Dynamic Cloud Connectivity Using On-Demand Dedicated VPN Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges with excessive network connections that provide unnecessary attack vectors and resource inefficiencies, requiring expertise to configure static connections that can expose sensitive data and increase security risks.
Innovation Solution
An exchange controller dynamically establishes and destroys dedicated connections between computing entities using a combination of pre-configured rules and real-time learning mechanisms, reducing unnecessary network connectivity and improving security by managing connections based on demand.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static connections are established between computing entities, then network connectivity is ensured, but security risks increase and resource efficiency decreases
Solution Approach 1:
The patent implements dynamic connection establishment and termination based on real-time data exchange demands. The exchange controller monitors communication needs between computing entities and establishes dedicated connections only when required, rather than maintaining static connections. This dynamic approach ensures network connectivity when needed while minimizing exposure to security risks by reducing the number of active connections.
Solution Approach 2:
The system changes the state parameter of network connections from static/permanent to dynamic/temporary. Connections are created and destroyed based on changing data exchange requirements, transforming the connection state from a fixed parameter to a variable one that adapts to operational needs, thereby improving security without sacrificing connectivity.
2Reliability
If static connections are established between computing entities, then network connectivity is ensured, but resource utilization increases
Solution Approach 1:
The exchange controller dynamically manages connection resources by establishing connections only when data exchange is required and terminating them when not needed. This dynamic resource allocation prevents waste of network resources on idle connections while ensuring connectivity is available when demanded, optimizing the balance between reliability and resource utilization.
Solution Approach 2:
The system implements self-service connection management where the exchange controller autonomously monitors data exchange demands and automatically establishes or terminates connections without manual intervention. This self-managed approach optimizes resource utilization by ensuring connections exist only when functionally required.
3Object-affected harmful factors
If dedicated connections are established dynamically, then security is improved, but connection establishment time increases
Solution Approach 1:
The exchange controller performs preliminary monitoring of data exchange demands to anticipate when connections will be needed. By proactively establishing connections before actual data exchange begins, the system reduces the perceived establishment time while maintaining the security benefits of dynamic connection management.
Solution Approach 2:
The system implements feedback mechanisms where the exchange controller continuously monitors communication patterns and connection performance. This feedback enables optimization of connection establishment timing and duration, balancing security requirements with time efficiency by learning from operational patterns.
4Reliability
If multiple static connections are maintained, then network connectivity is ensured, but attack vectors increase
Solution Approach 1:
The patent extracts and eliminates unnecessary static connections from the network architecture, retaining only the essential connections required for data exchange. By removing extraneous connections, the system maintains necessary network connectivity while reducing the attack surface by eliminating potential entry points for security threats.
Solution Approach 2:
The system transitions from a static connection model to a dynamic one where connections are created and destroyed based on actual data exchange needs. This dynamic approach ensures that only necessary connections exist at any given time, reducing the number of potential attack vectors while maintaining connectivity when required.
Data Source
AI summary
Various embodiments are generally directed to techniques for dynamic connectivity between computing entities. Some embodiments are particularly directed to an exchange controller that dynamically establishes and destroys dedicated connections between different computing entities in an on-demand manner that restrict unnecessary network connectivity. In several embodiments, a private network may connect the exchange controller to a first set of one or more computing entities, such as applications in a private cloud. In several such embodiments, the exchange controller may utilize virtual private networks (VPNs) to establish secure communication between the first set of one or more computing entities and a second set of one or more computing entities external to the private network, such as a server or database located in an external cloud.