Attribute-Based Policy Matching for Distributed Resource Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional policy-based resource management systems in distributed computing environments require a one-to-one mapping between managed resources and policies, leading to complexity, administrative overhead, and scalability issues as the number of managed resources increases.
Innovation Solution
The use of sets of attributes associated with managed resources and policies allows for multiple resources to be matched with a specific policy, reducing the number of individual policies needed and enabling more generic policies with specific overrides.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Manufacturing precision
If a one-to-one mapping between managed resources and policies is used, then policy applicability and resource management precision are improved, but device complexity and administrative overhead increase significantly
Solution Approach 1:
Multiple managed resources are merged into a single policy by using attribute sets as common identifiers. The patent applies this by allowing a single policy to be associated with multiple resources that share common attributes, thereby reducing the number of individual policy-resource mappings while maintaining precise applicability through attribute-based filtering.
Solution Approach 2:
The policy structure is made universal by introducing attribute sets that can match multiple different resources. Instead of creating separate policies for each resource type, the system uses a universal policy format that applies to any resource matching the attribute criteria, thus reducing complexity while maintaining precision.
2Adaptability or versatility
If the number of managed resources increases, then system scalability and functionality are improved, but the number of required policies increases proportionally, worsening administrative overhead
Solution Approach 1:
A single policy can serve multiple resources by using attribute sets as selective identifiers. This universal approach allows the system to scale resources without proportionally increasing policies, as new resources inherit policy applicability through shared attributes rather than requiring dedicated policies.
Solution Approach 2:
The system segments resources by attributes rather than creating separate policies for each resource. By organizing resources into attribute-based categories, the system can manage large numbers of resources through a limited number of policies that target specific attribute combinations, reducing administrative overhead.
3Manufacturing precision
If multiple policies are created for different resource types, then resource-specific policy precision is improved, but policy management complexity and operational difficulty increase
Solution Approach 1:
The patent creates a universal policy structure that can be applied to multiple resource types through attribute sets. This allows administrators to manage policies more easily while maintaining resource-specific precision, as the same policy framework can be reused across different resource types by simply changing the attribute values.
Solution Approach 2:
Instead of creating different policies for different resources, the system uses parameter changes in attribute sets to achieve resource-specific behavior. By modifying attribute values rather than creating entirely new policies, the system maintains precision while simplifying management operations.
Data Source
AI summary
An apparatus, program product and method utilize sets of attributes respectively associated with managed resources and policies to match managed resources with individual policies. Multiple managed resources are permitted to be matched with a specific policy, such that the policy applies to all matching managed resources. Furthermore, by providing multiple attributes upon which to match, policies are capable of being defined with varying degrees of specificity, enabling administrators to utilize more generic policies for certain types of managed resources, with more specific policies used to override certain managed resources whenever needed.