Connection Manager for Data Storage Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In data storage systems, there is a need to effectively manage connections and exclude unauthorized entities from performing data storage operations, as existing methods often result in denial of services to authorized entities due to inability to control external computing devices.
Innovation Solution
A system with a connection manager component and unauthorized connection data structure that uses blacklists and whitelists to manage connection requests, allowing or refusing connections based on authentication and authorization, and dynamically updating entries to control access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the organization removes authorization of external computing devices to access resources, then unauthorized access is prevented, but the organization cannot effectively exclude external devices that are not under its control
Solution Approach 1:
The patent introduces a connection manager as an intermediary component that sits between external computing devices and the data storage system resources. This connection manager monitors and controls connection requests, maintaining authorization status independently of the organization's direct control over external devices. The connection manager acts as a mediator that can prevent unauthorized access even when the organization cannot directly control the external devices themselves.
2Productivity
If the local computing device continues to service authorized entities, then data storage operations are maintained, but resources are consumed by connection requests from unauthorized external devices
Solution Approach 1:
The connection manager performs preliminary actions by evaluating and filtering connection requests before they reach the local computing device. By checking authorization status and blocking unauthorized connections in advance, the system prevents resource consumption from unauthorized devices while allowing authorized data storage operations to proceed without interruption.
3Adaptability or versatility
If the system accepts connection requests on all NICs, then all network interfaces are utilized, but unauthorized connections can enter through any interface
Solution Approach 1:
The connection manager applies different authorization rules to different network interfaces (NICs). Each NIC can be configured with specific authorization policies, allowing the system to utilize multiple network interfaces while applying localized security controls to each one. This enables the system to accept connections on all NICs from authorized sources while blocking unauthorized connections on any specific interface.
Data Source
AI summary
Described in detail herein are systems and methods for managing connections in a data storage system. For example, the systems and methods may be used to manage connections between two or more computing devices for purposes of performing storage operations on the data of one of the computing devices. The data storage system includes at least two computing devices. A first computing device includes an unauthorized connection data structure and a connection manager component. The connection manager component receives a connection request from a second computing device. If the second computing device is not identified on the unauthorized connection data structure, the connection manager component can request that an authentication manager authenticate the second computing device and/or determine whether the second computing device is properly authorized. If so, the connection manager component can allow the second computing device to connect to the first computing device.