Virtualization Platform VPN Tunnel IP Isolation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing virtualization platforms expose the IP address domain space of the providing network to potential misuse by end users in remote networks, leading to liability issues and limitations in network host expansion and migration.

Innovation Solution

A virtualization platform that utilizes virtual private network (VPN) tunnels to map virtual operating system instances to remote networks, allowing data traffic to originate from the remote network's IP address domain space, thereby isolating the providing network from liability and enabling flexible network host expansion and migration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If virtual machines are provided to remote networks using conventional virtualization, then network host expansion and migration flexibility is improved, but the IP address domain space of the providing network is exposed to misuse and legal liability

Engineering Contradiction:

Improvenetwork host expansion and migration flexibilityVSAvoidlegal liability and misuse exposure

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces VPN tunnels as an intermediary layer between the virtual machines in the providing network and the remote networks. These tunnels enable private IP addressing, allowing virtual machines to use IP addresses from the remote network's own address space rather than exposing the providing network's IP space. This mediator layer maintains the flexibility of virtual machine deployment while protecting against legal liability and misuse exposure.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If virtual machines use the providing network's IP address domain space, then network connectivity is simplified, but the remote network cannot maintain its own address domain space independence

Engineering Contradiction:

Improvenetwork connectivityVSAvoidaddress domain space independence

Core Design Contradiction:

Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent adds a new dimension to network connectivity by implementing VPN tunnels that operate alongside traditional IP routing. This allows virtual machines to maintain connectivity through the tunnel interface while using IP addresses from the remote network's own address space. The solution moves from a single-dimension approach (direct IP routing) to a multi-dimensional approach (tunnel + IP addressing), enabling both connectivity and address space independence.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS9264403B2Virtualization platform

Publication Date: 2016.02.16 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

AI summary

The invention relates to a visualization platform (9) arranged to provide at least one virtual operating system instance (9A, . . . , 9N) to at least one remote network (3) over a packet-based communication network (5). The visualization platform is characterized in that it comprises at least one first termination point (4b) of a virtual private network VPN tunnel (10) which enables the establishment of at least one VPN tunnel between said at least one first termination point and at least one second termination point (4a) in said at least one remote network over said packet-based communication network; and in that it is arranged to map said at least one virtual operating system instance to said at least one first termination point of said at least one VPN tunnel. The invention also relates to a method for virtualization and a computer program product.