Abstract: A method and system for service image deployment in a cloud computing system based on distributed ledger technology are described. A first signed message including a request to authorize installation of a service image, a service image identifier, a service installer account identifier, and one or more hashes of the service image is received. Responsive to determining, based on the service installer account identifier and a distributed ledger, that the service installer is authorized to install a service image identified with the service image identifier in a cloud computing system: the one or more hashes of the service image are recorded in a list of valid service images of the distributed ledger; and a first message is transmitted to the service installer. The message includes a first service installation token and the service image identifier, that cause the service installer to install the service image in the cloud computing system.

Abstract: A first data center receives a request, from a tenant, to access a first service. Responsive to determining that the tenant is not associated with a delegation contract, the first data center records a delegation contract for the tenant. A second data center receives a request, from the tenant, to access a second service, where the second data center is physically separate from the first data center. Responsive to determining that the tenant is associated with the delegation contract recorded in the blockchain database, the second data center causes an update of the delegation contract in the blockchain database; causes the second service to provide access to the tenant; transmits, to the tenant, a confirmation that the second service can be accessed, and transmits an update to the first data center indicating that the delegation contract has been updated to include a second service offer.

Abstract: A method and system for service image deployment in a cloud computing system based on distributed ledger technology are described. A first signed message including a request to authorize installation of a service image, a service image identifier, a service installer account identifier, and one or more hashes of the service image is received. Responsive to determining, based on the service installer account identifier and a distributed ledger, that the service installer is authorized to install a service image identified with the service image identifier in a cloud computing system: the one or more hashes of the service image are recorded in a list of valid service images of the distributed ledger; and a first message is transmitted to the service installer. The message includes a first service installation token and the service image identifier, that cause the service installer to install the service image in the cloud computing system.

Abstract: A first data center receives a request, from a tenant, to access a first service. Responsive to determining that the tenant is not associated with a delegation contract, the first data center records a delegation contract for the tenant. A second data center receives a request, from the tenant, to access a second service, where the second data center is physically separate from the first data center. Responsive to determining that the tenant is associated with the delegation contract recorded in the blockchain database, the second data center causes an update of the delegation contract in the blockchain database; causes the second service to provide access to the tenant; transmits, to the tenant, a confirmation that the second service can be accessed, and transmits an update to the first data center indicating that the delegation contract has been updated to include a second service offer.