Configuration Data Fingerprinting for Cloud Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for granting access to resources in virtualized and cloud environments, such as using hardware identifiers or external keys, are unsuitable due to duplication, loss, or incompatibility with cloud environments, and require multiple keys in high-availability applications.

Innovation Solution

A method that generates a fingerprint from system configuration data, comparing it to a reference fingerprint to determine similarity and grant access, using a system comprising a configuration data store, data server, and resource server to manage access requests and resource availability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If hardware identifiers are used for access verification, then user identification is achieved, but the system becomes unsuitable for virtualized and cloud environments due to hardware duplication and incompatibility

Engineering Contradiction:

Improveadaptability to virtualized and cloud environmentsVSAvoidreliability of access verification

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent replaces physical hardware identifiers with a software-based configuration data approach. Instead of relying on physical hardware components that cannot be used in virtualized environments, the system uses configuration data (device names, identifiers, addresses) that can be obtained through software queries, making the access verification system adaptable to cloud and virtualized infrastructures while maintaining reliable user identification

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent creates a virtual representation of hardware identity through configuration data. Rather than requiring actual physical hardware identifiers that are immutable and environment-specific, the system copies the essential identifying information into a software-based configuration dataset that can be replicated and used across virtualized and cloud environments, enabling portable and adaptable access verification

Inventive Principle:

Principle #26Copying

2Reliability

If external hardware keys are used for access control, then secure access is provided, but the system becomes unreliable due to key failure, loss, or damage in data center handling

Engineering Contradiction:

Improvereliability of access controlVSAvoidease of key management

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent replaces physical hardware keys with a software-based fingerprinting system. Instead of relying on tangible keys that can be lost, damaged, or mishandled in data centers, the system uses configuration data processed through cryptographic functions to generate fingerprints. This eliminates the physical handling risks while maintaining secure access control through software-based verification

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent creates a digital fingerprint copy of the system configuration that serves as the access control credential. Rather than requiring physical key duplication and distribution, the system generates a cryptographic fingerprint from configuration data that can be securely stored and verified software-based, eliminating the risks associated with physical key management in data center environments

Inventive Principle:

Principle #26Copying

3Reliability

If multiple hardware keys are used for high-availability applications, then access reliability is improved, but device complexity and key management difficulty increase

Engineering Contradiction:

Improvehigh-availability accessVSAvoidcomplexity of key management

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple configuration data sources (device names, identifiers, addresses) into a single fingerprint value. Instead of requiring multiple separate hardware keys for high-availability applications, the system combines the essential identifying information from the virtualized environment into one cryptographic fingerprint that can be used for access verification, simplifying key management while maintaining reliability

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent creates a universal fingerprinting system that works across different virtualized and cloud environments. The configuration data-based approach provides a single multi-functional solution that can serve high-availability requirements without requiring environment-specific hardware keys, enabling the same access control mechanism to function reliably across diverse virtualized infrastructures

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10341342B2Configuration data based fingerprinting for access to a resource

Publication Date: 2019.07.02 HONEYWELL INTERNATIONAL INC

AI summary

A method for providing a user system access to a resource includes obtaining configuration data identifying devices at the user system; receiving a request from the user system for access to a resource; applying a function to the configuration data to generate a current fingerprint; comparing the current fingerprint to a reference fingerprint associated with the resource; determining a degree of similarity between the current fingerprint and the reference fingerprint; and granting access to the resource in response to the degree of similarity between the current fingerprint and the reference fingerprint.