Logical Network Configuration Manager for Programmatic Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems lack an efficient method for programmatically configuring logical networks that allow remote client devices to communicate securely and manage user permissions across distributed computing environments, including cloud and grid computing setups.

Innovation Solution

A system comprising a logical network configuration manager, user manager, and gateway service that enables programmatic creation and management of logical networks, user accounts, and secure communication tunnels using protocols like IPsec and AAA services, allowing remote access and authentication across various networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If manual configuration methods are used for logical networks, then system complexity is reduced, but productivity and ease of operation deteriorate due to time-consuming manual setup

Engineering Contradiction:
Improvenetwork configuration speedVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system enables self-service through automated programmatic interfaces that allow users to independently configure logical networks, user accounts, and permissions without requiring manual intervention from system administrators. The configuration manager automatically processes service calls and applies settings, eliminating time-consuming manual setup while maintaining manageable system complexity through standardized automation protocols.

Inventive Principle:
Principle #25Self-service

2Productivity

If automated programmatic interfaces are implemented, then productivity improves, but device complexity increases due to additional configuration components

Engineering Contradiction:
Improveconfiguration automation efficiencyVSAvoidconfiguration system complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The configuration manager serves multiple functions through a single unified interface: it manages logical network creation, user account provisioning, permission configuration, and tunnel establishment. This multi-functionality consolidates what would otherwise require separate complex systems into one automated component, improving productivity while containing overall system complexity through functional integration.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The configuration manager acts as an intermediary layer between users and the underlying network infrastructure. It receives programmatic service calls from users and translates them into appropriate configuration actions across multiple subsystems (network settings, user databases, permission systems). This intermediary approach shields users from underlying complexity while enabling automated high-productivity configuration.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If secure authentication protocols are implemented, then reliability improves, but ease of operation deteriorates due to additional authentication steps

Engineering Contradiction:
Improveauthentication securityVSAvoiduser access convenience
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

User credentials and permissions are pre-configured and stored in the system database before users need access. When users initiate connection requests, the configuration manager performs automated authentication against these pre-established credentials without requiring users to manually configure security settings or undergo complex authentication procedures. This preliminary setup maintains high security reliability while preserving ease of operation during actual access.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP2748715B1Techniques for accessing logical networks via a programmatic service call
Publication Date: 2017.04.12 AMAZON TECH INC
  • EP2748715B1 patent drawing
  • EP2748715B1 patent drawing
  • EP2748715B1 patent drawing

AI summary

Disclosed are various embodiments for configuring logical networks. A client makes a request, through a service call, for creation of a logical network, including a logical network gateway and accounts for users to access the logical network gateway. In response to the service call, the logical network is created and configured, and a confirmation is provided to the client.