Cloud Server Segmentation for Secure Code Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing systems face challenges in providing secure computing resources for privacy, particularly in remote work scenarios, as existing methods are inconvenient and lack effective security measures.
Innovation Solution
A cloud computing system and method that categorize servers into secure and general types, where secure servers decrypt encrypted codes using private keys, and a management server allocates tasks based on security requirements, enabling secure execution of programs while maintaining cost efficiency by not requiring all servers to be secure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all servers are configured as secure servers to ensure privacy protection, then security is improved, but system cost and complexity increase
Solution Approach 1:
The patent segments servers into two distinct types: secure servers that can decrypt encrypted codes and general servers that cannot. This segmentation allows the system to provide security where needed while avoiding the cost of making all servers secure. The management server assigns programs to appropriate server types based on security requirements, resolving the contradiction between comprehensive security and system complexity.
Solution Approach 2:
The patent applies local quality by providing secure decryption capabilities only to specific servers (secure servers) rather than uniformly to all servers. The management server determines which servers should execute encrypted programs based on their security attributes, allowing different parts of the system to have different security levels according to actual needs.
2Reliability
If VPN is used for remote work access to protect company privacy, then security is improved, but ease of operation deteriorates
Solution Approach 1:
The patent implements self-service by allowing remote workers to directly access and execute programs on secure servers without needing to establish complex VPN connections. The management server automatically handles program assignment and decryption based on the worker's identity and the program's security requirements, eliminating the need for manual VPN configuration while maintaining privacy protection.
3Device complexity
If encrypted codes are executed on general servers, then device complexity is reduced, but privacy protection deteriorates
Solution Approach 1:
The management server acts as an intermediary between the client and servers. It receives encrypted programs from clients, determines which secure servers should execute them based on security policies, and coordinates the execution process. This intermediary role allows the system to maintain both simplicity (by centralizing security management) and security (by ensuring only authorized servers execute encrypted codes).
Data Source
AI summary
A cloud computing system is disclosed. The cloud computing system includes a management server that manages a plurality of servers and distributes service resources. Each of the servers corresponds to one of a secure server type and a general server type, and the secure server type of server decrypts an encrypted code provided from a client. Accordingly, a secure server can execute a code requiring security. Especially, by classifying a program code as a general code or a secret code, the general server can also perform the partial function of a program.