Multi-Tenant Quorum Network Architecture for Distributed Ledger Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed ledger systems, such as Ethereum, are economically costly to run due to hardware requirements and are typically single-tenant networks, where each entity needs a separate node, preventing resource sharing across entities.
Innovation Solution
A Quorum network is introduced, providing an access-controlled, multi-tenant architecture with state isolation, using an authentication server to manage access and resources, allowing multiple organizations to share nodes while maintaining data segregation and granular access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single-tenant network architecture is used where each entity requires a separate node, then data isolation and security are ensured, but hardware costs and operational expenses increase significantly
Solution Approach 1:
The patent combines multiple tenant entities onto a single shared node infrastructure, allowing resource aggregation while maintaining logical separation of data through namespace isolation mechanisms. This merging approach reduces redundant hardware requirements while preserving data isolation through virtualization techniques.
Solution Approach 2:
The shared node architecture enables a single node to serve multiple tenant entities simultaneously, providing multi-functionality where one infrastructure component handles workloads for multiple organizations. This universal approach allows dynamic resource allocation across different tenants based on demand.
2Loss of energy
If resources are shared across multiple entities on a single node, then operational costs are reduced, but data isolation and access control become more complex
Solution Approach 1:
The patent segments the shared node environment into isolated namespaces for different tenant entities, creating logical partitions that simplify access control. Each namespace acts as an independent container with its own access policies, reducing the complexity of managing permissions across the entire system.
Solution Approach 2:
The patent introduces namespace management mechanisms as intermediaries between the shared node infrastructure and tenant entities. These intermediaries handle access control logic, authentication, and authorization, shielding the complexity from both the infrastructure layer and the tenant applications.
3Ease of operation
If each entity has its own dedicated node, then access control is simplified, but resource utilization efficiency decreases
Solution Approach 1:
The patent merges multiple entity workloads onto shared node infrastructure, improving resource utilization by consolidating underused capacity from individual nodes. This combination maintains simplified access control through namespace-based isolation that provides clear boundaries between entities.
Solution Approach 2:
The patent implements dynamic resource allocation within the shared node environment, allowing resources to be flexibly assigned and reassigned between tenant entities based on current demand. This dynamic approach optimizes resource utilization while maintaining access control through adaptive namespace management.
Data Source
AI summary
A Quorum network comprising an access controlled multi-tenant network is provided that is configured to enable access control and state isolation in a multi-tenancy Ethereum-based distributed ledger system. The access-controlled network includes one or more authenticating servers (also referred to as access controls) for providing permission control to the nodes in the network. In a standard multi-tenant network, each user of an entity (also referred to as an organization) is limited to only transacting with (also referred to as accessing) their own authorized resources. The access-controlled network utilizes an access controller to provide a singular truth for a set of managed nodes through a trusted entity (such as a Network Authorization Server).