Virtual IP Addressing for Multi-User Server Session Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In multi-user server systems, the use of a single IP address for multiple users leads to difficulties in distinguishing between user sessions, causing issues with network firewall operations and logging, as well as potential communication problems with applications like instant messaging, where users may appear to have the same IP address.

Innovation Solution

Implementing virtual IP addresses and virtual network adapters, where each user session is assigned a unique IP address, allowing each user to have individual network communication, with the operating system and application sessions interacting through a network handler that redirects requests to virtual network adapters for distinct IP address management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a single IP address is used for multiple users in a multi-user server system, then network resource sharing is simplified and device complexity is reduced, but user session differentiation becomes impossible and network logging accuracy deteriorates

Engineering Contradiction:
Improvenetwork configuration complexityVSAvoiduser session identification accuracy
Core Design Contradiction:
Device complexityVSMeasurement precision

Solution Approach 1:

The patent segments the single IP address into multiple virtual IP addresses, each assigned to a specific user session. The network adapter is divided into multiple virtual network adapters, where each virtual network adapter is associated with a particular user session and has its own unique IP address. This segmentation enables precise identification of user sessions while maintaining the simplicity of network resource sharing through virtualization.

Inventive Principle:
Principle #1Segmentation

2Measurement precision

If virtual IP addresses and virtual network adapters are implemented for each user session, then user session identification accuracy and network logging precision are improved, but device complexity and system resource consumption increase

Engineering Contradiction:
Improveuser session identification accuracyVSAvoidnetwork adapter complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent creates virtual copies of the network adapter for each user session. Each virtual network adapter is a software-based copy that emulates the functionality of a physical network adapter but operates in a virtualized environment. These virtual copies allow multiple user sessions to have their own unique IP addresses and network identities without requiring additional physical hardware, thus improving identification accuracy while managing complexity through software virtualization.

Inventive Principle:
Principle #26Copying

3Adaptability or versatility

If multiple virtual network adapters are created for different user sessions, then network communication differentiation between users is improved, but system resource consumption and processing overhead increase

Engineering Contradiction:
Improvenetwork communication flexibilityVSAvoidsystem processing energy
Core Design Contradiction:
Adaptability or versatilityVSUse of energy by moving object

Solution Approach 1:

The patent implements a multi-functional network adapter architecture where a single physical network adapter serves multiple user sessions through virtualization. The network adapter is designed to handle multiple virtual network interfaces simultaneously, allowing it to perform multiple functions (servicing different user sessions) with a single hardware component. This universality provides network communication flexibility for differentiated user sessions while reducing the need for additional physical hardware resources.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS8005962B2System and method for using virtual IP addresses in a multi-user server system
Publication Date: 2011.08.23 NCOMPUTING GLOBAL INC
  • US8005962B2 patent drawing
  • US8005962B2 patent drawing
  • US8005962B2 patent drawing

AI summary

A method of handling network access in a multi-user server system is disclosed. In the disclose system, a virtual network adapter is created for each user session on the multi-user server system. Each virtual network adapter receives its own independent IP address such that each individual user session appears to be a unique network node to other systems on the computer network.