Backup Data Access Control via Mode Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current backup systems limit user access to backup data, requiring manual retrieval of files at specific points in time, which is laborious and error-prone, and restrict concurrent operations, leading to bottlenecks in system administration.
Innovation Solution
Implementing a system that allows multiple users to concurrently access and restore backup data with specific access modes, enabling simultaneous operations like file restoration and data transfer, while maintaining access limitations, using an application server with a backup manager to manage backup data sets and authenticate users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the system administrator is the only one able to run certain applications, then access control and security are maintained, but the system administrator becomes a bottleneck and productivity decreases
Solution Approach 1:
The patent segments backup operations into distinct modes (backup mode, restore mode, transfer mode) and assigns different access privileges to users based on the mode. This allows regular users to perform restore and transfer operations without having full system administrator privileges, thereby eliminating the bottleneck while maintaining security through mode-based access control.
2Device complexity
If only one operation is allowed at a time in the backup application, then access control is simplified, but the application itself becomes a bottleneck and productivity decreases
Solution Approach 1:
The patent implements dynamic access control where multiple operations can occur simultaneously based on their mode and compatibility. The system dynamically determines whether concurrent operations are allowed by checking if they conflict (e.g., two backup operations may conflict, but a restore and a transfer may not). This dynamic approach increases productivity while maintaining manageable complexity through predefined compatibility rules.
3Ease of operation
If users can access backup data freely, then ease of operation improves, but data security and access control are compromised
Solution Approach 1:
The patent applies local quality by granting different access permissions to different users based on their specific needs and roles. Instead of a blanket restriction or full access policy, the system tailors access rights individually - for example, allowing User A to restore files while preventing User B from the same operation, or permitting transfers during backup for certain users but not others. This localized approach enhances ease of operation for authorized users while maintaining data security.
4Measurement precision
If manual retrieval of files at specific points in time is required, then data accuracy is improved, but labor and time consumption increase
Solution Approach 1:
The patent implements preliminary action by automatically generating and maintaining an index of backup data organized by points in time before any retrieval operation occurs. When a user needs to restore files from a specific point in time, the system has already prepared the indexed structure, allowing the user to simply select the desired time point and files without manual searching or filtering. This preliminary indexing dramatically reduces retrieval time while maintaining accurate restoration of data at specific moments.
Data Source
AI summary
Controlling backup data access is disclosed. A request is received to access backup data in a requested mode, wherein backup data is accessed based at least in part on a restore point. It is determined if the requested mode is allowed given a currently executing mode. In the event that the mode is allowed, access to backup data is allowed.