Location-Based Management Access for Hyper-Converged Infrastructure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud-based management tools for hyper-converged infrastructure systems face challenges in securely managing on-premises and off-premises operations, requiring administrators to be physically present or connected via VPN for sensitive tasks due to security constraints.
Innovation Solution
An information handling system that determines whether an administrator device is on-premises or off-premises to provide access to a selected set of management operations, allowing secure management from both locations by saving credentials locally and executing sensitive commands on-premises.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cloud-based management tools are accessed from off-premises locations via public networks, then administrator flexibility and remote management capability are improved, but security risk increases due to exposure of sensitive operations to untrusted networks
Solution Approach 1:
The patent segments management operations into two categories: sensitive operations that require on-premises execution and non-sensitive operations that can be executed remotely. The system detects the administrator's location and dynamically enables or disables specific operations based on this segmentation, allowing remote access for routine tasks while restricting sensitive tasks to on-premises environments only.
Solution Approach 2:
The patent introduces an intermediary mechanism (location detection system and operation restriction module) that mediates between the administrator's remote access request and the sensitive operations. This intermediary detects whether the administrator is on-premises or off-premises and selectively blocks or allows specific operations, thereby enabling secure remote management without exposing sensitive operations to untrusted networks.
2Object-affected harmful factors
If administrators must be on-premises to perform sensitive operations, then security is improved, but administrator flexibility and remote management capability deteriorate
Solution Approach 1:
The patent implements dynamic operation availability based on administrator location. The system continuously detects whether the administrator is on-premises or off-premises and dynamically adjusts which operations are available. When on-premises, all operations including sensitive ones are available; when off-premises, only non-sensitive operations are available. This dynamic adjustment maintains security while maximizing administrator flexibility based on location context.
3Ease of operation
If cloud-based management tools allow remote execution of sensitive operations, then administrator convenience is improved, but system security deteriorates due to credential exposure risks
Solution Approach 1:
The patent performs preliminary location detection before allowing access to sensitive operations. The system detects the administrator's location in advance and prevents access to sensitive operations from off-premises locations before any credential input or operation execution can occur. This preliminary action blocks potential security risks before they can materialize, while still allowing convenient remote access for non-sensitive operations.
Data Source
AI summary
An information handling system may include at least one processor and a memory. The information handling system may be configured to: receive a management request from an administrator device regarding management of a remote information handling system located at a particular datacenter; and provide the administrator device access to a selected set of management operations, wherein the set is selected based on a determination of whether or not the administrator device is on-premises at the particular datacenter.