Connectivity Management System for Secure Data Center Asset Claiming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data center management systems face challenges in establishing secure, bidirectional communication channels across firewalls, proxies, and complex network setups, hindering real-time management and monitoring of data center assets.
Innovation Solution
The implementation of a connectivity management system that includes a client module and a monitoring and management console, enabling the establishment of a secure communication channel through proof of ownership verification and the use of a CMS aggregator and service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a data center asset is set to disable until claimed status, then security is improved, but device functionality is restricted
Solution Approach 1:
The system performs preliminary actions by setting the data center asset to a disable until claimed status before actual use. This preliminary security measure ensures that the asset is protected from unauthorized access while still being prepared for future legitimate use. The asset is pre-configured with security restrictions that will be automatically removed once proper ownership verification is completed.
Solution Approach 2:
The connectivity management system acts as an intermediary between the data center asset and the user. It mediates the claiming process by verifying proof of ownership information and managing the transition from disabled to enabled status. This intermediary mechanism ensures security requirements are met while enabling legitimate access through a controlled process.
2Reliability
If proof of ownership verification is implemented, then security is improved, but system complexity increases
Solution Approach 1:
The connectivity management system serves as an intermediary that handles the complexity of proof of ownership verification. It manages the exchange of proof of ownership information between the data center asset and the monitoring and management console, absorbing the system complexity while providing a clear security mechanism to users.
Solution Approach 2:
The system implements self-service mechanisms where the data center asset automatically exchanges proof of ownership information with the connectivity management system without requiring manual intervention. This self-service approach to verification reduces operational complexity while maintaining security requirements.
3Reliability
If a secure communication channel is established via CMS aggregator and service, then communication security is improved, but connection establishment time increases
Solution Approach 1:
The system performs preliminary actions by establishing the secure communication channel through the connectivity management system before actual data exchange begins. The proof of ownership verification and channel setup are completed in advance, ensuring security is in place before operational use, which prevents security issues during active communication.
Solution Approach 2:
The connectivity management system aggregator and service act as intermediaries that facilitate the establishment of secure communication channels. They manage the complex process of creating encrypted connections between data center assets and the monitoring console, handling the time-consuming security setup while enabling efficient communication once established.
Data Source
AI summary
A system, method, and computer-readable medium for performing a communications management operation. The communications management operation includes: providing a data center asset with a connectivity management system client module; setting the data center asset to a disable until claimed status; providing the data center asset with proof of possession information; establishing a connection between the connectivity management system client module and a connectivity management system of a data center monitoring and management console, establishing a secure communication channel between the connectivity management system client module and a connectivity management system aggregator based upon the proof of ownership information; and, setting the data asset center to a claimed status based upon the information exchanged between the connectivity management system client module and the connectivity management system.