Cloud Object Store for Isolated Recovery Systems

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current data backup and archiving solutions are vulnerable to cyber threats due to direct communication between production systems and backup storage systems, which can lead to contamination and exposure of sensitive data.

Innovation Solution

Implementing a cloud-based object store as an intermediate storage relay between production systems and isolated recovery systems, minimizing exposure to external threats by acting as a secure intermediary and allowing the isolated recovery system to be deployed as a service, independent of the production system's configuration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If direct communication between production system and backup storage system is used, then data backup functionality is achieved, but the backup storage system is exposed to cyber threats and attacks

Engineering Contradiction:
Improvedata securityVSAvoidcyber threat exposure
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a cloud-based object store as an intermediary component between the production system and the isolated recovery system. This mediator enables indirect data transfer through authenticated API calls, breaking the direct communication link that exposes the backup system to cyber threats. The object store acts as a secure buffer that receives data from production systems and makes it available to recovery systems without requiring them to communicate directly.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If isolated recovery system is used to minimize exposure, then security is improved, but direct communication for backup is lost

Engineering Contradiction:
Improvecyber threat exposureVSAvoidbackup communication
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The cloud-based object store serves as a communication intermediary that enables the isolated recovery system to access backup data without direct connections to the production system. The system uses authenticated API calls to the object store, allowing seamless data retrieval while maintaining isolation. This resolves the contradiction by providing ease of operation through standardized API interfaces while preserving security through system isolation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The object store provides universal access capabilities through standardized APIs that work across different systems and configurations. It serves multiple functions including data storage, data transfer coordination, and authentication verification, enabling the isolated recovery system to perform backup operations without direct communication while maintaining operational simplicity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If cloud-based object store is introduced as intermediary, then security and flexibility are improved, but system complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidsystem architecture
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

While the object store adds a component to the system architecture, it actually simplifies the overall complexity by providing a standardized, managed service that handles data storage and retrieval operations. Rather than requiring complex point-to-point communication configurations between multiple systems, the object store offers a single, unified interface that abstracts away the complexity of direct system-to-system communication protocols and security configurations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS10635838B1Cloud based dead drop for isolated recovery systems
Publication Date: 2020.04.28 EMC IP HLDG CO LLC
  • US10635838B1 patent drawing
  • US10635838B1 patent drawing
  • US10635838B1 patent drawing

AI summary

A method and system for implementing a cloud-based dead drop for isolated recovery systems. Specifically, the disclosed method and system entail the interjection of an object store as an intermediate storage relay between a production system and an isolated recovery system. The object store minimizes, if not eliminates, the exposure of data secured in the isolated recovery system from external cyber threats and attacks, as well as launches the deployment of the isolated recovery system as a service that may support any system.