Delayed Secure Deletion List for Copy-on-Write File Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Copy-on-write file systems face security risks due to the presence of multiple file versions, which can be exploited by attackers, as older versions of sensitive data remain accessible even after deletion, compromising security.
Innovation Solution
Implementing a delayed secure deletion list that tracks and periodically trims entries for sensitive files, ensuring that all older versions can be securely erased simultaneously when they pose a security risk, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple copies of files are stored in copy-on-write file system, then system robustness and reliability are improved, but security vulnerability increases due to accessible older versions
Solution Approach 1:
The system proactively identifies and flags old file versions as they are created during copy-on-write operations, storing their location information in a delayed secure deletion list. This preliminary action enables future secure deletion without waiting for manual intervention, thus preventing potential security breaches while maintaining the reliability benefits of versioning.
Solution Approach 2:
A delayed secure deletion list serves as an intermediary data structure that stores location information of old file versions. This intermediary enables the system to track and manage deprecated versions without immediately deleting them, allowing for controlled secure deletion while maintaining system robustness through version history.
2Object-affected harmful factors
If delayed secure deletion list is implemented to track sensitive files, then security is improved, but device complexity increases
Solution Approach 1:
The delayed secure deletion mechanism is selectively applied only to files marked as sensitive or important, rather than all files in the system. This localized approach improves security for critical files while minimizing the added complexity to overall file management operations.
Solution Approach 2:
Instead of immediately deleting old file versions, the system creates a copy of the deletion information in a delayed secure deletion list. This copying approach allows the original file versions to remain accessible for a period, enabling secure deletion planning while simplifying the immediate file management process.
3Productivity
If deletion list is periodically trimmed to maintain performance, then system performance is improved, but risk of incomplete secure deletion increases
Solution Approach 1:
The system implements a feedback mechanism where the delayed secure deletion list is periodically reviewed and trimmed based on system performance metrics. This feedback loop ensures that secure deletion operations are performed at optimal intervals, maintaining system performance while ensuring complete deletion of tracked sensitive file versions.
Solution Approach 2:
Secure deletion operations are performed periodically rather than continuously or immediately. This periodic action allows the system to batch process deletions, improving performance by reducing the frequency of deletion operations while ensuring that all tracked sensitive files are eventually deleted through the delayed secure deletion list.
Data Source
AI summary
Disclosed herein are systems, methods, and non-transitory computer-readable storage media for a delayed secure deletion of files from a copy-on-write file system. A system configured to practice the method receives a change to a file, writes a copy of the file in a first block of a storage device, the copy including the change, determines whether the change meets a predetermined condition, adds an entry into a delayed secure deletion list when the change triggers the predetermined condition, the entry storing an address associated with the first block, and deletes the first block when another change to the file is received, wherein the another change triggers another predetermined event.