Integrated procedure for partitioning network data services among multiple subscribers

Abstract

A method and apparatus for partitioning network data services among multiple subscribers uses information stored in several tables to define a plurality of independent networks where each independent network comprises a set of access ports and a unique set of destination addresses and is logically separate from all other independent networks so that no information can pass from one independent network to another independent network. When a subscriber makes a request to use an independent network, a subscriber key that is based on the subscriber identity and the network access port is used to determine whether the subscriber has permission to use the independent network. If the subscriber has permission to use the independent network, information retrieved from the tables is used to determine whether the source subscriber or a destination subscriber has control over the resource. If a destination subscriber has control over the resource, using information in the request to identify a destination subscriber and a response port; and if the source subscriber has control over the resource, using the identity to determine whether the source subscriber can access the resource.

Description

FIELD OF THE INVENTION [0001] This invention relates to the provision of data services, including data storage services, from a centralized data center over a network to a plurality of data service subscribers, and the mechanisms for insuring that the provided services meet predefined security and quality of service goals. BACKGROUND OF THE INVENTION [0002] Data service centers provide subscribers access to a variety of data services using a variety of protocols. In many cases, these services involve access to a centralized database that may be comprised of multiple storage resources. The database to which the subscribers seek access generally stores both static and dynamic content including text and graphic files, video and animation files, digital music, digital libraries, stock market and individual portfolio reports, financial statements and many other types of information. The protocols used to access the stored information include Hypertext Transfer Protocol (HTTP), File Trans...

AI Technical Summary

Benefits of technology

[0010] Other embodiments of the present invention also provide accounting features that enable each subscriber to the data service to monitor its system usage, both overall and broken down into its individual sessions.

Problems solved by technology

Prior-art data services systems have only very limited support for a plurality of subscribers.

They do not provide for separate quality of service and accounting metrics.

They provide only weak separation of access.

Thus, in practice, data center administrators would have to construct a physically separate data service system for each subscriber, which would lead to significant increased capital expense, maintenance and administrative cost.

Images