Multi-tenant Multi-session Catalog with Machine-level Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud service providers face challenges in offering machine-level isolation while maintaining cost-effectiveness, as existing solutions either provide high security at a higher cost (private mode) or lower security at lower cost (shared mode), lacking a middle ground that combines both advantages.
Innovation Solution
A method for creating a multi-tenant multi-session catalog that initializes fewer servers than requested, using a common image for virtual servers, and dynamically assigns and reassigns servers based on demand, ensuring machine-level isolation and efficient resource allocation by maintaining an idle pool of unassigned servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private mode is used with separate catalogs for each tenant, then machine-level isolation and security are improved, but cost increases due to requiring more virtual servers
Solution Approach 1:
The patent merges multiple tenant catalogs into a single shared catalog that supports multi-tenant multi-session virtual servers. This allows virtual servers to serve multiple tenants simultaneously while maintaining machine-level isolation through session separation, reducing the total number of servers needed compared to separate private catalogs for each tenant.
Solution Approach 2:
The patent makes virtual servers universal by enabling them to host sessions from multiple tenants simultaneously. A single virtual server can serve multiple tenants with different sessions, making the server multi-functional and reducing the overall quantity of servers required in the infrastructure.
2Quantity of substance
If shared mode is used with a single catalog for multiple tenants, then cost decreases due to higher user density, but machine-level isolation is reduced to only session-level isolation
Solution Approach 1:
The patent segments the shared catalog into tenant-specific sessions within each virtual server. While the catalog itself is shared, the sessions are segmented by tenant, allowing machine-level isolation to be maintained even in a shared environment. This segmentation enables the system to achieve both cost efficiency and security.
Solution Approach 2:
The patent introduces dynamic session assignment where virtual servers can dynamically host sessions from different tenants based on demand. The system can flexibly allocate and reassign sessions across virtual servers while maintaining tenant isolation, enabling both high user density and machine-level security through dynamic resource management.
3Productivity
If a single catalog is used for multiple tenants with dynamic session assignment, then user density and cost efficiency are improved, but session management complexity increases
Solution Approach 1:
The patent implements feedback mechanisms where the system continuously monitors session status, tenant requirements, and virtual server capacity. This feedback enables automatic session assignment and reassignment decisions, managing the complexity of the shared multi-tenant catalog through automated control loops rather than manual management.
Solution Approach 2:
The patent enables the session management system to serve itself by automatically assigning sessions to appropriate virtual servers based on tenant policies and resource availability. The system self-manages the complexity of coordinating multiple tenants across a shared catalog without requiring external intervention, simplifying operations while maintaining high user density.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Methods, systems, and computer-readable media for creating and managing cloud servers and services using a multi-tenant multi-session catalog with machine-level isolation are described herein. In one or more embodiments, a cloud service provider may receive requests from one or more tenants for predefined numbers of servers. The cloud service provider may initialize a plurality of servers, wherein the plurality of servers is less than a sum of the totality of server requests, and create a catalog of unassigned servers of the plurality of servers. Responsive to a logon request from a user of a tenant, the cloud service provider may assign a server from the catalog of unassigned servers to the tenant, remove the server from the catalog of unassigned servers, broker the user of the tenant to connect to the server, and limit access to the server to only users of the tenant.