Data Volume Security Standards for Conflict-Free Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data storage environments fail to prevent conflicts between different security authentication measures, leading to data loss and latency due to malicious insiders exploiting these conflicts, as existing security measures are siloed and unaware of conflicting operations.
Innovation Solution
Implement a control unit that determines and applies a first standard of security protection to a data volume, preventing actions by vectors with less strict standards and allowing actions by vectors with equally or more strict standards, thereby enforcing an end-to-end elevated control methodology to reduce conflicts and computational operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple security authentication measures are implemented in data storage environment, then data security is improved, but conflicts between different security standards lead to data loss and latency
Solution Approach 1:
The patent introduces a control unit as an intermediary that mediates between multiple vectors (users, processes, or systems) attempting to access data volumes. This control unit receives access requests, determines the security standards of each requesting vector, compares them against the data volume's security requirements, and authorizes or denies access accordingly. This intermediary prevents direct conflicts by centralizing security decision-making, ensuring that only authorized vectors can access protected data volumes.
Solution Approach 2:
The control unit implements a universal security evaluation mechanism that can handle multiple different security standards and authentication measures simultaneously. It evaluates various vectors against a common framework of security requirements, allowing the system to maintain multiple security measures without conflicts. The control unit serves multiple functions: receiving requests, evaluating security standards, comparing them against data volume requirements, and making authorization decisions, thereby unifying the security management across diverse access scenarios.
2Object-affected harmful factors
If security protection standards are applied to data volumes, then unauthorized access is prevented, but malicious insiders can still exploit conflicts between security measures
Solution Approach 1:
The control unit implements a feedback mechanism that continuously monitors and evaluates the security standards of vectors attempting to access data volumes. When a vector's security standard is evaluated as insufficient compared to the data volume's requirements, the control unit provides feedback by denying access. This feedback loop ensures that even malicious insiders cannot exploit conflicts, as each access attempt is independently evaluated against the established security requirements, and unauthorized attempts are immediately blocked with feedback to the requesting vector.
3Reliability
If conventional security measures are implemented, then basic protection is provided, but conflicts between measures cause latency and reduce system efficiency
Solution Approach 1:
The control unit performs preliminary evaluation of vector security standards before actual data access operations. By pre-determining which vectors meet the security requirements for accessing specific data volumes, the system avoids unnecessary conflicts and security checks during actual data operations. This preliminary action ensures that only authorized vectors are allowed to proceed with data access, thereby maintaining basic protection while reducing latency and improving system efficiency by eliminating redundant security evaluations during data operations.
Data Source
AI summary
A computer-implemented method (CIM), according to one embodiment, includes determining a first standard of security protection of a first vector, and applying the first standard of security protection to a first volume of data. In response to a determination that a second standard of security protection of a second vector is relatively less strict than the first standard of security protection, an action by the second vector is prevented from being performed on the first volume of data for at least a duration that the first standard of security protection is applied to the first volume of data. In response to a determination that a third standard of security protection of a third vector is relatively more strict than the first standard of security protection, an action by the third vector is allowed to be performed on the first volume of data.