Secure Workspace Copy-On-Write I/O Prioritization Under Quota
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing quota systems for copy-on-write layers in secure workspaces often lead to resource allocation imbalances, where high-resource-consuming applications hinder the proper functioning of other applications, degrading the user experience.
Innovation Solution
Implementing a priority filter that evaluates I/O requests and prioritizes high-priority writes over lower-priority writes, using a queue to store lower-priority requests until high-priority requests are serviced, ensuring that high-priority applications maintain resource access even when quotas are reached.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If a quota is defined for copy-on-write layers to prevent excessive consumption of host computing device resources, then resource consumption is controlled, but resource allocation imbalances occur where high-resource-consuming applications hinder other applications from functioning properly
Solution Approach 1:
The patent applies local quality by assigning different priority levels (high, normal, low) to different applications or workloads within the secure workspace. This allows the system to treat different applications differently regarding quota consumption, ensuring that critical applications maintain adequate resources while less critical applications share remaining resources. The priority filter evaluates each I/O request and applies appropriate priority handling, resolving the contradiction between controlling overall resource consumption and ensuring individual application reliability.
2Quantity of substance
If multiple secure workspaces are deployed on a user computing device with a defined quota for copy-on-write layers, then overall resource usage is limited, but one secure workspace may consume most of the quota leaving other secure workspaces with insufficient resources to function properly
Solution Approach 1:
The patent implements dynamics by making the quota allocation adaptive rather than static. The priority filter dynamically evaluates I/O requests based on application priority levels and adjusts resource allocation in real-time. When high-priority applications need resources, the system can temporarily allocate more to them even when the overall quota is approaching its limit, while still maintaining the quota constraint. This dynamic approach allows the system to respond to varying workload conditions and ensure that critical applications function properly across multiple secure workspaces.
3Quantity of substance
If a single secure workspace hosts multiple applications with a defined quota for copy-on-write layers, then the workspace is resource-constrained, but one application may consume most of the quota preventing other applications from functioning properly
Solution Approach 1:
The patent applies local quality at the application level within a single secure workspace by assigning different priority levels to different applications. The priority filter then applies differentiated quota management policies, allowing high-priority applications to access copy-on-write layer resources more aggressively while limiting low-priority applications. This resolves the contradiction by ensuring that application performance for critical applications is maintained while still enforcing the overall quota constraint on the workspace.
Data Source
AI summary
Quality of service for secure workspaces having copy-on-write layers is provided. A priority filter can be loaded above an isolation filter and can be configured to evaluate I/O requests targeting copy-on-write layers to determine a priority of each I/O request. The priority filter can allow a high priority I/O request to be serviced immediately. In contrast, the priority filter can store a lower priority I/O request in a queue until high priority I/O requests have been serviced. In this way, an application in a secure workspace assigned a high priority will retain the ability to write data to its copy-on-write layer even when the copy-on-write layer is limited by a quota and other applications in the same or different secure workspace are consuming the quota.