Cloud Block Storage Access Control via Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing environments face challenges in managing access to shared block devices, leading to data loss and confusion among users due to simultaneous modifications by multiple users.
Innovation Solution
An access manager system that sets rules for access to block devices using a first-level access list (whitelist or blacklist) and a second-level access list for specific memory access commands, ensuring only authorized entities can perform allowed operations on the block device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple users are allowed to access and modify block devices simultaneously in a cloud environment, then resource utilization and productivity are improved, but data integrity deteriorates and data loss occurs due to concurrent modifications
Solution Approach 1:
The patent introduces an access manager as an intermediary component that sits between multiple users and the block device. This access manager enforces access control rules and coordinates simultaneous access requests, allowing multiple users to productively utilize the block device while preventing data integrity issues through controlled access mediation
2Reliability
If access controls are implemented to prevent data loss, then data integrity is improved, but system complexity increases due to the need for access management mechanisms
Solution Approach 1:
The access manager is configured with access control rules that enable it to autonomously evaluate and enforce access permissions without requiring complex real-time coordination or additional management overhead. The system serves itself by having the access manager independently handle access control decisions based on pre-configured rules, reducing overall system complexity
3Reliability
If access control rules are enforced to prevent unauthorized access, then security is improved, but operation speed deteriorates due to access verification overhead
Solution Approach 1:
Access control rules are pre-configured and established in the access manager before access requests occur. This preliminary setup allows the access manager to quickly evaluate access requests against predetermined rules without performing complex real-time analysis, thereby maintaining security while minimizing verification overhead and preserving operation speed
Data Source
AI summary
Systems and methods for managing access to a block device. An example method includes receiving, by a processing device from an entity operating in a cloud-computing environment, a memory access command referencing a block device of a distributed storage system that is accessible by a plurality of entities of the cloud computing environment; identifying a data structure associated with the referenced block device, wherein the data structure identifies entities of the cloud-computing environment that are allowed access to the block device; determining, in view of the data structure, whether the entity is allowed access to the block device by the memory access command; and responsive to determining that the entity is allowed access to the block device by memory access command, executing the memory access command.