Container Artifact Metadata Validation for Secure Distribution

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing distributed data storage systems lack effective methods to manage and securely handle large numbers of container images, ensuring compliance with security and distribution rules, particularly in the absence of updatable metadata, which complicates the tracking and management of container image distribution across multiple data centers.

Innovation Solution

Implementing a system that manages artifact-related metadata by validating container images using validation rules, extracting metadata, and storing it in a database accessible for updates over the lifetime of the artifact, ensuring compliance with OCI and Docker distribution specifications, and providing mechanisms for querying and updating metadata.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If container images are distributed across multiple data centers without centralized metadata management, then distribution speed and autonomy are improved, but security compliance and tracking capability deteriorate

Engineering Contradiction:

Improvedistribution speedVSAvoidsecurity compliance

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The patent introduces a centralized registry as an intermediary component that mediates between distributed data centers and container images. The registry stores and manages metadata including security compliance information, allowing fast local distribution while maintaining centralized oversight for security and tracking requirements.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If metadata is stored immutably in the registry, then data integrity and security are improved, but flexibility for updates and corrections deteriorates

Engineering Contradiction:

Improvedata integrityVSAvoidmetadata update flexibility

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic metadata management where the registry can store both immutable artifact data and mutable metadata. The system allows metadata to be updated over time while maintaining audit trails, enabling corrections and updates without compromising the integrity of the original container images.

Inventive Principle:

Principle #15Dynamics

3Reliability

If all container image metadata is extracted and validated synchronously, then validation completeness is improved, but processing time and system performance deteriorate

Engineering Contradiction:

Improvevalidation completenessVSAvoidsystem throughput

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements periodic validation where metadata extraction and validation occur at scheduled intervals or triggered by specific events rather than continuously. This allows the system to maintain validation completeness while improving throughput by processing validations in batches or on-demand rather than blocking all operations.

Inventive Principle:

Principle #19Periodic action

Data Source

PatentUS12504964B2Artifact management infrastructure

Publication Date: 2025.12.23 SAP SE

AI summary

A method, a system, and computer program product for managing container artifacts are provided. An artifact including a container image is received. Validation rules for performing a validation of the artifact are retrieved. Metadata is extracted from the artifact for performing the validation of the artifact. Validation of the artifact is performed by processing the container image using the validation rules and the metadata. The metadata of the artifact is stored, at a database of a registry, for the metadata to be accessible for updates over a lifetime of the artifact.