Virtualized Windows Environment for Secure Application Hosting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing virtualization systems for hosting Windows-based applications face challenges in efficiently managing file and registry updates across multiple users while ensuring security and cost-effectiveness, especially in a multi-user, multi-server environment.
Innovation Solution
A virtualization and encryption system that employs a file system mini-filter driver for Windows, utilizing a registry redirection module, file redirection module, decryption module, and process/thread tracker to create a virtualized operating system environment, intercepting and redirecting registry and file operations to a virtual location, and encrypting application files using RSA keys for secure execution and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a virtual machine implementation for Windows is used to host applications, then application compatibility and functionality are improved, but processing resource consumption and system complexity increase significantly
Solution Approach 1:
The patent creates a virtualized Windows environment that copies essential system components and application interfaces, allowing applications to run in a simplified manner without requiring full Windows functionality. This enables application compatibility while reducing the complexity of running complete Windows virtual machines.
2Reliability
If file and registry operations are tracked for each user in a multi-user environment, then security and data integrity are improved, but processing overhead and system complexity increase
Solution Approach 1:
The patent merges file and registry operation tracking into a unified virtualization layer that handles multiple users simultaneously. By consolidating tracking mechanisms at the virtualization level rather than individually for each user, the system maintains data integrity while reducing processing overhead and improving efficiency.
3Speed
If application files are stored in fixed locations on the server, then file access speed is improved, but security against piracy and unauthorized access decreases
Solution Approach 1:
The patent introduces a virtualization layer as an intermediary between the server's fixed storage locations and user access points. Application files remain in fixed locations for fast access, but the virtualization environment abstracts and controls access paths, preventing direct access and piracy while maintaining access speed through the intermediary layer.
4Ease of operation
If Windows-based applications are executed on a hosting service, then user accessibility and application availability are improved, but cost-effectiveness and resource efficiency decrease
Solution Approach 1:
The patent extracts and virtualizes only the essential Windows components and application execution environments needed for running applications, rather than providing full Windows operating systems. This extraction approach maintains user accessibility and application availability while significantly improving resource efficiency and cost-effectiveness by eliminating redundant system resources.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer-implemented system for providing a virtualized application hosting environment comprising: a plurality of application/game servers each having a memory for storing application program code and data and a processor for executing the application program code and processing the data on behalf of a client; a virtualization service executed on each of the application/game servers, the virtualization service comprising a file redirection module for redirecting file system operations generated by the application program code to one or more virtualized file locations; and a registry redirection module for intercepting registry operations generated by the application program code and executing the registry operations on behalf of the application program code at one or more virtualized registry locations.