Hybrid Cloud User Management via RBAC Incremental Sync

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing hybrid cloud architectures lack a unified solution for managing user data and permissions across different cloud platforms, leading to inconsistencies and security concerns.

Innovation Solution

A user management method and apparatus that utilizes a role-based access control (RBAC) system to obtain and synchronize user data, determining incremental changes and sending them to all cloud platforms in the hybrid cloud, ensuring consistent permission management through a standardized interface adaptation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If different cloud platforms use their own user management methods, then each platform can operate independently, but user data and permissions cannot be uniformly managed across the hybrid cloud

Engineering Contradiction:
Improveplatform independenceVSAvoiduser data consistency
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent introduces a hybrid cloud management platform as an intermediary between multiple cloud platforms. This management platform obtains user data from an RBAC system and synchronizes it to various cloud platforms, enabling unified user management while preserving the independence of individual cloud platforms. The management platform acts as a mediator that translates and distributes user information across different systems without requiring them to adopt a single management method.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Loss of information

If all user data is synchronized to all cloud platforms, then user data consistency is achieved, but network bandwidth and system resources are consumed

Engineering Contradiction:
Improveuser data consistencyVSAvoidnetwork bandwidth consumption
Core Design Contradiction:
Loss of informationVSLoss of energy

Solution Approach 1:

The patent implements incremental synchronization by comparing current user data with historical user data already stored on cloud platforms. Instead of synchronizing all user data repeatedly, the system identifies and transmits only the incremental changes (new or modified user information). This partial action approach maintains data consistency while significantly reducing network bandwidth consumption and system resource usage.

Inventive Principle:
Principle #16Partial or excessive action

3Ease of operation

If user permissions are managed separately on each cloud platform, then each platform has full control, but security consistency across the hybrid cloud cannot be ensured

Engineering Contradiction:
Improveplatform autonomyVSAvoidsecurity consistency
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements a universal RBAC (Role-Based Access Control) system that serves as a common authorization framework across all cloud platforms in the hybrid cloud. The RBAC system defines standardized user roles and permissions that are recognized by all platforms. Each cloud platform maintains operational autonomy but enforces security decisions based on the unified RBAC model, ensuring consistent security policies while preserving platform independence.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11128630B2User management method and apparatus of hybrid cloud
Publication Date: 2021.09.21 TENCENT TECHNOLOGY (SHENZHEN) CO LTD
  • US11128630B2 patent drawing
  • US11128630B2 patent drawing
  • US11128630B2 patent drawing

AI summary

Embodiments of the present application disclose a user management method and apparatus of a hybrid cloud. The user management method of a hybrid cloud is performed by a management platform of the hybrid cloud. The method includes the steps of: obtaining user data in a role-based access control (RBAC) system; determining, according to a historical record, historical user data that has been distributed to a cloud platform in the hybrid cloud; obtaining incremental data of the user data relative to the historical user data; and sending the incremental data to the cloud platform in the hybrid cloud.