Virtual Server Network Authentication Automation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The existing virtual server systems require significant administrative effort for network configuration and authentication of virtual machines, leading to potential sharing of sensitive information and reduced mobility of virtual systems between servers.

Innovation Solution

Implementing a virtual server that performs network authentication on behalf of hosted virtual systems using a RADIUS server, impersonating their physical addresses to configure network devices and manage access securely.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the owner of a virtual system directly configures network access for the virtual system, then network communication can be established, but sensitive information must be shared and administrative burden increases

Engineering Contradiction:

Improvenetwork authentication securityVSAvoidadministrative effort

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The virtual server acts as an intermediary between the virtual system and the network authentication system. It performs network authentication on behalf of the virtual system using the virtual system's physical address, eliminating the need for the system owner to directly configure network access and reducing both information sharing requirements and administrative burden.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The virtual server automatically performs network authentication for virtual systems without requiring manual intervention from system owners. The authentication process is automated using the physical address of the virtual system, reducing administrative effort while maintaining security.

Inventive Principle:

Principle #25Self-service

2Ease of operation

If the virtual server performs network authentication on behalf of virtual systems, then administrative burden is reduced and isolation is enhanced, but additional authentication infrastructure is required

Engineering Contradiction:

Improvenetwork configuration simplicityVSAvoidauthentication infrastructure

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The virtual server performs multiple functions: it hosts virtual systems, manages their network authentication, and interacts with the RADIUS server. This multi-functionality consolidates authentication management within the virtual server, simplifying operations while the RADIUS server handles the authentication infrastructure.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Stability of the object's composition

If virtual systems use static network configuration, then network stability is maintained, but mobility between physical servers is reduced

Engineering Contradiction:

Improvenetwork configuration stabilityVSAvoidvirtual system mobility

Core Design Contradiction:

Stability of the object's compositionVSAdaptability or versatility

Solution Approach 1:

The network authentication configuration becomes dynamic rather than static. When a virtual system is migrated to a different physical server, the new virtual server automatically performs network authentication on behalf of the virtual system using its physical address, maintaining network stability while enabling mobility without requiring reconfiguration.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS9129124B2Dynamic provisioning of virtual systems

Publication Date: 2015.09.08 HEWLETT PACKARD ENTERPRISE DEV LP

AI summary

A method for dynamic provisioning of virtual systems includes, with a server system that hosts virtual systems, detecting a new virtual system on the server system, and with the server system, using a physical address of the new virtual system to perform network authentication on behalf of the new virtual system.