Cloud Storage Erasure Coding for Adaptive Security Levels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud storage systems using EC-based network RAID face challenges in maintaining adequate data security, particularly when the number of damaged nodes exceeds the predefined security step, leading to potential data loss.
Innovation Solution
A method and device that detect access counts of user data sets in a cloud storage resource pool, determine user data sets with high access counts, and re-encode them with an erasure coding algorithm of a higher security level to increase the security step, thereby enhancing data security without compromising storage efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user data is stored with a fixed security level N+M in cloud storage, then storage efficiency is maintained, but data security is insufficient when the number of damaged nodes exceeds M
Solution Approach 1:
The patent implements dynamic security level adjustment by monitoring access counts of user data sets and automatically re-encoding data with higher security levels when access thresholds are exceeded. This transforms the static security level N+M into a dynamic parameter that adapts to actual data importance and access patterns, resolving the contradiction between fixed storage efficiency and insufficient security
Solution Approach 2:
The system changes the security parameter M (security step) from a fixed value to a variable that increases based on data access frequency. By implementing parameter changes in the erasure coding configuration, the system achieves higher reliability for frequently accessed data while maintaining lower security levels for less critical data, thus balancing security requirements with system complexity
2Reliability
If the security step M is increased to protect against more node failures, then data reliability improves, but storage space consumption increases
Solution Approach 1:
The patent applies different security levels (different values of M) to different user data sets based on their access counts and importance. Instead of uniformly increasing security across all data, the system locally adjusts security parameters only for data sets that exceed access thresholds, achieving high reliability where needed while conserving storage space for less critical data
Solution Approach 2:
The system implements partial security enhancement by re-encoding only those data sets whose access counts exceed predefined thresholds, rather than applying high security levels to all data. This partial action approach ensures data reliability for frequently accessed data while avoiding the excessive storage space consumption that would result from uniformly high security levels across the entire storage system
Data Source
AI summary
A method and device for improving data storage security, related to the technical field of cloud storage is disclosed. The method includes: detecting access counts of user data sets in a cloud storage resource pool, where the user data sets in the cloud storage resource pool are data obtained by encoding with an erasure coding algorithm of a first security level; determining a first user data set whose access count in the cloud storage resource pool meets a preset condition; obtaining a second security level according to attribute information of the cloud storage resource pool, wherein the attribute information includes the first security level and an increment for security step; and re-encoding the first user data set with an erasure coding algorithm of the second security level to obtain re-encoded first user data sets.