Data Storage Segmentation and Encryption for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems face challenges in securing and managing vast amounts of data generated by various devices, including loss due to hardware malfunctions, intentional destruction, and human error, while also dealing with non-essential data that occupies space and diverts resources from vital information.
Innovation Solution
A computer system and method that includes data capture devices, a staging server, a presentation system, and a data storage system, which securely collects, encrypts, verifies, and stores data using encryption keys, ensures data integrity through hash verification, and automatically disposes of data no longer needed, adhering to legal retention periods and industry standards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If data is stored in large quantities from multiple devices, then data completeness is improved, but data security deteriorates due to increased vulnerability to loss and unauthorized access
Solution Approach 1:
The patent segments data into multiple blocks and distributes them across multiple storage locations. Each block is encrypted separately, so that compromise of one block does not endanger the entire dataset. The system divides data storage into primary storage locations and backup locations, creating a segmented architecture that improves both security and reliability.
Solution Approach 2:
The patent employs composite security mechanisms by combining multiple encryption layers (device-level encryption, transit encryption, and storage encryption), hash verification, digital signatures, and multi-factor authentication. This composite approach creates a robust security framework that protects large volumes of data without sacrificing security.
2Loss of information
If all captured data is retained, then data availability is improved, but resource efficiency deteriorates due to storage of non-essential data
Solution Approach 1:
The patent implements preliminary classification and filtering of data at the point of capture. Metadata is extracted and analyzed to determine data essentiality before full storage occurs. Non-essential data is filtered out or stored in compressed form, while essential data receives full storage resources. This preliminary action prevents wasteful allocation of storage resources.
Solution Approach 2:
The patent applies different storage quality levels to different data based on their essentiality. Critical data receives redundant storage across multiple locations with full encryption and verification, while non-critical data is stored with minimal redundancy. This local quality differentiation optimizes resource efficiency while maintaining data availability for essential information.
3Ease of operation
If manual data management processes are used, then operational flexibility is improved, but productivity deteriorates due to time-consuming manual intervention
Solution Approach 1:
The patent implements automated self-service mechanisms including automatic data classification, automatic encryption key generation and management, automatic integrity verification through hash comparison, and automatic disposal of expired data. The system autonomously performs these tasks without requiring manual intervention, thereby dramatically improving productivity while maintaining operational flexibility through configurable policies.
Solution Approach 2:
The patent incorporates continuous feedback loops where the system automatically monitors data integrity, storage capacity, and access patterns. Based on this feedback, the system dynamically adjusts storage allocation, triggers data disposal when retention periods expire, and alerts administrators to potential security issues. This automated feedback mechanism maintains flexibility while eliminating manual monitoring tasks.
Data Source
AI summary
A computer system for collecting, securing, storing, retrieving, and disposing data includes an input that receives data from one or more data capture devices, a staging server, a data storage system, and a presentation system. The data capture devices may capture data and transmit it to the staging server via the input. The staging server encrypts the data and transmits it to the data storage system. The data storage system is configured to store the data for a predetermined retention period, and if the data has a legal hold, the data storage system will safely secure the data until the hold is lifted. The presentation system is configured to communicate with the data storage system to request and access data for an authorized user.