RBAC Telemetry Catalog for Secure Cluster Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing telemetry architectures in distributed cluster networks are inflexible and do not allow for dynamic addition of new metric data sets, data producers, or consumers, and often transmit telemetry data to all users without considering data sensitivity and access control.
Innovation Solution
Implementing a subscription-based telemetry system with role-based access control (RBAC) to enable dynamic registration of new metrics, optimize data collection, and enforce access controls based on user roles, ensuring secure and flexible dissemination of telemetry data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If telemetry data is transmitted to all users, then data availability is improved, but data security deteriorates
Solution Approach 1:
The patent implements role-based access control (RBAC) where different user roles are assigned different permission levels for accessing telemetry data. The system evaluates each user's role and dynamically filters the catalog of available metric data sets, ensuring that each user receives only the telemetry data appropriate to their authorization level. This resolves the contradiction by providing full data availability to authorized users while restricting access to sensitive data for unauthorized users.
2Stability of the object's composition
If the telemetry architecture is fixed, then system stability is improved, but adaptability deteriorates
Solution Approach 1:
The patent introduces a dynamic catalog system where the availability of metric data sets is not fixed but changes based on the user's role and authorization level. The system dynamically evaluates user credentials against RBAC rules and adjusts the catalog accordingly, allowing new metric data sets to be added and made available to appropriate users without system reconfiguration. This resolves the contradiction by maintaining system stability through structured RBAC while enabling adaptability through dynamic catalog generation.
3Object-affected harmful factors
If access control is implemented, then data security is improved, but system complexity deteriorates
Solution Approach 1:
The patent introduces an intermediary catalog generation mechanism that sits between the telemetry data source and the user interface. This catalog acts as a mediator that automatically evaluates user roles, applies RBAC rules, and filters the appropriate metric data sets for each user. This intermediary layer handles the complexity of access control logic centrally, preventing it from propagating through the entire system and simplifying the overall architecture while maintaining strong security controls.
Data Source
AI summary
A telemetry processing system in a cluster network generates telemetry data from a plurality of telemetry producers and formats it into a structured format for storage in a datastore. Users of the telemetry data are mapped to specific role-based access control (RBAC) rules per an identity and management (LAM) module. This mapping is stored in a dynamic RBAC-based telemetry catalog for further rules checking as telemetry data is generated. This adds a second layer above user subscription terms to safeguard the security of telemetry data based on RBAC rules, and allows the system to define conditions under which certain users can receive certain types of telemetry data in an efficient and dynamic manner.