Cloud Drive User Data Isolation via Location Mapping
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud storage systems face challenges in maintaining user data privacy and security when disk drives are sold or leased to different users, as traditional encryption methods are inefficient and overwriting large capacities is impractical, leading to delayed resale and increased costs.
Innovation Solution
Implementing a user-data-isolation measure that binds user data with unique identifiers and validates location mappings, ensuring only the data writer can access the data, by using a two-level table lookup and internal hash functions to generate unique IDs, and erasing the location-mapping table upon resale.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used to protect user data on cloud drives, then data security is improved, but system efficiency deteriorates due to the impracticality of overwriting large storage capacities
Solution Approach 1:
The patent segments the data protection mechanism by introducing a location-mapping table that separates logical addresses from physical storage locations. This segmentation allows the system to protect data without requiring complete overwriting of the entire storage capacity, as only the mapping table needs to be cleared for secure resale
Solution Approach 2:
The patent applies preliminary action by pre-establishing the location-mapping table before data is written to the cloud drive. This table is updated whenever data location changes, and the system proactively clears only this mapping table upon resale, avoiding the need for time-consuming complete data erasure while maintaining security
2Adaptability or versatility
If disk drives are sold or leased to different users, then resource utilization is improved, but user data privacy deteriorates due to potential unauthorized access to previous users' data
Solution Approach 1:
The patent introduces the location-mapping table as an intermediary layer between users and their data. This intermediary structure enables the system to control data access by clearing the mapping table when drives are transferred between users, thereby protecting previous users' data privacy while allowing the drive to be reused by new users
3Object-affected harmful factors
If complete data erasure is performed before resale, then data privacy is improved, but resale time increases due to the large storage capacity requiring extensive erasure
Solution Approach 1:
The patent extracts the essential security function from the location-mapping table, which contains the critical information needed to access stored data. By clearing only this compact mapping table rather than the entire storage capacity, the system achieves adequate data privacy protection while dramatically reducing the time required for resale preparation
Data Source
AI summary
One embodiment described herein provides a system and method for isolating data written by different users on a cloud drive. During operation, the system receives a write request from a first user comprising to-be-written data, the to-be-written data being associated with a writer's identifier for the first user. The system then writes the to-be-written data bound with the writer's identifier into physical media associated with the cloud drive, thereby facilitating user data isolation by preventing a second user having a reader's identifier that is different from the writer's identifier of the first user from gaining access to the written data.