Decentralized File Storage with Actor Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current digital file storage systems, particularly in cloud computing, face security concerns such as file misappropriation, interception, and unauthorized access due to reliance on third-party controllers, leading to issues like intellectual property theft and privacy invasion, as well as environmental impact from data replication and high costs.
Innovation Solution
A system utilizing an actor authorization node, access right storage node, and file record node, combined with blockchain technology for secure file fragmentation and encryption, ensures only trustworthy actors can access and modify files, with decentralized storage and offline key management to prevent unauthorized access and data breaches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If cloud storage systems are used for fast and efficient file storage, then storage speed and accessibility are improved, but security risks and trust issues increase due to third-party control
Solution Approach 1:
The file is divided into multiple fragments and distributed across different storage nodes in the decentralized network. Each fragment is encrypted separately, so that no single node has access to the complete file, thereby maintaining security while enabling fast distributed storage and retrieval through parallel processing
Solution Approach 2:
A smart contract acts as an intermediary between the user and the decentralized storage network. The smart contract automatically manages file fragmentation, distribution, retrieval, and reassembly, eliminating the need for trusted third-party controllers while maintaining security through automated, transparent rules
2Reliability
If data is replicated across multiple servers for redundancy and disaster recovery, then data availability and reliability are improved, but environmental impact and costs increase
Solution Approach 1:
Instead of replicating entire files across multiple servers, the system segments files into fragments and distributes them across a decentralized network of storage nodes. This reduces redundant data storage while maintaining availability through distributed access, thereby lowering the environmental impact of data replication
Solution Approach 2:
The decentralized storage network operates without centralized control, with nodes autonomously managing their own storage resources. Users directly interact with the network through smart contracts, eliminating the need for energy-intensive centralized data centers and their associated environmental costs
3Reliability
If traditional encryption methods are used with centralized key management, then data security is improved, but single points of failure and trust issues arise
Solution Approach 1:
The encryption key is segmented into multiple key fragments using secret sharing schemes. Each fragment is stored separately in the decentralized network, and a threshold number of fragments are required to reconstruct the original key. This eliminates single points of failure while reducing key management complexity through automated smart contract execution
Solution Approach 2:
Key fragments are pre-distributed to multiple nodes in the decentralized network before any data access occurs. This preliminary distribution of key fragments eliminates the need for centralized key management during operation, reducing both security risks and operational complexity
Data Source
AI summary
A computer implemented method in a system comprising an actor authorization node, an access right storage node and a file record node. The method comprises receiving, from a computing device, a request to access a file, the request comprising information identifying an actor making the request and a file to be accessed, obtaining an indication from the actor authorization node whether or not the identified actor is recorded on the actor authorization node as trustworthy, obtaining an indication from the access right storage node of the access right the identified actor has to the identified file, if the identified actor has been indicated by the actor authorization node as being trustworthy and by the access right storage node as having access rights, obtaining file storage and access details from the file record node and sending the file storage and access details to the computing device or using the file storage and access details to access the stored file and sending the accessed file to the computing device. The file storage and access details comprise at least one of a file storage location, a file encryption key, a calculated characteristic of the stored file and a calculated characteristic of an encrypted version of the stored file.