource allocation, the function providing tasks are completed most economically and effectively, limited resources can provide services to the maximum extent, and management errors and vulnerabilities of people are reduced to the minimum.

Based on the above system, the present invention further provides a cloud computing method, as shown in fig. 4, the method includes the following steps:

step 101: the terminal and/or the portal and the cloud establish a security mechanism, send a cloud service request to the cloud, and implement access to the cloud and/or management and monitoring of the cloud;

specifically, the terminal and/or the portal establishes a security mechanism with the cloud, and after passing through the security mechanism, sends a cloud service request to the cloud, and implements access to the cloud and/or management and monitoring of the cloud, such as creation, deletion, modification, configuration of cloud computing resources, and the like.

Step 102: after the cloud service request is received by the cloud, other clouds are accessed by the cloud and/or through a cloud intercommunication function, cloud computing resources are arranged, and cloud services are provided for the terminal and/or the portal;

in this step, accessing other clouds by itself and/or through a cloud interworking function, and arranging corresponding cloud computing resources of the cloud service request specifically include: the cloud selects the most appropriate model, template, script or plan according to the context information, and schedules the cloud computing resources of the cloud computing resources and/or other clouds accessed through the cloud intercommunication function to automatically deploy and operate according to the requirements; or, dynamically selecting the copy of the optimal QoS in the operation process of the service combination of the cloud interworking function and/or other clouds accessed by the cloud interworking function so as to realize the local and global optimization of the service combination. During the on-demand deployment and operation of the service combination, conversion is required to be performed between various structures such as completely distributed operation, fragmented operation and the like according to the resource utilization condition and SLA constraint, so that the bottleneck of single-point performance is avoided, and the on-demand deployment and efficient operation of the service combination task are realized.

The cloud interworking function is generally implemented by interworking with clouds of a plurality of cloud service providers through a public, open and standardized interworking interface and/or an intermediary agent service, and is generally provided by a third-party service intermediary, which may be located inside the cloud, or located outside the cloud, or provided by other cloud service providers.

The cloud computing resources include at least one of: virtual resources, physical resources, basic software resources; wherein,

the virtual resources include virtual computing resources, such as virtual machines, operating systems, middleware; virtual storage resources such as V-SAN, V-NAS; virtual network resources such as VPN, V-FW, V-Switch, V-Router, etc.;

the physical resources comprise computing resources, storage resources, network resources and the like;

the base software resources include at least one of: distributed databases, distributed file systems, distributed computing frameworks, distributed caches, distributed storage, and the like.

Further, after the cloud receives the cloud service request, the cloud provides an on-demand service according to the cloud service request, where the on-demand service at least includes one of: SaaS, PaaS, IaaS, SDPaaS, and the like.

Based on the above system, the present invention further provides a cloud, such ascloud 12 shown in fig. 1, wherecloud 12 includes: a cloud service orchestration function unit 121, a cloud virtualized resource function unit 122, and a cloud interworking function unit 123; wherein,

the cloud service orchestration functional unit 121 is configured to orchestrate, according to the cloud service request, cloud computing resources provided by the cloud virtualization resource functional unit 122, and/or access other clouds through the cloud interworking functional unit 123 to orchestrate the cloud computing resources;

a cloud virtualization resource function unit 122, configured to provide an interface to the cloud service orchestration function unit 121, and provide a management and monitoring function of cloud computing resources and/or cloud computing resources, so as to implement uniform coordination and orchestration of the cloud computing resources;

the management and monitoring functions of the cloud computing resources comprise functions of resource scheduling, resource archives, resource intercommunication and the like;

further, the cloud computing resource management and monitoring function may also be implemented on the cloud service orchestration function unit 121, that is, the cloud service orchestration function unit 121, and is further used for cloud computing resource management and monitoring;

the cloud interworking function unit 123 is configured to provide a public, open, and standardized interworking interface and/or an intermediary agent service, and implement interworking with clouds of multiple cloud service providers;

the cloud interworking function 123 is generally a third party service broker; the third-party service broker can be located inside the cloud, can also be located outside the cloud, and is provided by other cloud service providers;

the cloud service orchestration function unit 121 specifically includes: a control function module, a configuration function module, a flow transmission function module and a recording function module, wherein,

the control function module is configured to control, according to the cloud service request, cloud computing resources corresponding to the cloud service request provided by the cloud virtualized resource function unit 122, including operations such as creating, modifying, customizing, unloading, and running; when there is no corresponding cloud computing resource of the cloud service request in the cloud virtualized resource function unit 122, accessing other clouds through the cloud interworking function unit 123, and controlling the corresponding cloud computing resource of the cloud service request;

the control function module controls the corresponding cloud computing resource of the cloud service request provided by the cloud virtualized resource function unit 122, specifically: the control function module selects the most appropriate model, template, script or plan according to the context information, and schedules the cloud virtualization resource function 122 for automatic deployment and operation as required; or, in the process of running the service combination provided by the cloud virtualized resource function unit 122, a copy of the optimal QoS is dynamically selected, so as to implement local and global optimization of the service combination. During the on-demand deployment and operation of the service combination, conversion is required to be performed between various structures such as completely distributed operation, fragmented operation and the like according to the resource utilization condition and SLA constraint, so that the bottleneck of single-point performance is avoided, and the on-demand deployment and efficient operation of the service combination task are realized; the context information at least comprises one or more of the following: network status, user status, service status, policy, SLA, etc.;

the control function module supports a notification and request response mechanism for enabling periodic interaction with capability and availability information between cloud virtualized resource function 122;

further, the control function module is further configured to maintain a network status directory and update a network status in the availability function, update a domain name record of the cloud name server using a dynamic domain name service request, and send charging information to the recording function block;

further, the control function block is also configured to perform specific operations according to a policy for configuring the function module.

The control function block can be specifically a cloud service intermediary which is positioned in the cloud and provides functions of capacity registration, arrangement control, service monitoring, service charging, domain name record management and the like;

the configuration function module comprises various databases and supply information and is used for coordination or customization of cloud computing resources;

the various databases and supply information may specifically be: predefining a service template, visually combining manual services, automatically combining services according to needs and oriented to large-scale and dynamic environments, realizing efficient and reliable combined application operation under the condition of large concurrency and the like, wherein the multi-mode rapid application modeling based on the automatic service combination can be realized by adopting methods such as WS-BEPL program generation and auxiliary tools of process modeling and the like;

the configuration function module specifically includes: the cloud user database is used for authenticating and authorizing users; the cloud name server is used for providing domain name service; the cloud policy server is used for storing various policies and plans; the cloud automatic configuration server is used for providing automatic configuration of cloud resources; the cloud software server is used for storing various operating system/virtual machine images and middleware and other application software;

the automated configuration may be: automatic IP address configuration using DHCP, device self-boot configuration using BOOTP, firmware update using PXE, and self-boot using Linux kiskstart program, etc.

The flow transmission function module is used for supporting the safe access of a terminal and/or a portal function unit, including VPN connection, tunnel access in various forms and control on users and flow, and/or is used for realizing network monitoring of end-to-end delay, jitter, bandwidth and the like, such as QoS (quality of service) quality measurement, so as to ensure that the requirements of end-to-end delay, jitter and bandwidth are met;

further, the traffic transmission function module is further configured to select a best or most appropriate network element to provide access to the terminal and/or theportal function unit 11 according to the network status in the availability function;

the flow transmission function module can be specifically a cloud service gateway and provides functions of network monitoring, network reservation, service charging and the like;

the recording function module is used for storing the record generated by the activity of at least one of the following modules: the control function module, the configuration function module, the flow transmission function module and other network entities, and the stored record logs can be used for client auditing, SLA auditing or legal monitoring and the like; wherein the stored logging comprises: the method comprises the following steps of obtaining a cloud charging function ticket log, a cloud SLA compliance function log used for SLA audit, a cloud legal monitoring function log and the like, wherein the cloud charging function ticket log generally comprises one or more of the following items: user information, resource information, usage time, usage pattern, etc.

The specific functions of the recording function module can comprise a cloud charging function, a cloud SLA compliance function, a cloud legal monitoring function and the like;

the cloud computing resources provided by the cloud virtualized resource function unit 122 include at least one of: virtual resources, physical resources, basic software resources; wherein,

the virtual resources include: virtual computing resources, such as virtual machines, operating systems, middleware; virtual storage resources such as V-SAN, V-NAS; virtual network resources such as VPN, V-FW, V-Switch, V-Router, etc.;

the physical resources comprise computing resources, storage resources, network resources and the like;

the base software resources include at least one of: distributed databases, distributed file systems, distributed computing frameworks, distributed caches, distributed storage, and the like.

The cloud interworking function unit 123 is specifically configured to abstract incompatible capabilities and interfaces between different clouds, provide a public, open, and standardized interworking interface and/or an intermediate proxy service, and solve the problem of incompatibility between different cloud platforms/cloud computing services; the method specifically comprises the following steps: the cloud service system comprises a cloud service publishing interface, a cloud service consuming interface, a cloud service processing module and a cloud service adapting module; wherein,

the cloud service publishing interface is used for subscribing cloud computing services and resource information provided by at least one cloud service provider, and comprises: subscribing cloud service providers such as private cloud, community cloud, public cloud or hybrid cloud and publishing supported cloud computing service and resource information; cloud service providers such as the private cloud, the community cloud, the public cloud, or the hybrid cloud can issue notification of cloud computing services and resource information supported by the cloud interworking function unit 123;

a cloud service consumption interface for providing a consumption interface for accessing a cloud service provider to the terminal and/or theportal function unit 11;

the cloud service processing module is used for processing the cloud service request;

the basic working mode of the cloud service processing module for processing the cloud service request is a conversion/translation mode, and at least one of the following service function modes can be provided: agent services, security services, quality of service QoS/quality of service agreement SLA control services, mask services, substitution services, composition services, and the like;

the cloud service adaptation module is used for adapting the cloud computing resources provided by the cloud service provider through the protocol, and comprises the adaptation of an API (application program interface) function, parameters, a transmission protocol and the like;

thecloud 12 further comprises: a cloud application function unit 124, a cloudmanagement function unit 125, and a cloudsecurity function unit 126; wherein,

the cloud application function unit 124 is configured to provide an on-demand service, and includes at least one of: SaaS, PaaS, IaaS, SDPaaS, and the like; wherein, the IaaS may further include: the distributed file system comprises resources such as a distributed database, a distributed file system, a distributed computing framework, a distributed cache, distributed storage and the like;

the SDPaaS comprises service creation environment capacity, service execution environment capacity, service release support capacity, service test environment capacity and other SDP capacity;

the cloud service orchestration functional unit 121 is further configured to uniformly schedule and orchestrate the on-demand services provided by the cloud application functional unit 124;

further, the cloud application function unit 124 is further configured to access the cloud virtualized resource function unit 122, and schedule the use of the cloud computing resource;

and/or the cloud application function unit 124 is further configured to implement management as a service through the cloudmanagement function unit 125;

and/or the cloud application function unit 124 is further configured to invoke a cloudsecurity function unit 126, so as to implement a security mechanism of on-demand service;

and/or the cloud application function unit 124 is further configured to access the clouds of other cloud service providers by accessing the cloud interworking function unit 123, so as to implement interworking service between the clouds.

The cloudmanagement function unit 125 is configured to manage theentire cloud 12, and includes: performance management, configuration management, fault tolerance management, account management, availability function management, and the like;

specifically, the cloudmanagement function unit 125 provides a method for managing thecloud 12 for the terminal and/or theportal function unit 11; providing the cloud service orchestration function 121 with implementation management capabilities for theentire cloud 12; provide management as a service for the cloud application function unit 124; performing cloud computing resource management for the cloud virtualized resource function unit 122;

the cloudsecurity function unit 126 is configured to provide a security mechanism of theentire cloud 12, and specifically may include functions such as AAA, IDM, access control, and policy;

specifically, the cloudsecurity function unit 126 provides various security mechanisms for the terminal and/or theportal function unit 11, including a secure channel, authentication, authorization, and the like, to implement overall cloud security access; a security mechanism for cloud service orchestration is provided for the cloud service orchestration function 121; providing a security mechanism for the services of the cloud application function unit 124, such as SaaS, PaaS, IaaS, SDPaaS, and the like; secure access to various resources is provided to cloud virtualized resource function 122.

Further, when a telecom operator deploys a cloud as a solution of the service distribution platform, as shown in fig. 2, the cloud service orchestration functional unit 121 may be directly implemented by an SDPaaS; alternatively, as shown in fig. 3, the on-demand service provided by the cloud application function unit 124 is included as a resource in the cloud virtualized resource function unit 122.

Further, the cloudmanagement function unit 125 and/or the cloudsecurity function unit 126 may be integrated in the cloud service orchestration function unit 121, or may separately exist in the cloud, as shown in fig. 3, and the cloudmanagement function unit 125 and the cloudsecurity function unit 126 are integrated in the cloud service orchestration function unit 121.

The above description is only exemplary of the present invention and should not be taken as limiting the scope of the present invention, and any modifications, equivalents, improvements, etc. that are within the spirit and principle of the present invention should be included in the present invention.

Claims (24)

1. A cloud computing system, the system comprising: a terminal and/or portal function unit, a cloud; wherein,

the terminal and/or portal function unit is used for establishing a security mechanism with the cloud, sending a cloud service request to the cloud, and implementing access to the cloud and/or management and monitoring of the cloud;

and the cloud is used for accessing other clouds, arranging cloud computing resources and providing cloud services for the terminal and/or the portal function unit after receiving the cloud service request and/or through the cloud intercommunication function.

2. The system according to claim 1, wherein the cloud is specifically configured to select a most suitable model, or template, or script, or plan according to the context information, schedule cloud computing resources of itself and/or other clouds accessed through a cloud interworking function, and perform automated deployment and operation as needed; or, in the process of running the service combination of the cloud interworking function and/or other clouds accessed by the cloud interworking function, the copy with the optimal quality of service (QoS) is dynamically selected, and the local and global optimization of the service combination is realized.

3. The system of claim 1, wherein the cloud comprises: the cloud service management system comprises a cloud service arrangement function unit, a cloud virtualization resource function unit and a cloud intercommunication function unit; wherein,

the cloud service arranging functional unit is used for arranging the cloud computing resources provided by the cloud virtualization resource functional unit according to the cloud service request, and/or accessing other clouds through the cloud intercommunication functional unit to arrange the cloud computing resources;

the cloud virtualization resource function unit is used for providing management and monitoring functions of cloud computing resources and/or cloud computing resources;

and the cloud intercommunication function unit is used for providing an intercommunication interface and/or an intermediary agent service and realizing intercommunication with clouds of a plurality of cloud service providers.

4. The system of claim 3, wherein the cloud services orchestration function comprises: a control function module, a configuration function module, a flow transmission function module and a recording function module, wherein,

the control function module is used for controlling corresponding cloud computing resources of the cloud service request provided by the cloud virtualization resource function unit according to the cloud service request, and/or accessing other clouds through the cloud intercommunication function unit to control corresponding cloud computing resources of the cloud service request;

the configuration function module comprises a database and/or supply information and is used for arranging or customizing the cloud computing resources;

the flow transmission function module is used for supporting the safe access of the terminal and/or the portal function unit and/or realizing network monitoring;

the recording function module is used for storing the record generated by the activity of at least one of the following modules: the system comprises a control function module, a configuration function module and a flow transmission function module.

5. The system of claim 3, wherein the cloud computing resources provided by the cloud virtualization resource function unit comprise at least one of: virtual resources, physical resources, and underlying software resources.

6. The system of claim 3, wherein the cloud interworking function unit comprises: the cloud service system comprises a cloud service publishing interface, a cloud service consuming interface, a cloud service processing module and a cloud service adapting module; wherein,

the cloud service publishing interface is used for subscribing cloud computing service and resource information provided by at least one cloud service provider;

the cloud service consumption interface is used for providing a consumption interface for accessing a cloud service provider;

the cloud service processing module is used for processing the cloud service request;

and the cloud service adaptation module is used for protocol adaptation of cloud computing resources provided by a cloud service provider.

7. The system of claim 3, wherein the cloud further comprises: the cloud application function unit, the cloud management function unit and the cloud security function unit; wherein,

the cloud application function unit is used for providing at least one of the following on-demand services: infrastructure as a service (IaaS), platform as a service (PaaS), software as a service (SaaS), service delivery platform as a service (SDPaaS);

the cloud management function unit is used for managing the cloud;

and the cloud security function unit is used for providing a security mechanism of the cloud.

8. The system of claim 3, wherein the cloud interworking function is a third party service broker.

9. The system according to claim 7, wherein the cloud management function and/or the cloud security function are integrated in the cloud service orchestration function or exist independently.

10. The system of claim 4, wherein the control function module is a cloud service broker; and/or the presence of a gas in the gas,

the flow transmission function module is a cloud service gateway.

11. The system according to claim 3 or 7, wherein the cloud service orchestration function is implemented by SDPaaS.

12. A cloud computing method, the method comprising:

the terminal and/or the portal and the cloud establish a security mechanism and send a cloud service request to the cloud;

after the cloud service request is received by the cloud, other clouds are accessed by the cloud and/or through the cloud intercommunication function, cloud computing resources are arranged, and cloud services are provided for the terminal and/or the portal.

13. The method of claim 12, wherein accessing other clouds, on its own and/or through a cloud interworking function, orchestrates cloud computing resources by: the cloud selects the most appropriate model, template, script or plan according to the context information, schedules the cloud computing resources of the cloud and/or other clouds accessed through the cloud intercommunication function, and carries out automatic deployment and operation according to the needs; or dynamically selecting the copy of the optimal QoS in the process of running the service combination of the self and/or other clouds accessed through the cloud intercommunication function, and realizing the local and global optimization of the service combination.

14. The method of claim 12, wherein the cloud computing resources comprise at least one of: virtual resources, physical resources, and underlying software resources.

15. The method of claim 12, further comprising: after the cloud receives the cloud service request, the cloud provides at least one of the following on-demand services according to the cloud service request: IaaS, PaaS, SaaS, SDPaaS.

16. A cloud, characterized in that the cloud comprises: the cloud service management system comprises a cloud service arrangement function unit, a cloud virtualization resource function unit and a cloud intercommunication function unit; wherein,

the cloud service arranging functional unit is used for arranging the cloud computing resources provided by the cloud virtualization resource functional unit according to the cloud service request, and/or accessing other clouds through the cloud intercommunication functional unit to arrange the cloud computing resources;

the cloud virtualization resource function unit is used for providing management and monitoring functions of cloud computing resources and/or cloud computing resources;

and the cloud intercommunication function unit is used for providing an intercommunication interface and/or an intermediary agent service and realizing intercommunication with clouds of a plurality of cloud service providers.

17. The cloud of claim 16, wherein said cloud services orchestration function comprises: a control function module, a configuration function module, a flow transmission function module and a recording function module, wherein,

the control function module is used for controlling corresponding cloud computing resources of the cloud service request provided by the cloud virtualization resource function unit according to the cloud service request, and/or accessing other clouds through the cloud intercommunication function unit to control corresponding cloud computing resources of the cloud service request;

the configuration function module comprises a database and/or supply information and is used for arranging or customizing the cloud computing resources;

the flow transmission function module is used for supporting the safe access of the terminal and/or the portal function unit and/or realizing network monitoring;

the recording function module is used for storing the record generated by the activity of at least one of the following modules: the system comprises a control function module, a configuration function module and a flow transmission function module.

18. The cloud as claimed in claim 16, wherein the cloud computing resources provided by the cloud virtualization resource function unit comprise at least one of: virtual resources, physical resources, and underlying software resources.

19. The cloud as claimed in claim 16, wherein the cloud interworking function unit comprises: the cloud service system comprises a cloud service publishing interface, a cloud service consuming interface, a cloud service processing module and a cloud service adapting module; wherein,

the cloud service publishing interface is used for subscribing cloud computing service and resource information provided by at least one cloud service provider;

the cloud service consumption interface is used for providing a consumption interface for accessing a cloud service provider;

the cloud service processing module is used for processing the cloud service request;

and the cloud service adaptation module is used for protocol adaptation of cloud computing resources provided by a cloud service provider.

20. The cloud as recited in claim 16, wherein the cloud further comprises: the cloud application function unit, the cloud management function unit and the cloud security function unit; wherein,

the cloud application function unit is used for providing at least one of the following on-demand services: IaaS, PaaS, SaaS, SDPaaS;

the cloud management function unit is used for managing the cloud;

and the cloud security function unit is used for providing a security mechanism of the cloud.

21. The cloud as claimed in claim 16, wherein the cloud interworking function is a third party service broker.

22. The cloud as claimed in claim 20, wherein the cloud management function and/or cloud security function is integrated into the cloud service orchestration function or exists separately.

23. The cloud as claimed in claim 17, wherein said control function module is a cloud service broker; and/or the presence of a gas in the gas,

the flow transmission function module is a cloud service gateway.

24. The cloud as claimed in claim 16 or 20, wherein said cloud service orchestration function is implemented by SDPaaS.

Images