Application Isolation via Interception Layer Live Migration
Solution Overview
Problem
Existing technologies fail to provide effective application isolation and live migration for multiple applications running on a host operating system without requiring virtual machines or additional infrastructure, leading to potential disruptions and downtime in cloud and SaaS environments.
Innovation Solution
A method and system for achieving application isolation and live migration by using an interception layer between applications and the operating system, with an interception database managing resource allocation and migration, allowing applications to run unmodified on unmodified operating systems without virtual environments or virtual machine monitors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virtual machines or additional infrastructure are used to provide application isolation, then application isolation and live migration capabilities are improved, but device complexity and infrastructure requirements increase
Solution Approach 1:
The patent introduces an interception layer as an intermediary component between applications and the operating system. This layer intercepts system calls and manages application isolation without requiring virtual machines or additional infrastructure. The interception layer acts as a mediator that provides the necessary isolation capabilities while maintaining compatibility with the existing operating system architecture.
Solution Approach 2:
The patent extracts the application isolation functionality from the traditional virtual machine infrastructure and implements it directly at the system call interception level. By taking out the isolation mechanism from the VM layer and placing it at the OS interface layer, the patent eliminates the need for complex virtual machine monitors and additional infrastructure while maintaining effective application isolation.
2Ease of operation
If applications share system resources, libraries and hardware, then ease of operation and resource utilization are improved, but application isolation and stability deteriorate
Solution Approach 1:
The patent segments the resource access paths for different applications by intercepting system calls and redirecting them through the interception layer. Each application's resource access is segmented and managed independently at the interception layer, allowing applications to share physical resources while maintaining logical isolation. This segmentation prevents one application from affecting others while preserving resource sharing capabilities.
Data Source
AI summary
A system, method, computer program, and/or computer readable medium for providing application isolation and live migration to one or more applications and their associated resources. The computer readable medium includes computer-executable instructions for execution by a processing system. The computer-executable instructions may be for creating a new isolated environment, for creating a copy of an isolated environment, live migrating applications within and between isolated environments, and for deploying an isolated environment Further, the instructions may be for launching one or more applications within one or more isolated environment, for terminating one or more applications within one or more isolated environments, for configuring resource mappings, exceptions and policies, for triggering a live migrate, and for delivery of one or more applications within isolated environments over the network.