Cloud Virtual Data Volume Mounting Identifier Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cloud data storage environments, there is a risk of data leakage when virtual data volumes are mounted to virtual machines belonging to different users, as administrators can mistakenly mount data from one user to another, allowing unauthorized access.
Innovation Solution
Implementing a method where virtual data volumes are assigned identifiers corresponding to the home identifier of their original user, ensuring that data can only be mounted or transferred to virtual machines belonging to the same user by determining if the home identifiers match, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If administrators can mount virtual data volumes to any virtual machine for flexibility, then adaptability is improved, but data security deteriorates due to potential data leakage between different users
Solution Approach 1:
The system performs preliminary verification by comparing the home identifier of the virtual data volume with the user identifier of the target virtual machine before allowing the mounting operation. This pre-check prevents unauthorized mounting attempts from succeeding, thereby maintaining data security while preserving administrative flexibility for legitimate operations
2Ease of operation
If administrators have unrestricted mounting rights for operation and maintenance, then ease of operation is improved, but harmful factors increase due to potential unauthorized data access
Solution Approach 1:
The system implements a feedback mechanism where the mounting operation is conditionally permitted based on real-time verification of identifier matching. The cloud operating system automatically checks whether the home identifier corresponds to the target virtual machine's user identifier and provides immediate feedback by either permitting or blocking the mounting operation, thus enabling safe administrative flexibility
Data Source
AI summary
A cloud system data management method for alleviate a data leakage problem occurring when a user accessed by another user when a virtual data volume of the user is mounted to a virtual machine of another user includes creating a first virtual machine for a user and allocating a virtual data volume to the first virtual machine, setting an identifier of the virtual data volume as an identifier corresponding to a home identifier of the first virtual machine, determining, according to the identifier of the virtual data volume and a home identifier of a second virtual machine, whether the virtual data volume and the second virtual machine belong to a same user when the virtual data volume needs to be mounted to the second virtual machine, forbidding the virtual data volume to be mounted to the second virtual machine when they do not belong to the same user.