Storage Array Mediator for Secure Server Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional server management platforms face significant security risks due to the need for credential exchanges between management servers and production servers, making them vulnerable to intrusions that can lead to data theft or negative impacts on the enterprise environment.
Innovation Solution
Implementing a system that uses a storage array to receive hardware information from production servers via multipath input/output (MPIO) modules, eliminating the need for additional credential exchanges and securely communicating this information to a management server over a fiber channel, allowing for secure management of production servers without exposing credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional server management platforms use credential exchanges between management servers and production servers, then management functionality can be achieved, but security risks increase due to vulnerability to intrusions and data theft
Solution Approach 1:
The patent introduces a storage array as an intermediary component that receives hardware information from production servers via MPIO modules and forwards it to management servers. This intermediary eliminates the need for direct credential exchanges between management servers and production servers, thereby resolving the security vulnerability while maintaining management functionality. The storage array acts as a trusted mediator that handles information transmission without requiring sensitive credentials to be exposed.
2Ease of operation
If credential exchanges are implemented for server management, then management operations can be performed, but the system becomes vulnerable to intrusions leading to data theft
Solution Approach 1:
The storage array serves as a secure intermediary that enables management operations without requiring vulnerable credential exchanges. By routing hardware information through the storage array's MPIO modules, the system maintains ease of management operations while eliminating the security vulnerability associated with direct credential-based communication between management servers and production servers.
3Productivity
If direct communication channels are used between management servers and production servers, then management efficiency is improved, but security exposure increases
Solution Approach 1:
The storage array with MPIO modules provides an efficient intermediary communication path that maintains management productivity while enhancing security protection. The MPIO architecture enables high-performance data transmission through multiple paths, ensuring management efficiency is preserved while the intermediary nature of the storage array prevents direct security exposure between management servers and production servers.
Data Source
AI summary
Systems and methods for managing a production server using a storage array. In an illustrative, non-limiting embodiment, a storage array may include a memory coupled to a processor, the memory having program instructions configured to cause and/or enable the storage array to: receive hardware information from a multipath input/output (MPIO) module of each of a plurality of production servers in communication with the storage array; provide the hardware information to a management server in communication with the storage array; receive a command from the management server targeting a selected production server; and transmit the command to a selected MPIO module of the selected production server.