Global Session Synchronization in Distributed Security Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed security systems, managing global sessions across multiple security processing units (SPUs) is challenging due to the inability of individual SPUs to share local state information, making global control and resource allocation difficult.
Innovation Solution
Implementing a method where each SPU provides a local update message to a central SPU, which then generates a global update message to distribute global state information among all SPUs, allowing for global control by tracking and managing session limits and counters across the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a distributed security system uses multiple SPUs to process sessions, then processing capacity and resource allocation are improved, but global control and state synchronization become difficult
Solution Approach 1:
The patent introduces a central SPU as an intermediary that coordinates global control functions. The central SPU receives local update messages from distributed SPUs, maintains global state information including counters and session limits, and distributes global update messages back to SPUs. This mediator architecture enables global control while preserving distributed processing capacity.
Solution Approach 2:
The system segments control functions into local and global components. Individual SPUs handle local session processing independently, while the central SPU manages global state synchronization. This segmentation allows parallel processing at the local level while maintaining coordinated control at the global level through message passing.
2Speed
If individual SPUs maintain local state information, then processing speed is improved, but state synchronization and resource sharing among SPUs deteriorate
Solution Approach 1:
The patent implements feedback mechanisms where SPUs send local update messages to the central SPU when their state changes (e.g., session creation, counter updates). The central SPU processes these updates and sends back global update messages to synchronize state information across all SPUs, ensuring consistency while maintaining fast local processing.
Solution Approach 2:
The system performs preliminary actions by pre-establishing global session limits and counter values at the central SPU before distributed processing begins. This allows individual SPUs to make rapid local decisions based on pre-configured global constraints, maintaining processing speed while ensuring state synchronization.
3Adaptability or versatility
If global session limits are enforced across all SPUs, then resource management is improved, but system complexity and coordination overhead increase
Solution Approach 1:
The central SPU acts as a mediator that handles all global resource management decisions. Individual SPUs simply query or receive updates from the central SPU regarding global session limits and counter values, eliminating the need for complex peer-to-peer coordination protocols and reducing overall system complexity.
Solution Approach 2:
The patent uses parameter-based control where the central SPU manages global parameters such as session limits, counter values, and update thresholds. By changing and distributing these parameters centrally, the system achieves flexible resource management without requiring complex distributed coordination logic at each SPU.
Data Source
AI summary
A device may comprise security processing units (SPUs) including a SPU to receive a session request. The SPU may identify global counter information and update counter information. The global counter information may include a global counter identifier and a global counter value. The update counter information may include an update counter identifier and an update counter value. The SPU may identify a global limit associated with the global counter, may determine that the global limit has not been met, and may cause the session to be created. The SPU may create a modified global counter value. The SPU may create a modified update counter value. The SPU may determine that a local update message is required based on the modified update counter value, and may provide the local update message to another SPU. The local update message may include the global counter identifier and the modified global counter value.