Tenant Resource Migration via Intermediary Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques face challenges in integrating and migrating data between services with different tenant structures and resource IDs, particularly when resource IDs overlap during data transfer, leading to difficulties in determining resource prioritization and managing authority during service cooperation.
Innovation Solution
An information processing system and method that determine the presence or absence of a migration-destination tenant and resource, generating new ones if necessary, and migrate data by directly transferring it if the tenant matches or using a dummy resource for secure integration when tenants do not match.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data migration is performed between services with different tenant structures using resource IDs, then data integration can be achieved, but resource ID overlaps cause ambiguity in determining resource prioritization and tenant correspondence
Solution Approach 1:
The patent introduces a migration management server as an intermediary component that mediates between the migration-source service and migration-destination service. This server holds migration management information including tenant correspondence relationships and resource migration status, acting as a mediator to resolve conflicts when resource IDs overlap between different tenant structures. The intermediary coordinates the migration process and determines authoritative tenant-resource relationships.
Solution Approach 2:
The patent performs preliminary actions by establishing tenant correspondence relationships before actual data migration occurs. The migration management server pre-configures which tenants in the destination service correspond to tenants in the source service, and pre-determines resource migration status. This preliminary setup prevents conflicts during migration by having authority relationships established in advance.
2Ease of operation
If resource transfer is performed across services without tenant correspondence, then resource mobility is improved, but security and authority management deteriorate due to inability to verify tenant legitimacy
Solution Approach 1:
The migration management server serves as an intermediary that verifies tenant correspondence relationships during resource transfer. When a resource migration request is made, the server checks whether the migration-destination tenant corresponds to the migration-source tenant through the stored tenant correspondence information. This intermediary verification maintains authentication security while enabling cross-service resource transfer.
Solution Approach 2:
The tenant correspondence relationship mechanism serves multiple functions: it enables resource migration across services, provides authentication verification, manages authority relationships, and resolves resource ID conflicts. This multi-functional approach allows the system to maintain security while facilitating versatile resource transfer operations.
3Productivity
If direct data migration is performed without checking tenant correspondence, then migration speed is improved, but data leakage and unauthorized access risks increase
Solution Approach 1:
The system performs preliminary verification of tenant correspondence relationships before executing data migration. The migration management server checks whether the migration-destination tenant is the authoritative tenant for the target resource using pre-stored tenant correspondence information. This preliminary check ensures security while maintaining migration efficiency by avoiding unnecessary security validations during the actual data transfer.
Solution Approach 2:
The migration management server provides feedback control by verifying tenant correspondence during the migration process. When a migration request is received, the server checks the tenant correspondence relationship and resource migration status, then determines whether to permit the migration. This feedback mechanism prevents unauthorized data leakage while allowing legitimate migrations to proceed efficiently.
Data Source
AI summary
An information processing system determines whether the destination tenant corresponding to the source tenant is present, newly generates the destination tenant if the destination tenant is determined to be absent, and determines whether a destination resource which has the same ID as a source resource included in the source tenant is included in the tenant of the destination service. The system newly generates the destination resource in the destination tenant when the destination resource is determined not to be included in the tenant of the destination service, directly migrates data of the source resource to the destination resource if the tenant including the destination resource is the destination tenant, and migrates the data of the source resource to the destination resource via a dummy resource if the tenant including the destination resource is not the destination tenant.