Proxy Command System for Secure Remote Datacenter Management

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing datacenter management systems face challenges in secure, remote execution of operations due to the generic nature of conventional approaches like Remote PowerShell, which introduces significant costs and complexity in customizing for specific performance and security needs.

Innovation Solution

A system and method utilizing a Representational State Transfer (RESTful) interface to enable secure, remote management of datacenters by generating and deploying proxy commands based on PowerShell cmdlet code, allowing administrators to execute datacenter management operations from a remote workstation with user authentication and authorization via a RESTful service.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional Remote PowerShell is used for remote datacenter management, then a local prompt can be executed on remote machines, but significant costs and complexity are introduced when customizing it to support specific performance and security needs

Engineering Contradiction:

Improveremote management capabilityVSAvoidcustomization complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent creates proxy commands that are local copies of remote PowerShell commands. These proxy commands are generated from the remote PowerShell command definitions and deployed to client machines, allowing local execution that automatically translates to remote execution without requiring full Remote PowerShell customization

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent extracts the essential command functionality from the full Remote PowerShell environment and creates simplified proxy commands that contain only the specific management operations needed. This extraction eliminates the complexity of the complete Remote PowerShell framework while retaining the necessary remote management capabilities

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If firewalls and high level authorization are implemented to secure the datacenter, then security is improved, but it becomes very difficult to operate on the datacenter remotely and access the command-line shell and scripting language commands

Engineering Contradiction:

ImprovesecurityVSAvoidremote access ease

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a proxy command system as an intermediary between the client and the secured datacenter. The proxy commands are executed locally and automatically forward requests through the secure RESTful interface, bypassing the need for direct access to the command-line shell while maintaining security protocols

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces the mechanical system of direct remote shell access with an automated proxy command execution system. Instead of requiring manual connection through firewalls and authentication, the system uses structured proxy commands that are automatically translated and executed through secure API endpoints

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Productivity

If a remoting session is established for remote PowerShell execution, then commands can be executed remotely, but the need for remoting sessions increases system complexity and potential failure points

Engineering Contradiction:

Improveremote command executionVSAvoidsession management complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The patent creates local proxy command copies that replicate the functionality of remote PowerShell commands without requiring actual remote sessions. These proxies are self-contained and execute locally, eliminating the need for persistent or temporary remoting session infrastructure

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent performs preliminary action by pre-generating and deploying proxy commands to client machines before execution is needed. This advance preparation eliminates the need for runtime session establishment, reducing complexity and potential failure points while maintaining execution capability

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12143392B2System and method to securely execute datacenter management operations remotely

Publication Date: 2024.11.12 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

Disclosed in various examples are methods, systems, and machine-readable media for exposing a Representational State Transfer (RESTful) interface to users whereby management commands on a datacenter may be issued remotely from the users' workstations for secure, remote management of the datacenter. An application task automation command (e.g., a POWERSHELL® command) is executed remotely by creating a proxy command (e.g., based on a POWERSHELL® cmdlet code) to cause the application task automation command to be executed when the proxy command is remotely invoked and deploying the proxy command to a remote computer, such as the user's workstation. The remote computer issues a request including a user identifier and any parameters for the application task automation command when the corresponding proxy command has been invoked by the remote computer. The datacenter determines whether the user is authorized to execute the application task automation command invoked by the proxy command, and upon authorization of the user, the datacenter computer runs the application task automation command with any parameters provided in the request to control configuration of, or data stored on, at least one computer in the datacenter.