Centralized RBAC Module for Converged Infrastructure

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Implementing role-based access control (RBAC) across multiple components of converged infrastructure systems is tedious and inefficient, often requiring multiple element managers, which increases the risk of errors and inconsistencies.

Innovation Solution

A centralized RBAC module that allows administrators to configure and implement RBAC policies across multiple converged infrastructure systems, enabling unified management, storage of RBAC policies for reuse, and use of APIs to apply policies consistently across disparate components.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple element managers are used to implement RBAC across different data center elements, then each element can be managed independently with specific access control capabilities, but the implementation becomes tedious, inefficient, and error-prone

Engineering Contradiction:

Improveelement-specific access control capabilityVSAvoidRBAC configuration complexity

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The patent merges multiple independent element managers into a single unified RBAC system that can manage access control across diverse data center elements (servers, storage devices, network devices, virtual machines) through a common interface and centralized policy management, eliminating the need to configure each element manager separately

Inventive Principle:

Principle #5Merging (Combining)

2Ease of manufacture

If each data center element is configured with its own element manager for access control, then element-specific management is achieved, but the number of managers increases leading to inefficiency and increased error risk

Engineering Contradiction:

Improveelement management capabilityVSAvoidnumber of element managers

Core Design Contradiction:

Ease of manufactureVSDevice complexity

Solution Approach 1:

The patent creates a universal RBAC system that can manage multiple types of data center elements through a single interface, where one RBAC system performs the functions previously distributed across multiple element managers, reducing system complexity while maintaining element-specific management capabilities

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If RBAC is implemented independently at each element level, then fine-grained control is achieved, but configuration time and administrative overhead increase significantly

Engineering Contradiction:

Improveaccess control precisionVSAvoidRBAC configuration time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent enables preliminary configuration of RBAC policies at the role and permission levels before deployment to multiple elements, allowing administrators to define access control rules once and automatically apply them across numerous data center elements, significantly reducing configuration time while maintaining precise control

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS9280646B1Methods, systems, and computer readable mediums for role-based access control involving one or more converged infrastructure systems

Publication Date: 2016.03.08 EMC IP HLDG CO LLC

AI summary

Methods, systems, and computer readable mediums for implementing role-based access control (RBAC) are disclosed. According to one method, the method includes authenticating a user for implementing RBAC across multiple components associated with one or more converged infrastructure systems, receiving, from the user, RBAC related information for implementing RBAC across the multiple components associated with the one or more converged infrastructure systems, and implementing, using the RBAC related information, RBAC across the multiple components associated with the one or more converged infrastructure systems.