Multi-Cloud CDN Orchestration With Trusted Script Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for orchestrating CDN services through multi-cloud services suffer from low transparency and insufficient trustworthiness, making it difficult for users to audit orchestration behaviors and determine the source of issues when services run below expectations.
Innovation Solution
A method and apparatus for CDN service orchestration in a multi-cloud environment that involves receiving an orchestration script, verifying and storing evidence in a trusted execution environment, generating a unique verification code for a successfully verified script, transmitting it to a designated target object, and returning execution results with the verification code to ensure trustworthiness and transparency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users indirectly orchestrate CDN services through a multi-cloud service, then service management becomes simplified, but transparency and trustworthiness of the orchestration process deteriorates
Solution Approach 1:
The patent introduces a multi-cloud service as an intermediary layer between users and multiple cloud service providers. This intermediary orchestrates CDN services from multiple providers while maintaining a unified interface for users, thus simplifying service management while preserving transparency through the intermediary's control and visibility of the orchestration process.
Solution Approach 2:
The patent implements feedback mechanisms where the multi-cloud service receives execution results from cloud service providers and returns them to users. This feedback loop ensures transparency by allowing users to verify the orchestration process and outcomes, maintaining trustworthiness while benefiting from simplified management through the intermediary.
2Ease of operation
If users indirectly orchestrate CDN services through a multi-cloud service, then service management becomes simplified, but the ability to audit orchestration behaviors deteriorates
Solution Approach 1:
The multi-cloud service acts as an intermediary that maintains visibility into the orchestration process. It receives orchestration scripts from users, manages their execution across multiple cloud providers, and returns results to users. This intermediary role enables simplified management while preserving audit capabilities through the centralized control and information flow.
Solution Approach 2:
The patent ensures continuous information flow throughout the orchestration process. The multi-cloud service continuously receives scripts, executes them across providers, and returns results, maintaining an unbroken chain of information that enables both simplified management and auditability through continuous visibility of the orchestration actions.
3Adaptability or versatility
If services are orchestrated through multiple cloud providers, then service versatility improves, but the ability to determine issue sources deteriorates
Solution Approach 1:
The multi-cloud service serves as an intermediary that coordinates services from multiple cloud providers. When issues occur, the intermediary maintains records of which scripts were executed against which providers, enabling users to identify issue sources while still benefiting from the versatility of multi-provider service orchestration.
Solution Approach 2:
The patent segments the orchestration process into distinct components: user-submitted scripts, provider-specific executions, and returned results. This segmentation allows users to trace issues to specific providers or script components while maintaining the overall versatility of orchestrating services across multiple cloud providers through the unified multi-cloud service interface.
Data Source
AI summary
The present disclosure proposes a method and an apparatus, a device, and a storage medium for CDN service orchestration in a multi-cloud environment. The method includes: receiving a first orchestration script, where the first orchestration script is used for orchestrating a content delivery network CDN service provided by a plurality of target objects; verifying and storing evidence of the first orchestration script in a trusted execution environment; generating, in the trusted execution environment, a unique verification code corresponding to a second orchestration script, where the second orchestration script is an orchestration script that is successfully verified in the first orchestration script; transmitting the second orchestration script to a designated target object, and receiving an orchestration execution result returned by the designated target object; and transmitting the orchestration execution result and the unique verification code to a sender of the first orchestration script.