Data Partitioning for Edge and Cloud Storage Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The increasing trend of data storage at edge computing facilities and in public/hybrid clouds increases the vulnerability of sensitive data to leaks and breaches, as it becomes more dispersed and potentially accessible from multiple locations.

Innovation Solution

The technology involves partitioning data into multiple parts, where only the full set of partitions can reconstruct the original data, thereby reducing the risk of unauthorized access. Sensitive data is maintained at a secure location, while larger partitions are placed closer to edges or in public/hybrid clouds to reduce latency and storage costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If data is stored at edge computing facilities and in public/hybrid clouds, then data accessibility and application performance are improved, but data security and vulnerability to breaches are worsened

Engineering Contradiction:

Improvedata accessibilityVSAvoiddata security

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent divides data into multiple partitions and stores them across different locations (edge computing facilities, public clouds, hybrid clouds). This segmentation allows data to be accessible from multiple distributed locations while maintaining security, as no single location contains the complete data set. The partitions can be reassembled only when needed and with proper authorization.

Inventive Principle:

Principle #1Segmentation

2Ease of operation

If data is dispersed across multiple storage locations, then data accessibility is improved, but vulnerability to data leaks increases

Engineering Contradiction:

Improvedata accessibilityVSAvoidvulnerability to data leaks

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

By segmenting data into multiple partitions stored at different locations, the system enables easy access from various points in the distributed infrastructure while reducing the risk of complete data exposure. Even if one location is compromised, the attacker only obtains partial data that is useless without the other partitions.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Different partitions of data can be stored with different security characteristics and access controls appropriate to their specific location and sensitivity. This allows tailored security measures at each storage location while maintaining overall system accessibility.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS12204675B2Storing data at edges or cloud storage with high security

Publication Date: 2025.01.21 AT&T INTELLECTUAL PROPERTY I L P

AI summary

The disclosed technology is directed towards partitioning data and distributing the data to different storage locations, which facilitates better data security. For example, a large database of source data can be partitioned into a small enabler partition and one or more large partitions, in which a full set of the partitions is needed to reconstruct the source data to its original state. The large partition can be maintained at an edge computing facility to reduce latency, or at a cloud computing facility to reduce storage expenses, with the smaller enabler partition only accessed when needed to reconstruct the data. A database is partitioned into a group of partitions, and the group of partitions is distributed to separate storage facilities. The separate storage and computing facilities/nodes are accessed to obtain datasets of the group of partitions, and merged to reconstruct the source data.