Data Protection System with Write Control Unit
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data protection systems, such as VDI and folder redirection techniques, face challenges in managing data centrally while supporting high processing capacity and security, leading to high introduction and maintenance costs, and insufficient data management capabilities.
Innovation Solution
A data protection system comprising an information processing apparatus with a redirection processing unit, write control unit, and local storage unit, which allows data access and writing to a data storage apparatus while prohibiting local storage writing, using a write management policy to control data access and storage, even when communication with the data storage apparatus is unavailable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VDI is used to centrally manage data and program execution environment, then data security is improved, but processing capacity requirements and introduction costs increase enormously
Solution Approach 1:
The patent segments data management into two parts: user-accessible data stored centrally on the server, and system-critical data stored locally in read-only fashion. This segmentation allows local programs to run without requiring full virtualization, reducing processing capacity requirements while maintaining data security through centralized control of user data.
Solution Approach 2:
The patent introduces a folder redirection mechanism as an intermediary between local storage and centralized data management. This intermediary allows local programs to access and write to user data on the server without requiring the entire system to be virtualized, thereby reducing the processing power needed compared to full VDI while maintaining security.
2Ease of operation
If folder redirection technique is used to allow local storage access, then ease of operation is improved, but data management control deteriorates
Solution Approach 1:
The patent applies different quality controls to different data types: user data is stored centrally with full redirection access for ease of operation, while system data is stored locally in read-only fashion to maintain management control. This local quality approach allows simultaneous improvement of ease of operation for user data and preservation of data management control for system data.
3Productivity
If data is stored in client local storage, then productivity is improved through fast access, but data leakage risk increases
Solution Approach 1:
The patent performs preliminary action by pre-storing user data on the server in accessible locations before any potential data access needs arise. The folder redirection mechanism is pre-configured to provide fast access paths to this centrally stored data, eliminating the need for local storage while maintaining productivity through optimized access routes.
Data Source
AI summary
A data protection system includes a data storage apparatus and an information processing apparatus. In the information processing apparatus, a redirection processing apparatus sets a personal storage area corresponding to a user to an accessible state according to a redirection policy. Furthermore, a write control unit controls data writing permission/prohibition for each storage area according to a write management policy. In particular, the write control unit prohibits data writing to a local storage unit except for the storage area to be used to access the personal storage area. With this, the data does not remain in the information processing apparatus, thereby preventing data leakage from the information processing apparatus.