Cloaked User-Space File Systems for Secure, Schema-Agnostic Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing database systems, particularly those on cloud platforms, face challenges in ensuring data security without compromising efficiency, as they are vulnerable to hacking and ransomware attacks, and require schema-specific indexing, which limits flexibility and accessibility.
Innovation Solution
A database platform using entity-centric, domain-partitionable design with unidirectional relationship identifiers (RDIDs) for secure access and flexible data modeling, allowing ad hoc queries without indexing parameters, and secured by a trusted Data Custodian Platform that enforces privacy rules and encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures (credential verification, data encryption) are enhanced to defeat hackers, then security strength is improved, but database accessibility and convenience deteriorate
Solution Approach 1:
The patent introduces an intermediary authentication mechanism that mediates between security requirements and accessibility. The system uses a trusted third-party authentication service that verifies credentials and issues access tokens, allowing users to access databases without exposing sensitive credentials directly to the database system. This intermediary layer maintains security while simplifying the access process for legitimate users.
Solution Approach 2:
The patent segments the authentication process into distinct phases: credential verification, token issuance, and access control. By dividing the security mechanism into separate functional components, the system can enforce strict security checks at the authentication stage while providing seamless access during the data operation stage, thus resolving the contradiction between security strength and accessibility.
2Reliability
If additional security layers are layered to defend against attacks in Cloud platform model, then security strength is improved, but convenience and efficiency deteriorate
Solution Approach 1:
The patent implements preliminary authentication actions where security verification is performed once during the connection establishment phase. The authentication service validates credentials and establishes security contexts before any data operations occur. This preliminary security action eliminates the need for repeated security checks during subsequent data access operations, maintaining security strength while preserving operational efficiency.
3Speed
If schema-specific indexing is required to speed up queries in NoSQL databases, then query speed is improved, but flexibility and adaptability deteriorate
Solution Approach 1:
The patent implements dynamic indexing where the indexing structure is not fixed but adapts based on query patterns and data characteristics. The system can automatically create, modify, or drop indexes based on runtime analysis of query workloads, allowing it to optimize query speed for specific operations while maintaining the flexibility to adapt to changing requirements without being constrained by a priori schema definitions.
Data Source
AI summary
A highly secure file system stores and accesses files utilizing familiar hierarchical concepts for file storage (i.e. root directory, directory, file entry data, etc.), while at the same time hiding the actual path to access the desired file. A file may be stored and accessed at a data store node using a Uniform Resource Identifier (URI) path comprising a unique, unidirectional relationship identifier that controls a requesting entity's access to the file system. The URI path may also comprise a “leaf” unique uniform identifier (UUID) derived from linkages between the hierarchical nodes superordinate to the data store node.