Virtual Machine Locking for Maintenance Access Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In scenarios where maintenance or other operations are performed on a virtual machine, concurrent access by multiple users or devices can lead to inefficient or incomplete operations, as existing technologies do not effectively manage access to ensure exclusive execution while allowing necessary communication.

Innovation Solution

The implementation of a virtual machine locking mechanism that allows ongoing execution while preventing inbound access from unauthorized devices, allowing selective access for administrators while restricting others, using a VM lock manager or hypervisor to apply and manage locks, enabling outbound communication and authenticating authorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If multiple users or devices concurrently access a virtual machine, then accessibility and utilization are improved, but maintenance operations become inefficient or incomplete due to interference

Engineering Contradiction:
ImproveaccessibilityVSAvoidmaintenance operation efficiency
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The system dynamically changes the accessibility state of the virtual machine based on operational context. A locking mechanism is introduced that can transition the VM between locked and unlocked states, allowing concurrent access during normal operation but preventing access during maintenance operations. This dynamic state change resolves the contradiction by making accessibility conditional rather than static.

Inventive Principle:
Principle #15Dynamics

2Productivity

If a lock is applied to prevent concurrent access during maintenance, then maintenance operation efficiency is improved, but accessibility to the virtual machine is restricted

Engineering Contradiction:
Improvemaintenance operation efficiencyVSAvoidaccessibility
Core Design Contradiction:
ProductivityVSEase of operation

Solution Approach 1:

The locking mechanism applies access restrictions selectively rather than globally. It distinguishes between different types of access requests and different operational states of the VM. During maintenance operations, the lock prevents new access attempts while allowing the maintenance operation to proceed. This localized application of restrictions resolves the contradiction by limiting accessibility only when and where it would interfere with maintenance operations.

Inventive Principle:
Principle #3Local quality

3Reliability

If exclusive execution is enforced during maintenance, then operation completeness is improved, but system utilization rate decreases due to restricted access

Engineering Contradiction:
Improveoperation completenessVSAvoidsystem utilization
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system implements periodic alternation between locked and unlocked states based on the maintenance operation lifecycle. During maintenance execution, the VM is locked to ensure complete operation. When maintenance is complete or paused, the VM can be unlocked to allow concurrent access again. This periodic switching resolves the contradiction by ensuring operation completeness only during the maintenance phase while maintaining system utilization during other phases.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS10037219B2Virtual machine locking
Publication Date: 2018.07.31 RED HAT ISRAEL
  • US10037219B2 patent drawing
  • US10037219B2 patent drawing
  • US10037219B2 patent drawing

AI summary

Systems and methods for virtual machine locking. An example method may include: applying a lock to a virtual machine, the lock enabling ongoing execution of the virtual machine and outbound communication by the virtual machine while precluding unauthenticated inbound communication to the virtual machine, receiving, from a first device and in response to an authentication request, an authentication attempt, processing the authentication attempt to authenticate the first device with respect to the virtual machine, and in response to a determination that the first device was successfully authenticated with respect to the virtual machine, enabling inbound communication from the first device to the virtual machine.