Cloud Identity Management System for Virtual Machine Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cloud computing systems require owners or operators to purchase and maintain infrastructure for identity management services, which is costly and inefficient.

Innovation Solution

A cloud-based identity management system that resides within the cloud computing environment, providing on-demand identity management services to virtual machines, applications, and appliances without the need for owners to purchase and maintain infrastructure, using a cloud management system to instantiate and manage virtual machines and resources dynamically.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If owners or operators purchase and maintain infrastructure for identity management services, then reliability and security of identity management are improved, but cost and device complexity increase

Engineering Contradiction:
Improveidentity management service reliabilityVSAvoidinfrastructure complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a cloud-based identity management service as an intermediary between users and the underlying infrastructure. This service abstracts the complexity of identity management infrastructure, allowing users to access reliable identity management without directly managing the complex infrastructure. The cloud service acts as a mediator that handles authentication, authorization, and identity verification while users simply interact with simplified APIs and interfaces.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements virtualization of identity management infrastructure, creating virtual copies of identity management resources that can be dynamically allocated and managed. Instead of requiring users to maintain physical infrastructure, the system provides virtualized identity management services that replicate the functionality of traditional on-premises solutions while reducing complexity and cost.

Inventive Principle:
Principle #26Copying

2Reliability

If infrastructure for identity management is purchased and maintained on-premises, then control and security are improved, but cost and ease of operation worsen

Engineering Contradiction:
Improveidentity management controlVSAvoididentity management operation ease
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The cloud-based identity management service enables self-service capabilities where users can independently provision, configure, and manage identity management resources without requiring specialized infrastructure expertise. The system automatically handles infrastructure provisioning, service configuration, and resource allocation, allowing users to focus on their core business needs rather than maintaining complex identity management infrastructure.

Inventive Principle:
Principle #25Self-service

3Ease of operation

If cloud-based identity management service is used, then ease of operation and cost efficiency are improved, but device complexity at cloud provider level increases

Engineering Contradiction:
Improveidentity management operation easeVSAvoidcloud infrastructure complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent consolidates multiple identity management functions and resources into a unified cloud-based service platform. By merging authentication, authorization, identity verification, and resource management capabilities into a single integrated system, the cloud provider can manage complexity centrally while providing simplified interfaces to multiple users. This consolidation reduces the operational burden on users while distributing the complexity management at the cloud provider level.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS7886038B2Methods and systems for user identity management in cloud-based networks
Publication Date: 2011.02.08 RED HAT INC
  • US7886038B2 patent drawing
  • US7886038B2 patent drawing
  • US7886038B2 patent drawing

AI summary

An identity management system can reside within the cloud computing environment. The identity management system can be linked to systems, such as virtual machines, applications, and/or appliances, both inside and outside the cloud computing environment to provide identity management to those systems. In order to provide identity management, the identity management system can be configured to link to the systems in order to receive, store, maintain, and provide identity information. The information can identify items (users, devices, products, services) associated with the systems. The identity management system can be configured to store and maintain the information in records. The identity management system can also be configured to charge owners and operators of the systems for the identity management.