Secured Cloud Storage Broker with Multi-Provider Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Internet-based data storage is vulnerable to service outages, security breaches, and data compromise due to reliance on single cloud providers, which can lead to inaccessibility and data compromise.
Innovation Solution
A secured cloud storage broker system that uses a random selection process following probability density functions to generate unique combinations of internet storage providers, subscription accounts, storage locations, and encryption algorithms, enhancing data security by distributing storage and encrypting data across multiple platforms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If data is stored with a single cloud storage provider, then storage simplicity is improved, but data accessibility and security deteriorate due to service outages or business failures
Solution Approach 1:
The patent segments data storage across multiple cloud storage providers instead of relying on a single provider. Each piece of data is distributed to different storage locations across multiple providers, ensuring that if one provider experiences service outage or business failure, the data remains accessible through other providers. This segmentation directly resolves the contradiction by maintaining simplicity through automated distribution while improving reliability through redundancy.
Solution Approach 2:
The system dynamically changes the parameter of storage location distribution by generating unique combinations of provider IDs, subscription accounts, storage locations, and file directories using random selection processes. This parameter change enables flexible data placement across multiple providers, achieving both storage simplicity through centralized management and improved reliability through distributed storage.
2Device complexity
If data is stored with a single cloud storage provider, then operational complexity is reduced, but security against breaches deteriorates
Solution Approach 1:
The patent segments encrypted data across multiple cloud storage providers, so that no single provider has access to the complete unencrypted dataset. Even if one provider suffers a security breach, the compromised data is only a fragment that cannot be decrypted without the corresponding encryption keys, which are stored separately. This segmentation reduces operational complexity through automated key management while significantly improving security.
Solution Approach 2:
The patent introduces encryption algorithms and encryption keys as intermediaries between the data and storage providers. The encryption layer acts as a mediator that protects data from security breaches at the storage provider level. The system manages these encryption intermediaries centrally, maintaining operational simplicity while providing robust security protection against breaches.
3Reliability
If random selection process with probability density functions is used to generate unique combinations, then data security is improved, but system complexity increases
Solution Approach 1:
The patent implements self-service through automated random selection processes that generate unique combinations of provider IDs, subscription accounts, storage locations, and file directories using probability density functions. This self-service automation handles the complexity of secure data distribution without requiring manual intervention, thereby improving data security through cryptographic randomness while maintaining manageable system complexity through automation.
Solution Approach 2:
The system manages complexity by dynamically changing parameters through programmatic generation of unique combinations. The random selection process with probability density functions automatically adjusts storage location parameters, making the system adaptable and secure without requiring complex manual configuration. This parameter automation resolves the contradiction by improving security through cryptographic methods while keeping system complexity manageable through software automation.
Data Source
AI summary
An apparatus includes a memory and a processor of a secured cloud storage broker (SCSB) coupled to the memory. The processor is configured to perform the steps of: receiving a request from a user to deposit data; confirming whether the user provides appropriate credentials; authenticating the request; generating a first unique combination of an internet storage provider ID, a subscription account, a storage location, a storage account, and a file directory; generating a second unique combination of a file ID, an encryption algorithm, and a key; encrypting the data using the encryption algorithm and the key; and sending the encrypted data to the file directory for storage.