Abstract: A device provisioning service provisions a network-connected device to access one or more service systems using a supplemental cryptographic identity of the network-connected device. An initial enrollment record (associated with an initial cryptographic identity) and a supplemental enrollment record are stored in a device provisioning service. An identity issuance request is received from the network-connected device at the device provisioning service. The identity issuance request includes the initial cryptographic identity. The supplemental cryptographic identity is requested from a supplemental cryptographic identity issuer identified in the initial enrollment record based on the identity issuance request. The requested supplemental cryptographic identity is received at the device provisioning service from the supplemental cryptographic identity issuer. The network-connected device is provisioned to access the one or more service systems according to the supplemental enrollment record.

Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: Described herein is a device (e.g., IoT device) having bootstrap code that communicates with a secure global registry (e.g., private distributed shared blockchain database). The bootstrap code of the device uses a globally unique device identifier of the device to the secure global registry. The bootstrap code receives information from the secure global registry which the bootstrap code uses to obtain information to connect to a cloud-based endpoint. The bootstrap code can download an appropriate software development kit (SDK) associated with the particular cloud based, at least in part, upon the received information. The device can be registered in the secure global registry by creating a globally unique identifier for the device. An initial entry can be created in the secure global registry comprising the globally unique identifier, with the secure global registry stores current cloud-based endpoint information, if any, for the device.

Abstract: A device provisioning service provisions a network-connected device to access one or more service systems using a supplemental cryptographic identity of the network-connected device. An initial enrollment record (associated with an initial cryptographic identity) and a supplemental enrollment record are stored in a device provisioning service. An identity issuance request is received from the network-connected device at the device provisioning service. The identity issuance request includes the initial cryptographic identity. The supplemental cryptographic identity is requested from a supplemental cryptographic identity issuer identified in the initial enrollment record based on the identity issuance request. The requested supplemental cryptographic identity is received at the device provisioning service from the supplemental cryptographic identity issuer. The network-connected device is provisioned to access the one or more service systems according to the supplemental enrollment record.

Abstract: A device provisioning service provisions a network-connected device to access one or more service systems using a supplemental cryptographic identity of the network-connected device. An initial enrollment record (associated with an initial cryptographic identity) and a supplemental enrollment record are stored in a device provisioning service. An identity issuance request is received from the network-connected device at the device provisioning service. The identity issuance request includes the initial cryptographic identity. The supplemental cryptographic identity is requested from a supplemental cryptographic identity issuer identified in the initial enrollment record based on the identity issuance request. The requested supplemental cryptographic identity is received at the device provisioning service from the supplemental cryptographic identity issuer. The network-connected device is provisioned to access the one or more service systems according to the supplemental enrollment record.

Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: Described herein is a device (e.g., IoT device) having bootstrap code that communicates with a secure global registry (e.g., private distributed shared blockchain database). The bootstrap code of the device uses a globally unique device identifier of the device to the secure global registry. The bootstrap code receives information from the secure global registry which the bootstrap code uses to obtain information to connect to a cloud-based endpoint. The bootstrap code can download an appropriate software development kit (SDK) associated with the particular cloud based, at least in part, upon the received information. The device can be registered in the secure global registry by creating a globally unique identifier for the device. An initial entry can be created in the secure global registry comprising the globally unique identifier, with the secure global registry stores current cloud-based endpoint information, if any, for the device.

Abstract: A computing system comprises, in one example, a service deployment system configured to deploy one or more service instances into a service instance pool, wherein each service instance comprises a computing resource configured in accordance with a service topology and allocable in response to a service request, and a pool management system configured to monitor consumption information related to consumption of the service instance pool and to determine whether to deploy one or more additional service instances to the service instance pool based on the consumption information relative to a threshold metric, wherein the pool management system comprises a deployment controller configured to control the service deployment system to deploy the one or more additional service instances to the service instance pool.

Abstract: A computing system comprises, in one example, a service deployment system configured to generate a service instance pool comprising a plurality of service instances, each service instance being generated from a computing resource in accordance with a pre-defined service topology and being allocable in response to a service request, and a service controller system configured to receive a service request and to allocate one or more of the service instances in the service instance pool to an end user.