Virtual Machine Pool Secure Erasure and Replacement

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for securely erasing and replacing virtual machine and virtual desktop pools are inadequate, as they often fail to ensure complete and secure data erasure, particularly when using third-party erasure applications that may cause unrecoverable error states, compromising compliance with security standards.

Innovation Solution

A method involving a virtual machine management application to create a replacement pool with the same configuration and settings, followed by an independent erasure application for secure data deletion, including guest operating systems, system files, and applications, while generating a verification report to ensure complete erasure, and then deleting the original pool, thereby ensuring secure and automatic replacement.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If an independent third-party erasure application is used to erase virtual machines, then data erasure completeness and security are improved, but system stability and reliability deteriorate due to unrecoverable error states

Engineering Contradiction:

Improvedata erasure securityVSAvoidunrecoverable error state

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system creates a replacement pool of virtual machines before executing the erasure operation on the original pool. This preliminary action ensures that if the erasure causes an unrecoverable error state, the system can immediately switch to the replacement pool, preventing service interruption and maintaining reliability.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system prepares a standby replacement pool that acts as a buffer or cushion against the potential harmful effects of the erasure operation. This cushioning mechanism allows the system to absorb the shock of potential errors without compromising overall system stability or data security.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

2Duration of action of stationary object

If a replacement pool is created before erasure, then system continuity is improved, but resource consumption and complexity increase

Engineering Contradiction:

Improvesystem continuityVSAvoidpool management complexity

Core Design Contradiction:

Duration of action of stationary objectVSDevice complexity

Solution Approach 1:

The system creates a copy (replacement pool) of the original virtual machine pool with identical configuration and settings. This copying approach maintains system continuity by providing a ready-to-use substitute, while the automated management system handles the complexity of pool creation and switching, making the process transparent to users.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The replacement pool serves multiple functions: it acts as a standby during erasure operations, provides immediate failover capability, and can serve as the active pool after successful erasure. This multi-functionality reduces the need for separate systems and simplifies overall pool management despite the added erasure safety mechanisms.

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If complete erasure including guest OS and system files is performed, then data security is improved, but processing time and resource usage increase

Engineering Contradiction:

Improvedata securityVSAvoiderasure processing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The erasure process is segmented into distinct phases: creating the replacement pool, executing the erasure operation on the original pool, verifying erasure completeness, and switching to the replacement pool. This segmentation allows for targeted, efficient erasure of specific data types (guest OS, system files, user data) rather than attempting to erase everything in a single prolonged operation.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The automated pool management system handles the entire erasure process independently, including creating replacement pools, executing erasure operations, verifying completeness, and performing switchovers. This self-service automation reduces manual intervention time and optimizes resource usage by efficiently managing the erasure workflow without requiring continuous human oversight.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS20240296061A1Secure erasure and replacement of virtual machine pools

Publication Date: 2024.09.05 BLANCCO TECH GRP IP OY

AI summary

The present disclosure relates to a method and apparatus for securely erasing and replacing a pool of virtual machines and in particular, though not exclusively, to a method and apparatus for securely erasing and replacing a pool of virtual desktops. The virtual machines of the pool of virtual machines are implemented on a common virtualization layer and are managed by a common virtual machine management application. The method comprises using the virtual machine management application to create a replacement pool of virtual machines on the common virtualization layer, wherein the replacement pool of virtual machines has the same configuration and/or settings as the pool of virtual machines. The method further comprises using an erasure application to erase each virtual machine of the pool of virtual machines, wherein the erasure application is executable independently of the virtual machine management application, and using the virtual machine management application to delete the pool of virtual machines.