Task Allocation in Hybrid Cloud Environments

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Businesses face challenges in balancing cost and security when deploying workloads in hybrid cloud environments, as they need to decide between on-premise infrastructure for control and security, and public clouds for agility, without effective methods to manage task allocation efficiently across different environments.

Innovation Solution

A computer-implemented method and system for allocating tasks in a computing environment that analyzes tasks for security markers and cost, splitting them between environments with and without homomorphic encryption to optimize processing based on security levels and cost considerations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If tasks are processed in public cloud environments, then cost and agility are improved, but security and control deteriorate

Engineering Contradiction:
ImprovecostVSAvoidsecurity
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent segments tasks into different categories based on security requirements (encrypted tasks, unencrypted tasks, tasks requiring homomorphic encryption). This segmentation allows each task to be processed in the most appropriate environment, optimizing both cost and security for each specific task type.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent applies different processing environments to different tasks based on their specific security needs. Tasks with security markers are processed in homomorphic encryption environments, while tasks without security markers are processed in standard cloud environments, ensuring each task receives the appropriate level of security and cost optimization.

Inventive Principle:
Principle #3Local quality

2Reliability

If tasks are processed in on-premise environments, then security and control are improved, but cost and flexibility deteriorate

Engineering Contradiction:
ImprovesecurityVSAvoidcost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The system segments tasks based on security requirements and routes them to appropriate environments. Tasks requiring high security are processed in on-premise or homomorphic encryption environments, while non-sensitive tasks are processed in public cloud environments to reduce costs.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements dynamic task allocation that can adapt to changing security requirements and cost conditions. The system can dynamically decide whether to process tasks locally or in the cloud based on current security needs and cost considerations, providing flexibility while maintaining security.

Inventive Principle:
Principle #15Dynamics

3Reliability

If homomorphic encryption is applied to all tasks, then security is improved, but processing cost and complexity increase

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Homomorphic encryption is applied only to specific tasks that have security markers indicating they require encrypted processing. Tasks without security markers are processed using standard, less complex methods, thereby reducing overall processing complexity while maintaining security where needed.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

Instead of applying homomorphic encryption to all tasks (excessive action), the patent applies it only to the extent necessary for tasks with security requirements (partial action), optimizing the balance between security and processing complexity.

Inventive Principle:
Principle #16Partial or excessive action

4Ease of manufacture

If task allocation is optimized for cost, then economic efficiency is improved, but security compliance may deteriorate

Engineering Contradiction:
Improvecost efficiencyVSAvoidsecurity compliance
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The system incorporates feedback mechanisms that monitor task security requirements and adjust allocation decisions accordingly. The algorithm considers both cost and security compliance when making allocation decisions, using feedback from security marker analysis to ensure compliant task placement while optimizing costs.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

Tasks are segmented based on security compliance requirements, allowing the system to allocate tasks to cost-effective environments that still meet security standards. This segmentation enables the system to identify which tasks can be processed in lower-cost public cloud environments versus those requiring more secure (and potentially more expensive) environments.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10761887B2Allocating tasks in a computing environment
Publication Date: 2020.09.01 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US10761887B2 patent drawing
  • US10761887B2 patent drawing
  • US10761887B2 patent drawing

AI summary

Method of allocating tasks in a computing environment including: receiving a software application having tasks for processing; splitting the software application into the tasks; selecting a task for processing in a first computing environment without encryption, a second computing environment with homomorphic encryption or a third computing environment without encryption based on the following algorithm: analyzing the tasks for the presence of a security marker indicating a security level of the tasks; when there is no security marker, selecting the task for processing in the least costly of first computing environment without encryption or the third computing environment without encryption; and when the security marker is present and the processing of the task involves any computation, selecting the task for processing in the least costly of the second computing environment with homomorphic encryption or the third computing environment.