Cloud Storage Namespace for On-Premise File Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud storage systems face challenges in providing secure and efficient access to on-premise private data, especially for large files and sensitive data sets that cannot be stored in the cloud due to security and compliance concerns.
Innovation Solution
The system facilitates access to private, on-premise files through a cloud storage system without physically storing the files in the cloud. It establishes a connection with the user, provides a unified client namespace representing both cloud and private storage, and offers connection information to access private files stored on-premise.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If files are stored in cloud storage system, then accessibility and ease of file sharing are improved, but data security and compliance requirements deteriorate
Solution Approach 1:
The patent introduces a cloud storage system as an intermediary that provides a unified namespace and access interface for both cloud-stored files and on-premise private files. This mediator allows users to access files without physically storing them in the cloud, thereby maintaining security while enabling accessibility. The cloud system acts as a gateway that bridges on-premise storage and cloud access without requiring data migration.
2Ease of operation
If large files are accessed through cloud-based server, then ease of file sharing is improved, but access speed and latency deteriorate
Solution Approach 1:
The patent segments the file storage architecture into two distinct parts: cloud storage for collaborative sharing and on-premise storage for high-speed local access. By segmenting the namespace to distinguish between cloud objects and local objects, the system allows users to access large files locally at high speed while still benefiting from cloud-based sharing capabilities. This segmentation resolves the contradiction by placing different file types in different locations based on their access patterns.
3Ease of operation
If data is migrated from on-premise servers to cloud, then accessibility is improved, but complexity of data management and migration deteriorates
Solution Approach 1:
The patent extracts the data access functionality from the physical storage location. Instead of migrating data to the cloud, the system extracts and provides a virtualized namespace that represents both cloud and on-premise files uniformly. This allows users to access files with the same interface regardless of their physical location, eliminating the need for complex data migration while maintaining mobility. The extraction of access rights from physical storage resolves the contradiction.
4Adaptability or versatility
If hybrid cloud storage solution is implemented, then versatility of storage options is improved, but system complexity and management overhead deteriorates
Solution Approach 1:
The patent implements a universal namespace that serves multiple functions: it represents cloud-stored files, on-premise private files, and provides unified access mechanisms. This multi-functional namespace eliminates the need for separate access interfaces for different storage locations, thereby reducing system complexity while maintaining versatility. The universal namespace allows a single system to handle diverse storage scenarios without requiring complex management overhead.
Data Source
AI summary
A method for providing access to objects associated with a particular client in a cloud storage system is disclosed. The method includes the steps of establishing a connection with a user, providing a client namespace associated with the client to the user, where the client namespace represents objects stored on the cloud storage system and objects stored on a private storage system apart from the cloud storage system, receiving a request from the user to access an object stored on the private storage system, and providing information to the user to facilitate access to the object stored on the private storage system by said user. Other systems and methods are also disclosed. Important advantages of the present invention are facilitated by separating the logic for user access (control plane) from the actual storage (Storage plane). Private file system access can still be managed from the cloud, while keeping the client data private.