Provisioning Composite Applications via Secure Parameter Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The complexity of dynamically scaling and configuring components of composite applications across multiple virtual machines makes manual provisioning and configuration difficult, especially in distributed environments where components need to access configuration parameters securely and efficiently.

Innovation Solution

A mechanism using a provisioning server that employs hierarchical data structures to manage and provide configuration parameters based on the roles and relationships of components, ensuring secure access and dynamic configuration of composite applications across virtual machines.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual provisioning and configuration is used for composite applications across multiple virtual machines, then security control over configuration parameters can be maintained, but the complexity and time required for provisioning increases significantly

Engineering Contradiction:

Improvesecurity controlVSAvoidprovisioning time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system enables self-service provisioning where the provisioning server automatically retrieves and distributes configuration parameters to component systems based on their identities and roles, eliminating the need for manual configuration while maintaining security through automated access control checks

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

A provisioning server acts as an intermediary between configuration parameter stores and component systems, mediating access by verifying identities, determining appropriate parameters based on roles, and securely distributing only the necessary configuration data to each component

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If configuration parameters are made accessible to all components of a composite application, then provisioning speed increases, but security and access control are compromised

Engineering Contradiction:

Improveprovisioning speedVSAvoidaccess control

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

Each component system receives a customized set of configuration parameters tailored to its specific identity, role, and relationships with other components, ensuring that each component has access only to the parameters it needs for its specific function rather than all parameters system-wide

Inventive Principle:

Principle #3Local quality

3Adaptability or versatility

If the number of components in a composite application increases dynamically, then application versatility improves, but the difficulty of manual provisioning and configuration increases

Engineering Contradiction:

Improvedynamic scalingVSAvoidprovisioning complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The provisioning system dynamically adapts to changing application architectures by automatically detecting new component systems, determining their roles and relationships, and providing appropriate configuration parameters without requiring manual intervention, enabling the system to handle dynamic scaling seamlessly

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS11416220B2Provisioning composite applications using secure parameter access

Publication Date: 2022.08.16 RED HAT ISRAEL

AI summary

A mechanism for provisioning a composite web application using secure parameter transfer is disclosed. The composite web application includes a component that resides on a virtual machine (VM). A request is received from the component for a configuration parameter that is to enable periodic reconfiguration of the VM. An access condition is identified for accessing the configuration parameter and responsive to determining the access condition is satisfied, the requested configuration parameter is provided to the component. The VM is reconfigured using the requested configuration parameter.