Backup Permission via Telemetry Security Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data stored in computing devices can become unusable due to malware attacks, such as ransomware, which encrypts files, and backup copies may also be compromised during backup operations, rendering them unusable.
Innovation Solution
A system that analyzes telemetry data from the computing device to determine if security is compromised before allowing backup-related operations, using a secure handshake-based verification to prevent malware attacks from affecting backup copies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If backup operations are performed on computing devices, then data can be restored in case of loss, but malware attacks during backup operations can compromise the backup copies and render them unusable
Solution Approach 1:
The system performs preliminary security verification through telemetry analysis and secure handshake protocols before allowing backup operations to proceed. This advance checking prevents compromised devices from creating infected backup copies, thereby maintaining backup reliability without requiring additional security measures during the actual backup process
Solution Approach 2:
A secure handshake mechanism acts as an intermediary between the computing device and backup system. This intermediary layer verifies device security status through encrypted communication and telemetry validation, preventing malware from directly compromising backup operations while allowing legitimate backup processes to proceed
2Reliability
If security verification is performed before backup operations, then backup integrity is maintained, but system complexity increases due to additional verification steps
Solution Approach 1:
The computing device itself performs self-verification by providing telemetry data that indicates its security status. This self-service approach eliminates the need for complex external verification systems, as the device autonomously attests to its security state through embedded sensors and security modules, simplifying the overall system architecture while maintaining backup integrity
Solution Approach 2:
The system uses telemetry feedback from the computing device to dynamically determine backup permission. Security metrics such as threat detection status, antivirus scan results, and system integrity indicators are continuously monitored and fed back to the backup management system, enabling automated security verification without manual intervention or complex verification protocols
Data Source
AI summary
Example techniques for granting permissions for performing an operation related to a backup copy are described. The backup copy corresponds to first device data and the first device data is stored in a first device. In an example, in response to receiving a request to perform the operation related to the backup copy, telemetry data received from the first device is analyzed. Based on the analysis, it is determined that security of the first device is uncompromised. Based on the determination, a permission to perform the operation related to the backup copy is granted.