Authorization Omission Logic for Secure Data Storage Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In systems handling important electronic data, the risk of information leak due to decryption or encryption key exposure remains high, and existing solutions like secret sharing schemes complicate authentication and authorization processes, leading to increased communication time and operational complexity.
Innovation Solution
An information processing device that acquires authorization omission information to determine which save units do not require authorization processing, based on the division number and restoration number, thereby deciding which units can omit authorization processing to reduce communication time.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authorization processing is performed for all save units in multiple data centers, then security and control are improved, but communication time and processing complexity increase
Solution Approach 1:
Instead of performing authorization processing for all save units (excessive action), the system performs authorization processing only for a determined number of save units (partial action). The determination unit calculates the exact number of save units that need authorization based on the division number and restoration number, avoiding unnecessary authorization requests to other save units, thus reducing communication time while maintaining security.
2Reliability
If individual user authentication is performed for each data center, then access control is improved, but authentication processing complexity increases
Solution Approach 1:
The system segments the authorization control function by determining which save units require authorization based on the division number and restoration number. This segmentation allows the system to treat different save units differently - some require full authorization processing while others can be accessed without additional authentication, simplifying the overall authentication processing complexity while maintaining access control.
Solution Approach 2:
The system performs authentication processing only for the necessary number of save units rather than all save units. By calculating the exact number of save units that need authorization based on the division and restoration numbers, the system avoids unnecessary authentication processing for other save units, reducing overall processing complexity.
3Adaptability or versatility
If password information is held in each server, then authentication flexibility is improved, but update processing complexity and maintenance difficulty increase
Solution Approach 1:
The system extracts the password information management from individual servers and consolidates it in the determination unit. Instead of each server maintaining its own password information, the determination unit centrally determines which save units require authorization based on the division number and restoration number, simplifying update processing and maintenance while maintaining authentication flexibility.
Data Source
AI summary
An information processing device includes: a first acquisition unit that acquires authorization omission information being information indicating how many save units among a plurality of save units in which object pieces of an object divided into a division number are stored respectively do not need authorization processing, based on the division number indicating how many object pieces the object is to be divided into and a restoration number being a number of object pieces required to restore the object; and a decision unit that decides a save unit which does not need the authorization processing from among the plurality of save units, based on the authorization omission information acquired by the first acquisition unit.