Page 548 - Cloud computing: From paradigm to operation

2 Cloud Computing management

Table I.6 – Data policy language
Figure (optional)

CPPL: compact privacy policy language
Pre-conditions (optional) The CSP (NaaS), CSPs (PaaS) and CSP (SaaS) form an inter-cloud relationship to optimize
their own resources and leverage area of service availability.
Post-conditions The CSP (NaaS) establishes service chaining (here vHGW) between the CSC (PaaS) and
(optional) CSP (SaaS).
The CSP (NaaS) uses data policy language.
The CSP (NaaS) reallocates service (here access to Internet) between CSPs in the
federation if KPIs drop below threshold (e.g., energy efficiency, resource optimization).
Derived requirements Data policy language (see clause 7.1)

I.7 Use case of CSC data policy implementation in inter-cloud
This use case illustrates inter-cloud data policy processing and usage aspects between CSC and CSP or
between CSPs. The inter-cloud intermediary pattern used to illustrate the use case is an example only.

Table I.7 – CSC data policy implementation in inter-cloud

Title CSC data policy implementation in inter-cloud
Description The CSP (NaaS) offers access to Internet (service) over virtual home gateway (vHGW)
facilities using network functions virtualization (NFV) and software-defined networking
(SDN) technologies. The CSP (NaaS) is involved in an inter-cloud intermediary pattern
with two peer CSPs (PaaS), i.e., CSP1 (PaaS) and CSP2 (PaaS). The CSP (NaaS) respects
data policy related to vHGW data in the inter-cloud environment. The CSP (NaaS) uses
inter-cloud data policy management to process and use inter-cloud data. The CSP (NaaS)
lets the CSC provide data policy related to CSC workloads passing into the inter-cloud
environment. The IDPAP acts as access control for CSC data policies. The data policies
are stored at the IDPIP. The IDPDP collects information about available resources and
corresponding policies of peer CSPs to be able to decide which CSP can process and use
vHGW data. The IDPEP establishes the service (here vHGW) between the CSP (NaaS) and
one of CSP1 (PaaS) and CSP2 (PaaS) selected by the DPDP. The IDPEP is responsible for
monitoring the inter-cloud environment and fulfilment of CSC data policy. In the case of
violation, the IDPEP triggers the IDPDP to establish the service (here vHGW) between
the CSP (NaaS) and other CSPs, which fulfils the CSC data policy.
Roles CSC, CSP (NaaS), CSP1 (PaaS), CSP2 (PaaS)

540