Network Visualization Service for Virtual Private Network Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing and visualizing large-scale computing resources in data centers is complex due to the increased scale and scope of operations, with conventional tabular/textual formats being inefficient for detecting architectural vulnerabilities and managing virtual private networks.

Innovation Solution

A network visualization service that auto-generates dynamic and interactive graphical displays of clients' virtual private network infrastructures, including compute instances, data storages, databases, and security groups, allowing clients to easily detect vulnerabilities and make configuration changes through interactive diagrams.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If conventional tabular/textual formats are used to manage and visualize computing resources, then data can be stored and organized, but visualization efficiency and vulnerability detection capability deteriorate

Engineering Contradiction:
Improvevisualization efficiencyVSAvoidmanagement complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent creates graphical copies (visual icons) of computing resources instead of using only textual representations. Each resource type (compute instance, data storage, database, security group) is represented by a distinctive graphical icon that can be visually identified and manipulated, transforming abstract data into tangible visual objects that improve comprehension and management efficiency

Inventive Principle:
Principle #26Copying

Solution Approach 2:

The patent transitions from two-dimensional tabular data to a spatial graphical interface where resources are arranged in a visual layout. This adds a spatial dimension to resource management, allowing users to perceive relationships, hierarchies, and connections between resources through their graphical positions and arrangements rather than navigating through text-based tables

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Quantity of substance

If the scale and scope of data centers increase, then computing resources and capabilities expand, but provisioning and management complexity increases

Engineering Contradiction:
Improvecomputing resourcesVSAvoidprovisioning and management ease
Core Design Contradiction:
Quantity of substanceVSEase of operation

Solution Approach 1:

The graphical user interface serves multiple functions simultaneously: it visualizes resources, displays their relationships, enables selection and manipulation, and provides configuration capabilities. This single unified interface replaces multiple separate management tasks and tools, making the system scalable without proportionally increasing management complexity

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The graphical interface acts as an intermediary layer between the user and the complex underlying computing infrastructure. Instead of directly interacting with raw data or configuration files, users interact with visual representations that abstract and simplify the complexity of provisioning and managing large-scale computing resources

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If virtualization technologies are implemented to share computing resources, then resource utilization efficiency improves, but system complexity and configuration management difficulty increase

Engineering Contradiction:
Improveresource utilization efficiencyVSAvoidvirtualization configuration complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent segments the virtualized environment into distinct visual categories represented by different graphical icons (compute instances, data storages, databases, security groups). This segmentation allows users to mentally organize and manage complex virtualized resources by type and function, reducing the cognitive load associated with managing virtualization configurations

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The graphical interface uses color coding to differentiate resource types, states, and properties. Different colors or shading patterns distinguish between various resource categories and can indicate operational status, making it easier to quickly assess and manage virtualized resources without being overwhelmed by configuration details

Inventive Principle:
Principle #32Color changes

Data Source

PatentUS10931506B2Network visualization service
Publication Date: 2021.02.23 AMAZON TECH INC
  • US10931506B2 patent drawing
  • US10931506B2 patent drawing
  • US10931506B2 patent drawing

AI summary

A network visualization service may auto-generate graphical, dynamic, and interactive network diagrams of the infrastructure (resource instances, connections, etc.) of clients' virtual private networks as implemented on a provider network. A network diagram may include representations of various virtualized components of a client's virtual private network, as well as relationships among and connections between and among the various components. The diagram may also display logical and/or geographical groupings of the virtual resources in the client's virtual private network. The service may track changes to the virtual private network and update the diagram accordingly. The diagram may provide a user interface via which the client may select particular graphical objects on diagram to display additional information about a respective resource instance or connection and/or to change the client's virtual private network configuration via the network diagram.