Cryptographic Data Fragmentation for Resilient Distributed Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing networked data storage systems face security vulnerabilities due to multiple copies of data files, which create additional points of exposure, and lack robust resilience and native security measures.
Innovation Solution
A distributed network architecture that fragments data into multiple copies stored across resilient nodes, with each node holding only a part of the data, ensuring no single node can reconstruct the entire payload, and uses a blockchain for secure access permissions and data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complete copies of data files are stored in multiple systems for redundancy, then data availability is improved, but security vulnerabilities increase due to additional points of exposure
Solution Approach 1:
The patent divides complete data files into multiple encrypted fragments and distributes them across different storage nodes. No single node contains the complete data, eliminating the security vulnerability of having full copies exposed while maintaining availability through distributed storage. This directly resolves the contradiction by segmenting data so that redundancy does not create additional security risks.
Solution Approach 2:
The patent introduces encryption as an intermediary layer between the data and storage nodes. Data is encrypted and fragmented before distribution, and only authorized users with decryption keys can reconstruct the original data. This intermediary encryption mechanism allows multiple copies to exist for availability while preventing security vulnerabilities by ensuring that exposed fragments cannot be used without proper authorization.
2Object-affected harmful factors
If data is encrypted to secure it, then security is improved, but access control complexity increases
Solution Approach 1:
The patent segments both the data and the access control mechanism. Encryption keys are divided into multiple parts distributed to different users or systems. To access the data, multiple key parts must be combined, creating a multi-factor access control system that is secure but manageable through the segmentation of authorization rather than centralized complex control.
3Reliability
If multiple replicas of data fragments are stored in multiple nodes, then data resilience is improved, but storage resource consumption increases
Solution Approach 1:
The patent segments data into fragments and distributes them across the network, storing only necessary replicas. By segmenting the data storage requirement, the system can maintain resilience through selective replication of fragments rather than replicating entire data sets, reducing total storage consumption while maintaining availability and resilience.
Data Source
AI summary
Distributed Permissioned Data (DPD) network to securely store encrypted data by distributing multiple copies of data fragments in resilient nodes in the network. Data fragments are stored in multiple node chains in the network. Storing data in this distributed fashion offsets conditions where some nodes are not available because they are offline or unreachable. Nodes may also have other constraints placed on them, such as bandwidth utilization, storage limits, and CPU allocation. Multiple versions (replicas) of the data fragments are stored in multiple nodes to provide resiliency. By properly selecting a number of data fragments and a number of replicas, data stored in the network will be highly available.