Network-based data backup system with physical separation of backup media and fault-tolerant rotation control on a computer system with security monitoring

Abstract

Device for data backup of data of a computer system, characterized in that its control unit is provided which switches a power supply to at least one data backup medium, wherein the data backup medium can be physically separated from the computer system by interrupting the power supply, and software is provided which automatically causes a physical separation of the data backup medium after completion of a data backup.

Description

Technical field The invention relates to a device and a method for data backup in information technology systems, in particular in Windows-based computer systems and server environments. The invention belongs to the technical field of data backup systems, IT security infrastructure, and hardware-controlled backup systems. State of the art In common data backup systems, external backup media are permanently connected to a computer system. This creates the risk that malware, especially ransomware, can access these backup media and encrypt or delete data. Known solutions are predominantly based on software-based measures or manual separation of backup media. However, these solutions do not guarantee automatic physical separation of the backup media after a backup is complete and do not offer fault-tolerant switching to alternative backup media. Object of the invention The invention is based on the objective of providing a device and a method which enables automated, secure and fault-tolerant data backup and in particular ensures protection against malware attacks through physical separation of the data backup media. Solution to the task The problem is solved by a device and by a method. The device includes a microcomputer as a backup controller, which communicates with a Windows PC or server to be backed up via a network connection and controls the power supply to several data backup media connected to the microcomputer via relays. Power is only supplied during a data backup. After the backup is complete, power is automatically switched off, thus physically separating the backup media from the computer system. Example of implementation The device consists of the following components, with the microcomputer connected to a Windows PC or server via a network connection: • Microcontroller board • Relay module with four relays for controlling the USB supply voltage • Relay module for controlling an external 12V supply voltage • Active USB 3.0 hub connected to the microcomputer • Up to four data backup media • Backup controller software • Web frontend (web application) for system monitoring The relays switch the power supply to the USB ports from the USB hub, which is directly connected to the microcomputer. Each backup drive can be physically disconnected from the computer system independently of the other backup drives. Further explanations are shown as block diagrams in Figures 1, 2, 3, 4 to 5: Figure 1 - System overview; Figure 2 - Relay control of the USB supply voltage; Figure 3 - Rotation method; Figure 4 - Safety response; Figure 5 - 12V circuit for external hard drives

Claims

Device for data backup of data of a computer system, characterized in that its control unit is provided which switches a power supply to at least one data backup medium, wherein the data backup medium can be physically separated from the computer system by interrupting the power supply, and software is provided which automatically causes a physical separation of the data backup medium after completion of a data backup. Device according to claim 1, characterized in that several data backup media are provided, wherein only one data backup media is active at any given time. Device according to one of the preceding claims, characterized in that the control unit comprises a relay module. Device according to one of the preceding claims, characterized in that a condition check of a data backup medium is carried out before a data backup. Device according to claim 4, characterized in that the condition check includes SMART data. Device according to one of the preceding claims, characterized in that a security check is performed before data backup. Device according to claim 6, characterized in that, upon detection of a security threat, all data backup media are physically separated. Device according to one of the preceding claims, characterized in that a notification system is provided for transmitting status or warning messages. Device according to one of the preceding claims, characterized in that a rotating method for selecting a data backup medium is provided. Device according to one of the preceding claims, characterized in that the microcomputer is connected to the computer system via a network connection and the data backup is carried out via this network connection. Device according to one of the preceding claims, characterized in that the data backup media are exclusively connected to the microcomputer. Device according to one of the preceding claims, characterized in that the computer system's access to the data backup media is only possible during a data backup. Device according to one of the preceding claims, characterized in that the power supply to the data backup media is interrupted by means of relays or electronic switching elements. Device according to one of the preceding claims, characterized in that the system is designed as a standalone network appliance.

Images