Dispersed Data Decoding and Decryption for Secure Fault-Tolerant Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data storage solutions, such as RAID systems, face challenges in providing effective and efficient data continuity, minimizing the adverse effects of multiple memory element failures, and ensuring security, especially as the number of discs increases, leading to higher probabilities of failure and unauthorized access when data is replicated across multiple sites.
Innovation Solution
A dispersed data storage system that uses a combination of information dispersal algorithms, transposition ciphers, and encryption to distribute data across multiple physically diverse locations, ensuring data integrity and security through error encoding and decoding, and implementing a threshold-based reconstruction of data segments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is replicated across multiple storage devices to ensure continuity, then data reliability is improved, but the probability of unauthorized access and security breaches increases
Solution Approach 1:
The patent segments data into multiple fragments using information dispersal algorithms, distributing them across different storage devices. No single fragment contains complete information, so even if multiple devices are compromised, the full data remains secure. This resolves the contradiction by maintaining reliability through distribution while preventing unauthorized access through cryptographic segmentation.
Solution Approach 2:
The patent introduces cryptographic intermediaries (encryption keys and decoding algorithms) between the stored data fragments and the original information. These intermediaries act as mediators that prevent direct access to meaningful data, requiring authorized decryption processes. This allows data to be distributed for reliability while the cryptographic layer blocks unauthorized access.
2Reliability
If multiple discs are used in RAID systems to protect against failures, then data security is improved, but device complexity and overhead increase
Solution Approach 1:
The patent changes the fundamental parameters of data storage by using information dispersal algorithms that provide both redundancy and security simultaneously. Instead of traditional RAID approaches that require separate parity calculations and multiple identical copies, this system uses cryptographic transformations to create fragments where any threshold number can reconstruct the original data. This reduces system overhead while maintaining failure protection.
Solution Approach 2:
The patent creates a universal data storage approach where the same distributed fragments serve multiple functions: they provide fault tolerance, security, and space efficiency simultaneously. The cryptographic fragmentation system is multi-functional, eliminating the need for separate mechanisms that traditional RAID systems require for each of these concerns.
3Object-affected harmful factors
If data is encrypted and dispersed across multiple locations, then security against unauthorized access is improved, but data retrieval complexity increases
Solution Approach 1:
The patent performs preliminary actions by pre-distributing data fragments with embedded cryptographic information during the storage phase. The decoding algorithm and necessary key information are distributed alongside the data fragments in advance. This preliminary preparation simplifies retrieval, as the system only needs to collect the required number of fragments and apply the pre-distributed decoding logic without complex real-time key management.
Solution Approach 2:
The patent implements self-service through self-contained data fragments that include all necessary information for reconstruction. Each fragment carries metadata and cryptographic elements that enable the system to automatically identify and reconstruct data from any valid combination of fragments without requiring external key management or complex coordination protocols.
Data Source
AI summary
A computing system retrieves securely stored encrypted and encoded data from a dispersed data storage system. The computing system includes a processing module and a plurality of storage units. The processing module includes an error decoder and a decryptor and to decode and decrypt the encrypted and encoded data retrieved from the dispersed data storage system utilizing a read command to the storage units. The storage units retrieve the encrypted and encoded data and send the encrypted and encoded data to the processing module when receiving the read command.