Cloud Storage Gateway Hashing Folder Names
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud storage services are vulnerable to data leaks due to human error, as folder names can be easily discovered and accessed, leading to accidental exposure of sensitive data, and existing encryption methods are inadequate for multi-user environments and dynamic access policies.
Innovation Solution
A dual-layer secured hashing-based cloud file system that uses a control layer to hash folder names with a random salt and multiple iterations, masking the identities of cloud storage folders, and a data layer for persistence, reducing the likelihood of accidental data leaks and protecting against malicious discovery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If folder names are openly accessible in cloud storage services, then ease of operation is improved, but data security deteriorates due to easy discovery and accidental leaks
Solution Approach 1:
The patent introduces a cloud storage gateway as an intermediary layer between users and the cloud storage provider. This gateway masks the actual folder names by presenting hashed versions to users, thereby preventing direct discovery of real folder identities while maintaining operational ease through the abstraction layer.
Solution Approach 2:
The patent transforms folder names from their original human-readable form into hashed parameter representations. By changing the parameter form of folder identifiers through cryptographic hashing, the system maintains usability while eliminating the security vulnerability of exposed folder names.
2Ease of operation
If cloud security settings are simplified for ease of use, then ease of operation is improved, but security reliability deteriorates due to improper configurations
Solution Approach 1:
The patent implements self-service security by automatically generating and managing hashed folder names without requiring users to manually configure security settings. The system autonomously handles the security transformation, eliminating human error in security configuration while maintaining ease of use.
3Object-affected harmful factors
If traditional encryption methods are used for data protection, then data security is improved, but device complexity increases due to key management requirements
Solution Approach 1:
The patent extracts the key management complexity from the system by using hashing instead of traditional symmetric encryption. Hashing is a one-way function that does not require key generation, distribution, or management, thereby providing data protection while eliminating the complex key infrastructure.
4Object-affected harmful factors
If folder names are hashed to prevent discovery, then data security is improved, but ease of operation deteriorates due to access complexity
Solution Approach 1:
The patent performs preliminary hashing of folder names during the folder creation process, storing both the hashed version for security and maintaining a mapping in the cloud storage gateway. This preliminary action ensures that security is built-in from the start while the gateway handles the complexity of reverse mapping, keeping user operations simple.
Data Source
AI summary
A cloud security system and method designed to protect users' data in case of accidental leaks in a cloud computing environment. Secured hashing of the names of folders stored on the cloud data storage are generated and persisted using multiple iterations of cryptographic hash functions along with a concatenated random number for each of the folder names, thereby providing protection against vulnerability of the folder names. The proposed system is a dual-layer framework consisting of a control layer and a data layer. The control layer is responsible for cryptographic hashing and persistence of the folder name, hashed name, salt, and iterations in a database. The control layer communicates with the data layer and provides the hashed folder names to persist the user data cloud storage.