Backup Manager Filtering Entity Lists for Secure Restoration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems face challenges in ensuring secure data recovery and access control, particularly in preventing unauthorized access to backups, which can lead to data breaches during restoration processes.
Innovation Solution
Implementing a backup storage system with a backup manager and application access manager that filters user access based on identity, generating an available entity list and restricting restoration capabilities to authorized users, thereby limiting access to backups and preventing unauthorized data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If backup storage allows all users to access and restore entities, then restoration capability is improved, but data security deteriorates due to unauthorized access risks
Solution Approach 1:
The entity list is segmented into multiple subsets based on user identities and access permissions. Each user receives a filtered view of entities they are authorized to access, rather than a complete list. This segmentation allows the system to maintain comprehensive backup restoration capability while preventing unauthorized users from accessing entities outside their permission scope.
Solution Approach 2:
The backup manager acts as an intermediary between users and the backup storage system. It mediates access requests by filtering entity lists based on user identities and determining which entities each user can restore. This intermediary layer enables broad restoration capabilities while enforcing security policies to prevent unauthorized access.
2Reliability
If backup storage implements strict access control filtering, then data security is improved, but restoration accessibility deteriorates for authorized users
Solution Approach 1:
The system performs preliminary filtering of entity lists based on user identities before users attempt to access or restore entities. By pre-determining which entities each user can access and providing filtered lists in advance, the system eliminates the need for users to navigate through unauthorized entities, thereby maintaining both security and ease of access for authorized operations.
Solution Approach 2:
The backup manager automatically determines user identities, filters appropriate entity lists, and manages access permissions without requiring manual security checks during restoration operations. This self-service approach to access control streamlines the restoration process for authorized users while maintaining security, as the system handles permission verification automatically.
Data Source
AI summary
A backup storage includes persistent storage and a backup manager. The persistent storage stores backups of entities and an entity list that lists the entities. The backup manager obtains a restoration availability request from a user; filters the entity list based on an identity of the user to obtain an available entity list; identifies, based on user input obtain based on the available entity list, an entity of the entities; and restores the entity using the backups.