Cloud OS Validation for Domain-Specific Language Compliance

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Integrating cloud services into organizational processes is challenging due to the complexity of manually managing cloud infrastructure, and there is a risk of malicious users bypassing validation processes to harm the infrastructure, with existing solutions failing to ensure compliance with organizational policies.

Innovation Solution

A domain-specific programming language allows users to create a computing environment with user-friendly syntax that can be compiled into executable code, which is validated against a state information service and policy libraries to ensure compliance with organizational policies before execution on a cloud operating system.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If manual cloud infrastructure management is used, then users can directly control cloud resources, but the complexity of integration and policy compliance increases significantly

Engineering Contradiction:

Improvecloud infrastructure managementVSAvoidintegration complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent introduces a domain-specific language (DSL) as an intermediary layer between users and cloud infrastructure. This DSL provides abstractions for common cloud operations and automatically translates user-friendly code into cloud provider-specific commands, thereby reducing integration complexity while maintaining ease of operation.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the cloud infrastructure management process into distinct components: a validation library for policy checking, a compiler for code translation, and execution modules for cloud providers. This segmentation allows each component to be independently developed and maintained, reducing overall system complexity.

Inventive Principle:

Principle #1Segmentation

2Productivity

If multiple developers are allowed to build infrastructure simultaneously, then productivity increases, but ensuring policy compliance becomes more difficult

Engineering Contradiction:

Improveinfrastructure development speedVSAvoidpolicy compliance

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent implements a validation library that performs policy compliance checks before code compilation and execution. This preliminary validation ensures that all infrastructure code, regardless of which developer created it, must adhere to organizational policies, maintaining reliability while allowing parallel development.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If validation processes are implemented to prevent malicious activity, then infrastructure security improves, but the risk of bypassing validation increases

Engineering Contradiction:

Improveinfrastructure securityVSAvoidvalidation bypass attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements a feedback mechanism where the cloud operating system validates code against the validation library policies before execution, and compares the executed code against the original user-generated code. This multi-layered feedback loop makes it difficult for malicious users to bypass validation, as any modifications to the code would be detected during execution or comparison.

Inventive Principle:

Principle #23Feedback

4Reliability

If user-generated code is validated against policies, then compliance is ensured, but the compilation and execution process becomes more complex

Engineering Contradiction:

Improvepolicy complianceVSAvoidvalidation system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates a universal validation library that can validate multiple types of infrastructure code against organizational policies. This validation library serves multiple functions: policy checking, code validation, and compliance verification, thereby managing complexity through a multi-functional component rather than separate systems for each function.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10261810B2System and method for providing cloud operating system validations for a domain-specific language for cloud services infrastructure

Publication Date: 2019.04.16 SNYK INC

AI summary

A system and method for providing and executing a domain-specific programming language for cloud services infrastructure is provided. The system may be used to integrate references to external entities, such as cloud service compute instances, directly into a domain-specific programming language, allowing developers to easily integrate cloud services directly using the domain-specific programming language. A compiler stored within a cloud operating system can include one or more validations that can check instantiations of types within the domain-specific language for compliance with one or more policies set by a system administrator of a computing enterprise.