CIM File System Access Control Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current CIM implementations lack auditing and authorization/access control frameworks, caching, proxy capabilities, and atomic operation locking and synchronization, making it difficult to extend and control access to CIM objects effectively.
Innovation Solution
A CIM file system (CIMFS) interface is introduced to manage access to CIM object managers (CIMOM), providing features like authentication, access control, snapshots, versioning, synchronization, caching, auditing, and proxy processing through a hidden file system and directory structure, ensuring all requests pass through the CIMFS before reaching the CIMOM.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a CIM object manager (CIMOM) is used to service CIM requests, then CIM data can be accessed using standard protocols, but the CIMOM cannot validate and handle requests without passing through a CIM file system (CIMFS), increasing system complexity
Solution Approach 1:
The patent introduces a CIM file system (CIMFS) as an intermediary layer between clients and the CIM object manager (CIMOM). All CIM requests must pass through the CIMFS, which validates and handles authentication, authorization, and access control before forwarding requests to the CIMOM. This mediator approach resolves the contradiction by centralizing security functions in the CIMFS while maintaining the CIMOM's ability to service requests through standardized protocols.
2Reliability
If auditing and authorization frameworks are built around each CIM provider, then access control is improved, but the implementation becomes time-consuming and not feasible
Solution Approach 1:
The patent implements a universal authorization framework where the CIMFS serves as a single point for handling authentication and authorization for all CIM providers. Instead of building separate authorization frameworks around each CIM provider, the CIMFS provides a unified multi-functional service that handles access control for all CIM objects, significantly reducing implementation time and complexity while maintaining comprehensive authorization capabilities.
3Adaptability or versatility
If caching and proxy capabilities are added to CIM, then access management is improved, but the industry standard currently lacks these features
Solution Approach 1:
The patent embeds caching and proxy capabilities within the CIMFS structure, nesting these advanced features inside the existing CIM framework. The CIMFS acts as a container that integrates file system operations, caching mechanisms, and proxy functions into a unified structure. This approach allows the industry to adopt enhanced access management features while maintaining compatibility with existing CIM standards, as the new capabilities are nested within rather than replacing the standard architecture.
Data Source
AI summary
Systems and methods for extending and controlling access to a Common Information Model (CIM) are presented. According to an embodiment, access requests for a CIM object manager (CIMOM) pass through a CIM file system (CIMFS) where each access requested is authenticated. The CIMFS maintains and manages a hidden file system representing CIM classes and a CIM class hierarchy on a volume of storage. The structure, metadata, and values for the CIM classes, CIM object, and CIM providers are maintained in a hidden directory on the volume. This information is accessible via the CIMFS to use existing file system management operations.