VDI Controller Policy Assignment for Privilege-Based Resource Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtual desktop infrastructure (VDI) systems, it is challenging to provide an optimized resource sharing mechanism based on user privileges due to dynamic workloads and shared resources among virtual machines accessed by users with varying levels of access.
Innovation Solution
A system and method where a VDI controller, connected to a VM server, authenticates user login requests, retrieves user and device information, and determines a specific policy for each user based on their privileges, group membership, and device type to allocate virtual machines, thereby managing permission states for functionalities like audio redirection, USB access, and network security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If resources are shared among all virtual machines in a VDI system, then resource utilization efficiency is improved, but it becomes difficult to provide optimized resource allocation based on user privileges
Solution Approach 1:
The patent applies local quality by differentiating resource allocation policies for different user groups. Instead of uniform resource sharing, the system implements privilege-based policies where privileged users receive higher resource priorities and ordinary users receive standard priorities. This allows optimized resource allocation tailored to specific user needs while maintaining overall resource sharing, thus resolving the contradiction between efficiency and adaptability.
Solution Approach 2:
The patent implements dynamic resource allocation where resource priorities are not fixed but adjusted based on user login events and privilege levels. The VDI controller dynamically assigns resource priorities to virtual machines based on real-time user authentication results and privilege information. This dynamic approach enables the system to adapt resource allocation to current user needs while maintaining efficient resource sharing across the VDI infrastructure.
2Reliability
If privileged users are assigned dedicated high-end hardware, then their performance is improved, but resource sharing and system efficiency deteriorate
Solution Approach 1:
The patent uses virtualization to create virtual copies of hardware resources that can be dynamically allocated. Instead of assigning physical hardware exclusively to privileged users, the system creates virtual hardware instances through the VDI controller that provide the necessary performance guarantees. These virtual resources are copied from the shared physical infrastructure, allowing privileged users to receive high performance while the underlying physical resources remain shared and efficient.
Solution Approach 2:
The patent changes the parameter of resource allocation from static physical assignment to dynamic virtual assignment with adjustable priority levels. The VDI controller modifies resource allocation parameters based on user privilege levels, assigning higher resource priorities to privileged users and lower priorities to ordinary users. This parameter-based control allows performance optimization for privileged users without sacrificing overall resource sharing efficiency, as the same physical resources are allocated differently based on dynamic parameters.
3Ease of operation
If resource allocation is optimized based on user privileges, then user experience is improved, but system complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-defining resource priority levels and policy rules before user login. The system establishes a framework of privileged user policies and ordinary user policies in advance, with predetermined resource priority assignments. When users log in, the VDI controller simply matches the user against these pre-defined policies rather than performing complex real-time optimization. This preliminary structuring improves user experience through consistent privilege-based allocation while minimizing system complexity during runtime operations.
Data Source
AI summary
Systems and methods for determination of a policy in a virtual desktop infrastructure (VDI) system. The system includes a virtual machine (VM) server providing VMs, and a VDI controller connected to the VM server. When the VDI controller receives a login request by a user from a computing device, the VDI controller authenticates the login request, and controls the VM server to assign one of the VMs to the computing device. In doing so, the VDI controller may obtain user information corresponding to the user and device information corresponding to the computing device based on the login request, and retrieve VM information of the VM being assigned to the computing device. Then the VDI controller may determine, from a plurality of policies, a specific policy for the user based on the user information, the device information and the VM information to define permission states of functionalities provided by the VM.