File-Based Backup Metadata Manager for Secure Instant Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for managing file-based backups lack efficient access control and secure instant access mechanisms, particularly in production host environments connected to backup storage systems, which can lead to difficulties in managing and securing data access.
Innovation Solution
A method and system that utilize a FBB metadata file manager to authenticate entity contexts, obtain access control information, and enable access to specific subsets of file-based backups, employing a virtual file system and temporary storage devices to ensure secure and controlled access, while also considering override permissions and security manager interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If traditional backup access methods are used, then data security is maintained, but access efficiency and speed are reduced
Solution Approach 1:
The patent segments the backup file into multiple parts and creates individual access paths for each segment. The metadata file contains structured information about file segments, allowing the system to access specific portions of backup data without loading or decrypting the entire backup file, thereby improving access efficiency while maintaining security through controlled access paths.
Solution Approach 2:
The patent introduces a metadata file as an intermediary layer between the backup storage and access requests. This metadata file contains access control information, file segment details, and permission data that enables the system to efficiently determine and enforce access rights without compromising the security of the actual backup data, resolving the contradiction between fast access and secure access.
2Loss of time
If full backup files are accessed, then complete data recovery is possible, but access time and system resources are consumed
Solution Approach 1:
The patent extracts and stores metadata information about backup file segments separately in a metadata file. This allows the system to extract and access only the specific file segments that are needed for a given access request, rather than loading or processing the entire backup file. The metadata file contains pointers and control information that enable direct access to specific segments, reducing access time while maintaining the ability to recover complete data when needed.
3Reliability
If access control is implemented, then data security is improved, but system complexity increases
Solution Approach 1:
The patent merges access control information, file segment metadata, and permission data into a single integrated metadata file structure. This consolidation allows the system to enforce security policies without requiring separate complex access control mechanisms for each backup file. The metadata file serves as a unified interface that handles authentication, authorization, and segment identification, reducing overall system complexity while maintaining robust security controls.
Data Source
AI summary
Embodiments described herein relate to a method for managing file based backups (FBBs). The method may include obtaining a FBB mount request for a FBB mount of a FBB from an application, wherein the application is executing in a production host environment and the FBB is stored on backup storage; in response to the FBB mount request: capturing an entity context associated with the application; authenticating the entity context; obtaining, when the authenticating is successful, access control information corresponding to the FBB from the backup storage; determining a subset of the FBB for which the access control information indicates the entity context has permission to access; and enabling access to a portion of the FBB by the application.