Centralized Directory Server for Storage User Account Mapping

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In network storage systems, localized storage of user account mapping data leads to inefficiencies, security weaknesses, and increased administrative effort due to redundant data storage across multiple servers, particularly when handling different operating systems.

Innovation Solution

Implementing a centralized storage and management system using a directory server to map user account information across different operating systems, allowing storage servers to access and manage user account data efficiently and securely through a network, utilizing LDAP directory services for data storage and retrieval.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If user account mapping data is stored locally on each storage server, then access speed for user verification is improved, but data redundancy increases and security weakens

Engineering Contradiction:
Improveuser verification access speedVSAvoidsecurity strength
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

A centralized user account mapping server is introduced as an intermediary between storage servers and clients. This mediator centrally stores user account mapping data and provides it to storage servers upon request, eliminating the need for local storage on each server while maintaining fast access through centralized caching mechanisms.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If user account mapping data is stored locally on each storage server, then user verification can be performed, but administrative effort and time consumption increase

Engineering Contradiction:
Improveuser verification capabilityVSAvoidadministrative setup time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The user account mapping functionality is merged into a single centralized server that serves multiple storage servers. This consolidation eliminates the need for administrators to manually configure mapping data on each individual storage server, reducing setup time and administrative burden while maintaining verification capabilities.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If user account mapping data is stored locally on each storage server, then data availability is ensured, but storage space efficiency decreases

Engineering Contradiction:
Improvedata availabilityVSAvoidstorage space utilization
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The user account mapping data is extracted from local storage on each storage server and consolidated into a single centralized database. Storage servers only retain cached copies of frequently accessed mapping data, significantly reducing redundant storage space while maintaining data availability through the centralized source.

Inventive Principle:
Principle #2Taking out (Extraction)

4Reliability

If centralized user account mapping is implemented, then security is improved and administrative burden is reduced, but network dependency increases

Engineering Contradiction:
Improvesecurity strengthVSAvoidnetwork architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

User account mapping data is preliminarily cached on storage servers upon first retrieval from the centralized server. This preliminary action reduces subsequent network dependency by allowing storage servers to operate autonomously using cached data, while still maintaining security benefits of centralized management for critical updates and deletions.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS7668871B1Providing mapped user account information to a storage server
Publication Date: 2010.02.23 NETAPP INC
  • US7668871B1 patent drawing
  • US7668871B1 patent drawing
  • US7668871B1 patent drawing

AI summary

A method for storage of user mapping data associated with users of data stored by storage servers includes operating multiple storage servers, each configured to provide a set of clients with access to data stored in a set of mass storage devices, and using one or more directory servers, which may be coupled to the storage servers via a network. The directory server stores and provides access to user account information associated with a second operating system based on user account information associated with a first operating system, when the user account information associated with the second operating system is needed to access data stored in accordance with the second operating system.