Air-Gapped Storage Replication with One-Way Recovery Tunnels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in securely protecting and managing data in air-gapped computing systems, where external devices are restricted to prevent malware spread, making data replication and recovery inefficient and complex.
Innovation Solution
A system utilizing specialized air-gapped media agents establishes a one-way connection from a secondary storage site to an air-gapped site for data replication, allowing backup copies to be restored in original application formats and promoted to secondary copies, with incremental backups and management policies applied.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If air-gapped storage is implemented to prevent malware spread, then security is improved, but data replication and recovery become inefficient and complex
Solution Approach 1:
The patent introduces an air-gap management appliance as an intermediary device that mediates between the air-gapped storage pool and external networks. This appliance provides a user interface and control mechanisms that simplify data replication and recovery operations without compromising the air-gap security model. The appliance acts as a controlled gateway that manages one-way connections and facilitates data operations while maintaining security boundaries.
Solution Approach 2:
The patent implements a tiered copying approach where secondary copies are first created in air-gapped storage, then tertiary copies are created from those secondary copies when needed for recovery operations. This multi-stage copying process allows complex recovery operations to be broken down into simpler, manageable steps that can be performed through the intermediary appliance without requiring direct access to the air-gapped storage pool.
2Reliability
If one-way connections are established for data replication, then security is maintained, but recovery time and efficiency are reduced
Solution Approach 1:
The patent implements preliminary actions by pre-establishing the air-gapped storage pool with secondary copies before any disaster occurs. The air-gap management appliance is pre-configured with the necessary connection parameters and recovery procedures. When recovery is needed, the system can quickly initiate tertiary copy creation and restoration processes without needing to establish security configurations or connections during the emergency recovery situation.
Solution Approach 2:
The patent enables continuous data protection by implementing ongoing secondary copy creation to the air-gapped storage pool. The system maintains continuous monitoring and automated backup processes that ensure data is continuously protected without interrupting primary operations. This continuous operation allows the system to maintain security while preparing for potential recovery scenarios.
3Object-affected harmful factors
If air-gapped storage pools are used for secure data protection, then malware protection is improved, but data management and accessibility are limited
Solution Approach 1:
The air-gap management appliance provides multi-functional capabilities that enable diverse data management operations through a single interface. It can perform secondary copy creation, tertiary copy creation, data restoration, monitoring, and configuration tasks. This universal interface allows users to manage air-gapped storage operations without needing to understand the underlying security architecture or establish complex connections, thereby simplifying data management while maintaining security.
Solution Approach 2:
The system implements automated self-service capabilities where the air-gap management appliance automatically manages the air-gap connections, monitors the health of secondary and tertiary copies, and executes recovery procedures without requiring manual intervention to establish or break air-gaps. The system can autonomously create one-way connections when needed and maintain security boundaries, reducing the operational burden on users.
Data Source
AI summary
An illustrative air-gapped data storage site for storing secure copies at the air-gapped storage site. Using specialized air-gapped media agents installed within the air-gapped storage pool site, the illustrative system, at an unpredictable time, establishes a one-way tunnel from secondary storage site to air-gapped site to receive backup copies of the data stored at primary site. In another embodiment, during disaster recovery, backup copies stored within the air-gapped site are replicated to a non-air gapped site (e.g., secondary storage pools) as “tertiary copies.” Those copies are then restored to the primary site in original application data formats for quick recovery. As restoration of data is complete, the tertiary copies are promoted to “secondary copies” to receive incremental backups.