Blockchain Ledger for Distributed File System Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Storage systems face challenges in data traceability, security, and compliance due to the complexity of managing billions of records in distributed file systems, including issues with data lookup, security, and auditing, which are time-consuming and inefficient.

Innovation Solution

Implementing a blockchain system to maintain a distributed ledger that records each transaction related to files, allowing for secure file location determination and audit validation by creating blocks for each action performed, which includes information like file location, metadata signatures, and tags, enabling efficient data management and compliance with regulatory standards.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If traditional distributed file systems are used to store and manage large amounts of data, then storage capacity and data retention are improved, but security vulnerability and susceptibility to breaches increase

Engineering Contradiction:
Improvedata storage capacityVSAvoidsecurity against breaches
Core Design Contradiction:
Quantity of substanceVSReliability

Solution Approach 1:

A blockchain-based intermediary layer is introduced between the distributed file system and access points. This intermediary maintains an immutable ledger of file transactions, access permissions, and audit trails, acting as a security mediator that verifies and records all operations without centralizing data storage, thus preserving both storage capacity and security

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If data is replicated and retained online to satisfy performance and availability requirements, then data accessibility and recovery capability are improved, but vulnerability to security breaches and data loss increases

Engineering Contradiction:
Improvedata accessibilityVSAvoidsecurity breach risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system implements continuous feedback mechanisms through blockchain-based audit trails that record all data access, modification, and replication events. This feedback loop enables real-time monitoring and validation of data operations, allowing the system to detect and respond to security threats while maintaining data accessibility through controlled replication

Inventive Principle:
Principle #23Feedback

3Device complexity

If traditional methods are used for data lookup and auditing in distributed file systems, then system simplicity is maintained, but lookup efficiency and audit validation become time-consuming

Engineering Contradiction:
Improvesystem structureVSAvoiddata lookup time
Core Design Contradiction:
Device complexityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-recording all file transactions, access permissions, and metadata in an immutable blockchain ledger before audits are requested. This preliminary recording of data operations enables rapid lookup and validation during audits without requiring complex real-time analysis, thus reducing lookup time while maintaining reasonable system complexity

Inventive Principle:
Principle #10Preliminary action

4Loss of information

If comprehensive audit trails are maintained for compliance purposes, then regulatory compliance and data traceability are improved, but system complexity and storage overhead increase

Engineering Contradiction:
Improvedata traceabilityVSAvoidaudit system complexity
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The system creates cryptographic copies of audit information in the blockchain ledger rather than maintaining duplicate physical copies of data. Each transaction and access event is recorded as an immutable cryptographic entry that provides complete traceability without requiring complex audit infrastructure, as the blockchain itself serves as the audit trail

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11868339B2Blockchain based distributed file systems
Publication Date: 2024.01.09 HEWLETT PACKARD ENTERPRISE DEV LP
  • US11868339B2 patent drawing
  • US11868339B2 patent drawing
  • US11868339B2 patent drawing

AI summary

Examples include a blockchain system associated with a distributed file system, Some examples include retrieval, from the blockchain system, a latest block corresponding to a block signature of a reference block that corresponds to a file stored in the distributed file system. The latest block includes information identifying at least one of a latest location of the file, a signature of metadata of the file, or a tag associated with the file.