Backup Verification Data for Secure Service Restoration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data stored for computer-implemented services is susceptible to loss and compromise, leading to potential security threats and inability to restore services effectively.
Innovation Solution
Generating backups with verification data to authenticate their integrity, ensuring only authorized and unmodified backups are used for restoration, thereby reducing the likelihood of security threats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If backups are generated for data, then data availability for restoration is improved, but the risk of compromised backups increases
Solution Approach 1:
The system performs preliminary verification of backup authenticity by checking digital signatures and hashes before allowing restoration. This preliminary action prevents compromised backups from being used, as the verification process detects tampering attempts before restoration occurs.
Solution Approach 2:
The system introduces verification data (digital signatures, hashes) as an intermediary between the backup and the restoration process. This intermediary component authenticates the backup's integrity and origin, mediating the trust relationship and preventing direct use of compromised backups.
2Reliability
If verification data is added to backups, then backup authenticity is improved, but backup size and storage requirements increase
Solution Approach 1:
The system extracts only the essential verification information (digital signatures and hashes) from the backup process, rather than incorporating complete verification systems into every backup. This extraction approach provides sufficient authenticity verification while minimizing the additional data storage requirements.
3Object-affected harmful factors
If verification processes are implemented, then security against compromised backups is improved, but restoration time increases
Solution Approach 1:
The verification processes are performed in advance during backup creation and storage, rather than during restoration. By completing verification actions preliminarily, the system ensures security without adding significant time delays to the restoration operation itself.
Data Source
AI summary
Methods and systems for managing data are disclosed. The data may be managed by creating and requiring use of both backups and verification data for the backups. The verification data may allow the authenticity of the backups to be verified. If verified, the backups may be used to restore the state and/or other characteristics of various entities. The verification data may include information usable to verify integrity of the backups and authority for generating the backups.