Cloud MES Service Mesh for Multi-Tenant Data Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cloud-based industrial solutions face challenges such as data accessibility across data centers, security issues, and data sharing limitations due to architectural limitations of existing cloud platform architectures.

Innovation Solution

A multi-tenant, cloud-based Software-as-a-Service (SaaS) manufacturing platform with a service mesh system that includes a service communicator and data packaging component to manage communication and data sharing between edge gateway devices and internal services, enabling secure and scalable data access and sharing across geographically distributed data centers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If cloud-based multi-tenant SaaS architecture is implemented, then data accessibility across geographically distributed data centers is improved, but data security and sharing limitations are worsened due to architectural constraints

Engineering Contradiction:
Improvedata accessibilityVSAvoiddata security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

A service mesh is introduced as an intermediary layer between edge gateway devices and internal cloud services. The service mesh manages data communication, routing, and security policies, enabling secure data access across multi-tenant SaaS architecture without compromising security for accessibility

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If data is replicated across multiple data centers to improve accessibility, then data sharing capability is improved, but system complexity and data management overhead increase

Engineering Contradiction:
Improvedata sharing capabilityVSAvoidsystem complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The service mesh extracts data management and routing logic from individual applications and makes it a dedicated infrastructure layer. This separates data sharing capabilities from application complexity, enabling versatile data sharing across tenants and regions without increasing application-level system complexity

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS20240394760A1Cloud MES with edge containerized service
Publication Date: 2024.11.28 ROCKWELL AUTOMATION TECH INC
  • US20240394760A1 patent drawing
  • US20240394760A1 patent drawing
  • US20240394760A1 patent drawing

AI summary

A multi-tenant, cloud-based Software-as-a-Service (SaaS) manufacturing platform offers a variety of industrial applications to end customers—including but not limited to MES, ERP, quality management, supply chain management, and customer relationship management (CRM)—and implements associated architectural features that address a number of issues relating to data sharing, security, scalability, and other concerns.