Micro-Cloud Application Management via Lifecycle Communication Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Micro-cloud environments pose challenges in application management due to communication restrictions between cloud sites and application execution sites, rendering traditional cloud solutions ineffective for managing applications that encounter failures or require maintenance.

Innovation Solution

The method involves identifying specific points in the application life cycle where communication is allowed between distributed administrative domains, using a user-provided filtering script and a provider-provided management script to validate and obtain management-specific information, and performing management functions at these points to ensure efficient application management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If firewalls are implemented to separate cloud site and application execution site, then data security and administrative domain separation are improved, but communication capability and application management capability deteriorate

Engineering Contradiction:

Improvedata securityVSAvoidapplication management capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system segments communication into different phases: setup phase (where full communication is allowed for configuration) and execution phase (where firewalls are enforced). This segmentation allows security to be maintained during execution while enabling management operations during setup. The management operations are divided into discrete tasks that can be performed at specific lifecycle points.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system performs preliminary actions during the setup phase where communication is permitted. Management tasks such as configuration, monitoring setup, and initial application deployment are completed before the firewall is enforced. This preliminary action ensures that all necessary management capabilities are established before security restrictions take effect.

Inventive Principle:

Principle #10Preliminary action

2Ease of operation

If communication is allowed between distributed administrative domains, then application management capability is improved, but data security and administrative domain separation deteriorate

Engineering Contradiction:

Improveapplication management capabilityVSAvoiddata security

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system applies different communication policies to different phases of the application lifecycle. During setup phase, communication is permitted for management operations. During execution phase, communication is restricted by firewalls. This local quality approach allows security and management needs to be satisfied at appropriate times without compromising either goal.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system uses an intermediary approach where management operations are performed through defined interfaces and protocols during the setup phase. The firewall acts as an intermediary that blocks direct communication during execution but allows structured management interactions during setup. This intermediary mechanism enables controlled information exchange without compromising security.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of manufacture

If traditional cloud management solutions are used in micro-cloud environments, then implementation simplicity is improved, but effectiveness in managing applications with communication restrictions deteriorates

Engineering Contradiction:

Improveimplementation simplicityVSAvoidmanagement effectiveness

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The system dynamically adapts management operations to the micro-cloud environment's communication constraints. Management tasks are scheduled and executed at specific lifecycle points when communication is permitted. The system transitions between states of full communication (setup) and restricted communication (execution), making the management approach dynamic rather than static to match the environment's capabilities.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS10623276B2Monitoring and management of software as a service in micro cloud environments

Publication Date: 2020.04.14 INTERNATIONAL BUSINESS MACHINE CORPORATION

AI summary

Techniques for monitoring and managing applications in an environment with distributed administrative domains (such as a micro-cloud environment) are provided. In one aspect, a method for managing an application in an environment with distributed administrative domains includes the steps of: identifying points in a life cycle of the application where communication is allowed between the distributed administrative domains; obtaining, by the provider, management specific information for the application at the points identified in the life cycle of the application where communication is allowed between the distributed administrative domains, wherein the obtaining is performed using a filtering script provided by the user and a management script provided by the provider to validate that the management specific information conforms to a predetermined information exchange criteria; and performing management functions using the management specific information.