Blockchain Lock Attribute Record Chain for Storage Tampering Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional retention lock technologies are unreliable for remote storage servers, as they lack a universal and credible method to validate retention lock configurations and prevent data tampering, especially in compliance with corporate governance and regulatory standards.
Innovation Solution
A data protection network with multiple servers reaches a consensus on a lock attribute record chain to create a credible and invariable lock operation management system, which includes generating an alarm if the lock attribute values do not match, ensuring that the backup data is not tampered with and supporting seamless extension to remote storage servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional retention lock technology is used for remote storage servers, then data can be locked within a designated period, but the reliability is insufficient and data may be tampered with
Solution Approach 1:
The patent introduces a lock attribute record chain (blockchain) as an intermediary between the data protection system and remote storage servers. This blockchain records lock operations and their attributes immutably, serving as a trusted mediator that both parties can verify without requiring complex mutual authentication mechanisms. The blockchain acts as a neutral third party that ensures the integrity of lock operations across distributed systems.
Solution Approach 2:
The lock attribute record chain serves multiple functions: it records lock operations, validates lock attributes, provides audit trails, and enables consensus verification across the data protection network. This universal structure replaces multiple separate verification mechanisms, simplifying the overall system while enhancing reliability through a single multi-functional infrastructure.
2Reliability
If a lock attribute record chain with consensus mechanism is implemented, then data tampering can be detected, but the system complexity increases
Solution Approach 1:
The patent creates copies of lock attribute records across multiple nodes in the data protection network through the blockchain consensus mechanism. Each node maintains a copy of the lock attribute record chain, and any modification requires consensus across the network. This copying approach distributes the verification burden and enhances reliability without requiring each individual system to implement complex validation logic.
Solution Approach 2:
The consensus mechanism provides continuous feedback to the system about the validity of lock operations. When a lock operation is recorded, the blockchain network validates it and provides feedback by updating the lock attribute record chain. This feedback loop ensures that only valid lock operations are recorded and maintains the integrity of the entire system without requiring complex centralized control.
3Reliability
If retention lock is applied to cold data in secondary storage, then storage cost is reduced, but the lock may not be reliable for compliance requirements
Solution Approach 1:
The patent moves the lock management functionality from the storage dimension (where data resides) to the data protection dimension (where backup operations occur). By implementing lock attribute record chains in the data protection network rather than in the storage infrastructure, the system separates concerns and allows reliable compliance locking without modifying storage systems or increasing their complexity.
Solution Approach 2:
The blockchain-based lock attribute record chain serves as an intermediary layer between compliance requirements and actual data storage. It provides a trusted verification mechanism that can operate independently of the storage infrastructure, ensuring compliance reliability without requiring the storage systems themselves to become more complex or trustworthy.
Data Source
AI summary
A method, an electronic device, and a computer program product for storage management are provided. The method includes: acquiring a lock attribute record in a lock attribute record chain from a data protection network for backing up data, data protection servers of the data protection network reaching a consensus on the lock attribute record chain, the lock attribute record including a first attribute value of an attribute of a lock operation, the lock operation being used for preventing a backup of the data stored in a storage server from being tampered with; acquiring, based on the lock attribute record, a second attribute value of the attribute of the lock operation from the storage server; and generating, based on determining that the first attribute value does not match the second attribute value, an alarm indicating that the backup is tampered with. This solution can better prevent data from being tampered with.