Graph Model Tenant Overlay for Secure Node Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud-based tenancy systems face vulnerabilities due to centralized data storage, lack of tenant control over data location, and restricted resource sharing among tenants, leading to security risks and resource duplicity.
Innovation Solution
Implementing an overlay system with customizable graph-based models that allow tenants to have dedicated resources, define their own security solutions, and share resources in real-time with other tenants, while maintaining separate security and reducing duplicity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If centralized database is used for storing tenant data, then resource utilization is improved, but security vulnerability increases
Solution Approach 1:
The patent divides the centralized database into distributed ledger segments where each tenant's data is stored in separate blocks across multiple nodes. This segmentation maintains resource utilization through shared infrastructure while improving security by isolating tenant data across distributed locations, so that a breach at one node does not compromise other tenants' data.
Solution Approach 2:
The patent implements nested security layers where encryption is applied at multiple levels: data is encrypted before storage in the ledger, and additional encryption layers are applied for sensitive information. This nested approach allows the system to maintain centralized resource management while providing multiple security barriers that protect tenant data even if one layer is compromised.
2Device complexity
If common security solution is applied to each tenant's data, then system simplicity is improved, but security effectiveness deteriorates
Solution Approach 1:
The patent applies different security measures to different tenants based on their specific requirements. Each tenant can configure their own encryption keys, access controls, and security policies, allowing security effectiveness to be tailored to local needs while the overall system maintains a unified blockchain architecture for simplicity.
Solution Approach 2:
The patent implements dynamic security configurations where tenants can adjust their security parameters, encryption methods, and access controls based on changing requirements. The system allows security policies to be modified without reconfiguring the entire infrastructure, maintaining simplicity while adapting security effectiveness to specific tenant needs.
3Ease of operation
If data storage location is controlled by service provider, then system management is simplified, but tenant control and security are reduced
Solution Approach 1:
The patent merges control by allowing tenants to specify their preferred storage locations and control mechanisms while the service provider manages the actual deployment across the distributed ledger. This combination enables tenants to have control over data location preferences and security parameters while the service provider maintains simplified system-wide management through the blockchain infrastructure.
4Reliability
If resource sharing among tenants is restricted, then security isolation is improved, but resource efficiency deteriorates
Solution Approach 1:
The patent introduces smart contracts as intermediaries that mediate resource sharing between tenants. These automated contracts enforce security isolation by verifying tenant identities, access permissions, and usage terms before allowing resource access. This intermediary layer enables secure resource sharing where tenants can efficiently utilize shared infrastructure while maintaining security isolation through programmable access controls.
5Reliability
If third-party involvement is required for resource sharing, then security control is improved, but operational efficiency deteriorates
Solution Approach 1:
The patent implements self-service resource sharing through smart contracts that automatically verify tenant identities, enforce access policies, and manage resource allocation without third-party intervention. The blockchain ledger itself serves as the trusted intermediary, enabling tenants to securely share and access resources directly through automated contract execution, thereby maintaining security control while eliminating the time delays associated with manual third-party verification.
Data Source
AI summary
An overlay system is provided that includes a plurality of storage elements and processing circuitry coupled thereto. The plurality of storage elements store a plurality of executable graph-based models such that first and second storage elements store first and second executable graph-based models, respectively. Each executable graph-based model includes a plurality of nodes. The processing circuitry receives a stimulus to share a first node of the first executable graph-based model with a second node of the second executable graph-based model. The processing circuitry instantiates a tenant overlay node that is associated with the second node and includes a set of constraints to be adhered to by the second node while sharing the first node. The processing circuitry creates a sharing channel as a medium between the first and second storage elements. The sharing channel and the tenant overlay node enable sharing of the first node with the second node.