Multi-Path I/O Driver Authorization With Usage-Based Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access authorization models for multi-path input-output drivers in storage systems are prone to inefficiencies, such as access authorization wastage, leakage, and tight coupling, leading to disruptions and performance issues in production environments.
Innovation Solution
Implement a usage-based access authorization system that obtains and manages access authorization from an external server, monitors usage, and dynamically adjusts provisioning based on actual usage, ensuring efficient and flexible licensing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional access authorization models are used for multi-path input-output drivers, then access control is implemented, but access authorization wastage and leakage occur
Solution Approach 1:
The patent implements dynamic access authorization that adjusts provisioning based on actual usage patterns. The system monitors usage metrics and dynamically modifies authorization levels, transitioning from static to dynamic control to prevent both wastage and unauthorized access.
Solution Approach 2:
The system incorporates feedback mechanisms that continuously monitor usage of access authorizations and feed this information back to the authorization management system. This enables real-time adjustments to prevent wastage while maintaining security, as the system learns from actual usage patterns.
2Reliability
If traditional access authorization models are used for multi-path input-output drivers, then access control is implemented, but leakage occurs
Solution Approach 1:
The system enables self-service monitoring and reporting capabilities where the multi-path input-output drivers themselves report their usage patterns. This distributed self-monitoring approach reduces centralization points that could be vulnerable to leakage while maintaining comprehensive control.
3Reliability
If traditional access authorization models are used for multi-path input-output drivers, then access control is implemented, but tight coupling occurs leading to disruptions
Solution Approach 1:
The patent segments the access authorization system into independent modular components: authorization issuance, usage monitoring, and provisioning modification. This segmentation reduces tight coupling between components, allowing independent failure modes without system-wide disruptions while maintaining comprehensive control.
Solution Approach 2:
The system introduces intermediary layers between access authorization and multi-path drivers that buffer and decouple direct dependencies. These intermediaries absorb shocks and prevent disruptions from propagating through the entire system, reducing overall coupling complexity.
4Productivity
If usage-based access authorization is implemented, then access authorization efficiency is improved, but monitoring and management complexity increases
Solution Approach 1:
The multi-path input-output drivers incorporate self-monitoring capabilities that automatically track and report their own usage patterns. This self-service approach eliminates the need for external monitoring infrastructure, improving efficiency while managing complexity through distributed intelligence.
Solution Approach 2:
The system implements universal monitoring and management mechanisms that handle multiple functions through standardized interfaces. The same infrastructure that provides usage-based authorization also handles monitoring, reporting, and provisioning, reducing overall system complexity despite increased functionality.
Data Source
AI summary
An apparatus comprises a processing device configured to obtain, from an access authorization server, a usage-based access authorization for software associated with controlling delivery of input-output operations to a storage system over selected ones of a plurality of paths through a network. The processing device is also configured to provision access authorization for the software to multi-path input-output drivers of a plurality of host devices. The processing device is further configured to receive, from the multi-path input-output drivers, usage information characterizing usage by the host devices of the software over a designated time period. The processing device is further configured to modify the provisioning of the access authorization for the software to the multi-path input-output drivers responsive to determining that the usage of the software by the host devices over the designated time period exceeds an allowable amount of usage specified in the usage-based access authorization.


