Directory Service Backup Segmentation for Predictive File Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data deduplication and backup systems face challenges in efficiently managing large assets with specialized directory services, leading to complex management of schedules, policies, and distributions, and time-consuming recovery processes for critical information loss.
Innovation Solution
Implementing a file-based backup (FBB) system with metadata management for intelligent sub-asset creation, predictive restoration, and delta anomaly detection to optimize storage and security scanning.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If data is backed up as a single large asset, then storage management is simplified, but recovery of specific critical data becomes time-consuming
Solution Approach 1:
The patent segments a large backup asset into multiple sub-assets based on directory service types (e.g., Active Directory, LDAP). Each sub-asset contains data from specific directory services and can be independently managed and restored. This segmentation enables selective recovery of critical directory service data without requiring restoration of the entire backup asset, thereby reducing recovery time while maintaining manageable organization through categorical grouping.
2Device complexity
If all backup data is retained with equal priority, then data retention is simplified, but storage resources are wasted on non-critical data
Solution Approach 1:
The patent applies different retention policies to different sub-assets based on their directory service type and criticality. Critical directory services (e.g., Active Directory) receive longer retention periods and higher priority, while less critical services receive shorter retention. This local quality approach optimizes storage resource allocation by retaining only the necessary amount of data for each category, reducing overall storage consumption while maintaining simplified policy management through type-based categorization.
3Reliability
If entire backup assets are scanned for security anomalies, then security coverage is comprehensive, but scanning time and computational resources are excessive
Solution Approach 1:
The patent segments the backup asset into sub-assets corresponding to different directory service types, enabling targeted security scanning of only relevant sub-assets. Instead of scanning the entire backup asset, the system identifies and scans only the sub-assets that contain potentially affected data based on the security threat context. This segmentation maintains comprehensive security coverage for critical areas while significantly reducing scanning time and computational resource consumption by excluding irrelevant sub-assets from the scan.
Data Source
AI summary
A method for managing access to a file based backup (FBB) includes generating, two backup snapshots, each at two points-in-time and each associated with a set of files, comparing the first backup snapshot and the second backup snapshot to generate a difference snapshot, wherein the difference snapshot specifies a third set of files that are different between the first set of files and the second set of files, providing a recovery notification to an application accessing the asset, wherein the recovery notification specifies recovering a file in the third set of files, obtaining a selection of the file in the third set of files from the application, and in response to the selection, performing a recovery of the file.


