Directory Service Engine Authority Mapping

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing systems lack efficient methods to import and export authorities for backup software of storage systems, leading to laborious and error-prone manual processes when integrating LDAP directory services with other systems, resulting in inefficient authentication and access control management.

Innovation Solution

The implementation of a Directory Service Engine that facilitates the import and export of authority information between internal and external repositories, enabling seamless integration by mapping users and groups from LDAP repositories to internal roles, and vice versa, using a centralized platform for authentication and access control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If manual wizard configuration is used to map directory server data to LDAP repository, then integration between systems is achieved, but the process becomes laborious and error-prone

Engineering Contradiction:

Improveintegration capabilityVSAvoidoperational simplicity

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The system performs self-service by automatically discovering directory server data structures, extracting authority information, and mapping it to LDAP repository schemas without requiring manual configuration wizards. The integration process serves itself by autonomously handling the complex mapping tasks that previously required manual intervention.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system performs preliminary actions by pre-configuring mapping templates and authority structures before actual integration occurs. Directory server data is pre-processed and structured in advance, allowing the import process to proceed automatically without manual wizard guidance.

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If manual authority import/export processes are used, then system integration is achieved, but administrative time and effort increase significantly

Engineering Contradiction:

Improvesystem integrationVSAvoidadministrative time

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent replaces the mechanical manual process of authority import/export with an automated electronic system. The Directory Service Engine electronically discovers, extracts, transforms, and loads authority data between directory servers and LDAP repositories, substituting manual administrative actions with automated computational processes.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The Directory Service Engine acts as an intermediary between the directory server and LDAP repository, facilitating automatic authority import/export operations. This intermediary system handles the complex data transformation and mapping tasks, eliminating the need for manual administrative intervention.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Adaptability or versatility

If multiple systems and products provide authentication with separate repositories, then authentication flexibility is improved, but integration efficiency deteriorates

Engineering Contradiction:

Improveauthentication flexibilityVSAvoidintegration efficiency

Core Design Contradiction:

Adaptability or versatilityVSProductivity

Solution Approach 1:

The Directory Service Engine provides universal functionality by handling authentication authority management across multiple different directory server types and LDAP repositories. It serves multiple systems and products with a single integrated solution, enabling authority import/export operations across heterogeneous environments without requiring system-specific manual processes.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS8893269B1Import authorities for backup system

Publication Date: 2014.11.18 EMC IP HLDG CO LLC

AI summary

This disclosure relates to a method, article of manufacture, and apparatus of importing authorities for backup systems. In some embodiments, this includes having a directory service engine retrieve authorities from an external directory service, obtain users and groups from the authorities, map the users and the groups to roles of internal authorities, and distribute the mapping to the internal authorities. The directory service engine may also export authorities to the external directory service and may be used for communication with the external directory service for authentication and access control.