Stateful Cloud Session Mapping via Unique Identifier
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud computing systems lack secure and consistent access to stateful content across different devices, as they do not maintain a stable connection between client devices and stateful hosts, leading to inconsistencies in user experience and content behavior.
Innovation Solution
A method is introduced to establish a secure communication session between a client device and a stateful host by generating a unique identifier for the client device, using it to instantiate a stateful host on a virtual machine, and creating a name-value pair with the host's internet protocol address, ensuring a one-to-one mapping for consistent access and reconnection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a stateful backend service maintains all information about content to enable secure access across devices, then security and content consistency are improved, but system complexity and connection management difficulty increase
Solution Approach 1:
The patent introduces a gateway as an intermediary component that manages connections between client devices and stateful backend services. The gateway receives requests from clients, establishes connections to the appropriate stateful services, and handles reconnection logic. This intermediary abstracts the complexity of maintaining persistent connections from both the client and the backend service, allowing the stateful service to focus on content consistency while the gateway handles connection management overhead.
2Ease of operation
If a one-to-one mapping is created between client device and stateful host to ensure consistent access, then user experience consistency is improved, but system scalability and resource utilization deteriorate
Solution Approach 1:
The patent implements dynamic connection management where the one-to-one mapping between client devices and stateful hosts is not fixed but can be dynamically established and torn down. When a client needs access, a dedicated stateful host is instantiated or assigned. When the client disconnects or the session ends, the mapping is released and resources are freed. This dynamic approach maintains the benefits of consistent access during active sessions while allowing the system to scale efficiently by sharing backend resources across multiple clients at different times.
3Reliability
If secure authentication and authorization mechanisms are implemented to protect cloud content, then security is improved, but authentication overhead and access time increase
Solution Approach 1:
The patent implements preliminary authentication and authorization by establishing secure credentials before the client device accesses the stateful backend service. During the initial connection phase, the gateway authenticates the client and obtains authorization tokens. These credentials are cached and validated for subsequent connections, eliminating the need for repeated full authentication cycles. This preliminary action ensures security is maintained while reducing authentication overhead for ongoing access to cloud content.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Aspects of the present disclosure relate to establishing a secure session between a client device and a stateful backend server or host. The system described herein uses an identity token and an authorization token to generate a globally unique identifier that is associated with the client device. The globally unique identifier is then used to create a one-to-one mapping between the client device and the backend server.