Dynamic Throttling for Network Security Service Capacity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for off-network network security services often underutilize capacity due to disproportionate usage by some requesters, leading to denial of access for others, while ensuring fair access results in low utilization.
Innovation Solution
Implementing an unfair throttling approach that balances access based on the total number of subscribers and concurrent threads, allowing some subscribers to be unfairly denied to maintain system utilization while ensuring immediate access for low usage subscribers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If off-network services limit requesters to a volume of service that they have paid for, then some requesters cannot overuse the system to the detriment of other users, but the service is underutilized
Solution Approach 1:
The patent implements dynamic throttling where the number of concurrent threads allowed per requester is not fixed but adjusts based on current system conditions. The system calculates available capacity dynamically and allocates threads accordingly, allowing high-utilization requesters to use more resources when capacity is available while protecting against overuse when capacity is constrained. This resolves the contradiction by making service allocation flexible rather than static.
Solution Approach 2:
The system changes the parameter of service allocation from a fixed per-requester limit to a dynamic parameter that varies based on total system capacity and current utilization. By changing how the service volume parameter is determined (from static paid allocation to dynamic capacity-based allocation), the system achieves both protection against overuse and improved overall utilization.
2Productivity
If off-network services allow high utilization by permitting disproportionate usage, then service capacity is fully used, but some requesters overuse the system to the detriment of other users
Solution Approach 1:
The patent implements a feedback mechanism where the system continuously monitors total concurrent thread usage and adjusts individual requester allocations based on this feedback. When total utilization is high, the system reduces individual allocations to prevent overuse; when utilization is low, it increases allocations to improve overall service usage. This feedback loop resolves the contradiction by balancing utilization with fair access guarantees.
Solution Approach 2:
The system dynamically adjusts the service allocation parameters based on real-time system state rather than using fixed predetermined limits. This dynamic approach allows the system to maximize utilization when capacity is available while automatically protecting against overuse when capacity is constrained, thus resolving the contradiction between productivity and reliability.
Data Source
AI summary
Various embodiments provide systems and methods for granting/denying access to network security services to a plurality of service requesters.