Backup Security System with Metadata-Based Abnormality Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Manually restoring safe backup data from infected business computers is time-consuming and inefficient, leading to prolonged service disruptions due to the need for manual checking of multiple backups for malware infection.

Innovation Solution

A security system that stores metadata alongside backup images, allowing for the generation of determination information to identify abnormal backup data based on predetermined rules, enabling quick selection of safe backup candidates for restoration without manual restoration of each backup.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual restoration of backup data is performed to check for malware infection, then the reliability of restored data is improved, but the time required for recovery increases significantly

Engineering Contradiction:
Improvedata safetyVSAvoidrecovery time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by storing metadata and given information about backup data states at the time of backup creation. This allows the determination unit to later assess backup safety using predetermined rules without needing to manually restore and check each backup, thus resolving the contradiction between ensuring data safety and reducing recovery time

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces metadata and given information as intermediary elements that mediate between the backup data and the assessment process. Instead of directly restoring and checking backup data, the system uses these intermediary information carriers to determine backup safety, thereby eliminating the time-consuming manual restoration process while maintaining reliability

Inventive Principle:
Principle #24Intermediary (Mediator)

2Measurement precision

If multiple backups are restored manually to check their contents, then the accuracy of identifying safe backup data is improved, but the productivity of the recovery process deteriorates

Engineering Contradiction:
Improvebackup safety detection accuracyVSAvoidrecovery efficiency
Core Design Contradiction:
Measurement precisionVSProductivity

Solution Approach 1:

The system extracts essential state information from backup data at the time of backup and stores it as metadata and given information. This extraction allows the determination unit to assess backup safety based on predetermined rules without needing to restore and examine the actual backup contents, thereby maintaining detection accuracy while dramatically improving recovery efficiency

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If frequent and large-size backups are performed, then the reliability of data protection is improved, but the time required to manually check and restore them increases

Engineering Contradiction:
Improvedata protectionVSAvoidrestoration checking time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system creates information copies of backup data states through metadata and given information storage. Instead of working with the actual large-size backup data during assessment, the system uses these lightweight information copies to determine backup safety, allowing frequent backups to be performed and assessed without the time penalty of manually checking large data sets

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11537712B2Security system, storage medium storing computer program, and data diagnostic method
Publication Date: 2022.12.27 HITACHI VANTARA LTD
  • US11537712B2 patent drawing
  • US11537712B2 patent drawing
  • US11537712B2 patent drawing

AI summary

A security system includes a backup acquisition unit configured to store given information indicating states of backup data together with backup images generated from the backup data for each backup generation; and a determination unit configured to generate, when a predetermined timing comes, determination information for determining whether there is an abnormality in the stored backup data, based on a predetermined determination rule and the given information for each backup generation, and to output the generated determination information.