Workload Image Block Segmentation for Secure Cloud Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises face challenges in managing and distributing workload images across geographically dispersed sites due to large file sizes, network bandwidth limitations, and the need for skilled staff, which hinders timely installation of security updates and software configurations, especially in cloud-based environments.
Innovation Solution
A system for secure workload image distribution and management that breaks down workload images into customizable blocks, encrypts and signs each block, and uses a cloud-based server to manage distribution, allowing only delta blocks to be transferred, ensuring secure and efficient installation without exposing encryption keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If machine images are distributed over network connections, then the need for skilled staff to be physically present at each machine is eliminated, but the large size of machine images makes them incompatible with available network bandwidth, resulting in excessively long download and installation times
Solution Approach 1:
The patent divides machine images into smaller blocks that can be distributed incrementally over the network. This segmentation allows the large image to be broken into manageable chunks that fit within network bandwidth constraints, enabling remote distribution without requiring excessive download time while maintaining the ability to administer machines remotely.
Solution Approach 2:
The patent performs preliminary processing of machine images by pre-dividing them into blocks and preparing them for distribution before actual deployment. This preliminary action allows the system to have image blocks ready for immediate network transmission, reducing the effective download time when distribution is actually needed.
2Ease of operation
If machine images are distributed over network connections, then physical presence of skilled staff is eliminated, but critical security updates and bug fixes cannot be installed within required time frames
Solution Approach 1:
By segmenting machine images into blocks, the system can prioritize and rapidly distribute critical security update blocks over the network. This segmentation enables selective distribution of only the necessary update blocks rather than requiring complete image redistribution, thus maintaining remote administration capability while significantly accelerating the deployment of security fixes.
Solution Approach 2:
The patent implements partial distribution by sending only the specific blocks that contain security updates rather than distributing entire machine images. This partial action approach allows critical security updates to be installed rapidly within required time frames while maintaining the benefit of remote administration.
3Ease of operation
If complete machine images are distributed over network, then devices can be updated remotely, but it interferes with critical business-related bandwidth
Solution Approach 1:
The patent segments machine images into smaller blocks that can be distributed in a controlled manner over the network. This segmentation allows for bandwidth management and scheduling, enabling remote updates to proceed without consuming excessive critical business-related bandwidth at any given moment, thus balancing remote update capability with network resource conservation.
Solution Approach 2:
The system distributes only the necessary portions of machine images (specific blocks) rather than complete images, reducing the overall network bandwidth consumption. This partial distribution approach maintains remote update capability while minimizing interference with critical business-related bandwidth.
Data Source
AI summary
Workload Images comprising one or more artifacts are managed in a decentralized and centralized manner. Local management comprises breaking any image/artifact into blocks, encrypting each block with a key known and available only to the local processing environment, and uniquely signing each encrypted block. Published versions of the images/artifacts are retained remotely in a cloud/server in encrypted and signed block format. When retrieval, modification, addition, deletion, and deployment of any given image/artifact is needed, the target device/server that is to receive the image/artifact provides a listing of encrypted blocks with the corresponding signatures that are already present on that device/server and a centralized cloud/server schedules and manages download of just those encrypted blocks that are missing to the target device/server. The target device/server assembles and installs the image/artifact using the downloaded blocks received from the cloud/server and the existing blocks already present on the target device/server.