Decentralized Identity Management for Distributed Computing Resources

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Centralized management of large, geographically distributed computing resources becomes impractical due to issues like incomplete or stale information, intermittent connectivity, and security concerns as infrastructure expands to include edge devices, IoT devices, and public networks.

Innovation Solution

Implementing a decentralized identity management system using a distributed ledger, such as Blockstack, to establish and manage identities for computing resources, enabling secure and asynchronous command processing across a network of heterogeneous resources.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If centralized management is used for computing resources, then management control is maintained, but scalability and reliability deteriorate as the network expands to include edge devices and IoT devices

Engineering Contradiction:

ImprovescalabilityVSAvoidmanagement reliability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the centralized management function into distributed identity verification and command validation across multiple nodes in the network. Each computing resource maintains its own identity credentials verified by the decentralized identity management system, eliminating the single point of failure inherent in centralized management while preserving control and reliability.

Inventive Principle:

Principle #1Segmentation

2Quantity of substance

If more computing resources are added to the network, then network capability and coverage are improved, but information completeness and data freshness deteriorate due to intermittent connectivity

Engineering Contradiction:

Improvenumber of computing resourcesVSAvoidinformation completeness

Core Design Contradiction:

Quantity of substanceVSLoss of information

Solution Approach 1:

The system performs preliminary actions by having computing resources pre-register their identities and capabilities in the decentralized identity management system before joining the network. This pre-established identity framework allows resources to be added dynamically without requiring real-time information synchronization, maintaining information completeness even with intermittent connectivity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The decentralized identity management system acts as an intermediary layer between computing resources and the network management plane. It maintains authoritative identity and capability information that resources can query and verify, ensuring information completeness without requiring continuous direct communication between all network participants.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If centralized management architecture is used, then security control is maintained, but security vulnerabilities increase due to single point of failure and attack targets

Engineering Contradiction:

Improvesecurity reliabilityVSAvoidsecurity risk

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the security verification function from the centralized management architecture and places it in the decentralized identity management system. Identity verification and command validation are performed distributed across network nodes using cryptographic proofs, eliminating the central security target while maintaining security control through distributed consensus and verification.

Inventive Principle:

Principle #2Taking out (Extraction)

4Adaptability or versatility

If decentralized identity management is implemented, then scalability and security are improved, but system complexity increases

Engineering Contradiction:

ImprovescalabilityVSAvoidsystem complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The decentralized identity management system implements a universal identity framework that handles multiple functions including authentication, authorization, capability verification, and command validation. This multi-functional approach reduces overall system complexity by consolidating security and management functions into a single decentralized infrastructure rather than requiring separate mechanisms for each function.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10855758B1Decentralized computing resource management using distributed ledger

Publication Date: 2020.12.01 EMC IP HLDG CO LLC

AI summary

In a network including a plurality of computing resources associated with an enterprise, an identity is established for each of the computing resources in accordance with a decentralized identity management system maintained in accordance with a distributed ledger. The plurality of computing resources is managed in association with the distributed ledger, wherein managing comprises the enterprise posting one or more commands on the distributed ledger to enable one or more of the plurality of computing resources to obtain the one or more commands. In one non-limiting example, the computing resources are part of a geographically distributed IT infrastructure associated with the enterprise.