Client Initiated Restore via Application Server Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

System administrators often become bottlenecks in running applications that require access to user data for comprehensive services, such as backup applications, limiting user autonomy and efficiency.

Innovation Solution

Implementing a system that allows clients to restore their own data from backup data sets by authenticating user requests and managing access to backup operations through an application server, enabling multiple simultaneous restore operations while preserving access limitations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If system administrator runs backup application, then comprehensive access to all user data is achieved, but system administrator becomes a bottleneck and user autonomy is limited

Engineering Contradiction:
Improveuser autonomyVSAvoidsystem efficiency
Core Design Contradiction:
Ease of operationVSProductivity

Solution Approach 1:

The patent segments the backup application's functionality by creating separate restore operations for different user accounts. Each user can independently restore their own files without requiring system administrator intervention, dividing the monolithic administrative control into distributed user-level operations.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent enables users to perform self-service restore operations by allowing them to authenticate and restore their own files directly through the backup application. This eliminates the need for users to request assistance from system administrators, empowering them to independently manage their data restoration needs.

Inventive Principle:
Principle #25Self-service

2Adaptability or versatility

If system administrator is the only one able to run backup application, then access control is maintained, but user independence is reduced and administrative workload increases

Engineering Contradiction:
Improveuser independenceVSAvoidaccess control complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary authentication mechanism that verifies user identities and authorizes restore operations without requiring system administrator involvement. The application server acts as a mediator, validating user credentials and granting appropriate access rights automatically, thus simplifying the access control process while maintaining security.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The backup application is designed to serve multiple user accounts simultaneously, with each user able to perform restore operations independently. The system universally supports multiple users with different access levels, allowing the same application to function for both system administrator and individual user contexts.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Productivity

If multiple users can restore data simultaneously, then system efficiency is improved, but access control and data security become more complex

Engineering Contradiction:
Improverestore operation throughputVSAvoidaccess control security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent implements dynamic access control that adjusts permissions based on the requesting user's identity and the specific restore operation. The system dynamically evaluates authentication credentials and grants or denies access in real-time, allowing multiple simultaneous restore operations while maintaining security through context-aware authorization decisions.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS8341127B1Client initiated restore
Publication Date: 2012.12.25 EMC IP HLDG CO LLC
  • US8341127B1 patent drawing
  • US8341127B1 patent drawing
  • US8341127B1 patent drawing

AI summary

Client initiated restore is disclosed. An indication is received from a client computer that a restore operation is desired. Access to a backup data associated with the client computer is provided to the client computer. The backup data associated with the client computer comprises a subset of a backup data set that includes both backup data associated with the client computer and backup data not associated with the client computer.