Cloud Storage Security via File Segmentation and Distributed Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud storage services provide limited security and storage capacity, making them vulnerable to cyberattacks and data loss, as they rely on a single cloud drive for encryption and decryption without considering distributed storage solutions.
Innovation Solution
A cloud secured storage system utilizing a peer-to-peer network with a client end and a farm end, including a user server and multiple cloud servers, which segments files into data units, encrypts them using a hash function, and distributes them across cloud servers using a stochastic matrix and identification numbers, ensuring secure storage and backup to prevent cyberattacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single cloud drive is used for cloud storage, then the system is simple to operate, but the security and storage capacity are limited
Solution Approach 1:
The user file is segmented into multiple data units, which are then encrypted and distributed across multiple cloud servers. This segmentation prevents a single point of failure and enhances security while maintaining operational simplicity through automated processes.
Solution Approach 2:
The system transitions from a single-cloud-drive architecture to a multi-server distributed architecture, adding the dimension of distribution across multiple nodes. This resolves the contradiction by providing both enhanced security through distribution and maintained ease of operation through automated management.
2Device complexity
If a single cloud drive is used for cloud storage, then the system structure is simple, but the storage capacity is limited
Solution Approach 1:
Multiple cloud servers are merged into a unified distributed storage system. The servers work together as a single logical storage unit, providing expanded capacity while presenting a simple interface to users through automated file distribution and management.
Solution Approach 2:
The distributed cloud server system serves multiple functions simultaneously: it provides expanded storage capacity, enhanced security through distribution, and automated file management. This multi-functionality resolves the contradiction by delivering both simplicity and increased capacity.
3Reliability
If files are encrypted and segmented across multiple cloud servers, then security is enhanced, but the system complexity increases
Solution Approach 1:
The system implements automated processes where the cloud server automatically segments files into data units, encrypts them, determines hash values, and distributes them across multiple servers. This self-service automation enhances security while minimizing the complexity burden on users.
Solution Approach 2:
The cloud server acts as an intermediary that handles the complex operations of segmentation, encryption, and distribution. This intermediary absorbs the system complexity, allowing users to benefit from enhanced security without directly managing the complexity.
4Reliability
If data is distributed across multiple cloud servers, then security against cyberattacks is improved, but the difficulty of data management increases
Solution Approach 1:
The system uses hash values as feedback mechanisms to track and verify data units across multiple cloud servers. This automated feedback system simplifies data management by providing a straightforward method to detect, locate, and retrieve distributed data without manual intervention.
Data Source
AI summary
A cloud secured storage system is provided in a peer-to-peer network that includes a client end and a farm end. A user file is segmented and a hash function is used for encryption to generate a plurality of data chunks together with an Information Dispersal Algorithm. The plurality of data chunks are respectively stored in a plurality of cloud servers. The plurality of cloud servers backup the plurality of data chunks as a backup file. If the data chunk in one of the plurality of cloud servers is lost, the adjacent cloud server transmits the backup file to the cloud server where the data chunk is lost. The cloud secured storage system of the present disclosure successfully stores the user file in the plurality of cloud servers to prevent cyberattacks owing to the process of file segmentation, encryption, backup file, and algorithm.