Centralized Registry for Dispersed Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage solutions face reliability and security challenges as they often rely on single locations, which are prone to malfunction or malicious access, and current methods like RAID and encryption do not adequately address security concerns.
Innovation Solution
A centralized registry system for managing virtual dispersed data storage containers, allowing multiple servers to store data slices and enabling secure access control, encryption, and integrity checks across a network, with a fee-for-service model to prevent storage overuse.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If data is stored in a single location, then storage simplicity is maintained, but reliability and security deteriorate due to single-point failures and malicious access risks
Solution Approach 1:
The patent divides data into multiple slices and stores them across different physical locations in a dispersed storage network. Each slice is stored in a separate storage unit, so that no single location contains the complete data set. This segmentation approach maintains system simplicity while improving reliability through distribution.
Solution Approach 2:
The patent introduces a centralized registry as an intermediary component that manages and tracks the locations of data slices across the dispersed storage network. The registry acts as a mediator between data access requests and the actual storage locations, enabling reliable data retrieval without requiring complex peer-to-peer coordination between storage units.
2Reliability
If data is backed up in separate locations, then reliability improves, but security deteriorates as hackers gain multiple potential access points
Solution Approach 1:
The patent applies different security qualities to different parts of the stored data by using information dispersal algorithms that ensure each slice alone is insufficient for data reconstruction. This local quality approach means that even if one storage location is compromised, the hacker cannot retrieve meaningful data without accessing multiple distributed slices, thereby maintaining security across multiple backup locations.
3Object-affected harmful factors
If encryption is used to secure data, then security improves, but ease of operation deteriorates due to key management complexity
Solution Approach 1:
The patent merges security functions into the dispersed storage architecture itself by integrating information dispersal algorithms with the storage mechanism. Security is embedded in the distribution scheme rather than being a separate layer, which simplifies operations. The centralized registry also merges access control management, allowing users to access data through simple registry lookups rather than managing complex encryption keys manually.
4Reliability
If RAID is used to improve reliability, then data redundancy improves, but security deteriorates as RAID does not address malicious access concerns
Solution Approach 1:
The patent changes the fundamental parameter of data organization from RAID's fixed stripe configuration to a flexible information dispersal approach where data is divided into slices with configurable redundancy levels. This parameter change allows the system to achieve both reliability through redundancy and security through distribution, as the dispersal algorithm ensures that no single slice contains sufficient information to reconstruct the original data, unlike traditional RAID where any failed stripe reduces redundancy without providing security.
Data Source
AI summary
A centralized depository for storing information regarding a collection of servers and other hardware used to implement a plurality of virtual dispersed data storage containers is disclosed. The centralized depository describes each virtual dispersed data storage container as well as the hardware used to provide the plurality of virtual dispersed data storage containers. Computers operating on or seeking to access specific virtual dispersed data storage containers can obtain the information required for access from the centralized depository.