Dispersive Storage Area Network Data Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional storage area networks face security and data integrity issues due to vulnerabilities in cloud-based storage and processing, including data theft and hacking, where encryption alone is insufficient to protect sensitive information.
Innovation Solution
A dispersive storage area network method involving virtual machines to split and distribute data across multiple storage devices, using virtual dispersive routing to enhance security and integrity by dispersing data storage and utilizing authentication and corruption detection mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If data is stored in cloud-based storage using conventional SAN methods, then storage accessibility and processing capabilities are improved, but security and information fidelity deteriorate due to vulnerabilities in cloud storage systems
Solution Approach 1:
The patent divides data into multiple segments and distributes them across different storage devices and network paths. Each segment is stored separately on different devices, so that if one device is compromised, the attacker cannot access all data. This segmentation approach directly addresses the security vulnerability issue while maintaining storage accessibility.
Solution Approach 2:
The patent introduces a dispersive storage architecture that adds a new dimension to data storage by distributing data not just across devices but also across multiple network paths and storage locations simultaneously. This multi-dimensional distribution increases the complexity for attackers while maintaining access for authorized users.
2Object-affected harmful factors
If encryption is used to protect data in SAN, then data protection is improved, but security remains insufficient given enough processing power hackers can break encryption
Solution Approach 1:
By segmenting data into multiple parts stored on different devices, the system creates a situation where even if encryption is broken on one segment, the attacker cannot reconstruct the complete data. This segmentation provides an additional layer of security that complements encryption.
Solution Approach 2:
The system performs preliminary actions by distributing data segments across multiple locations before any attack occurs. This pre-distribution ensures that the data is already protected against determined attackers who might bypass encryption through other means.
3Device complexity
If only one route is available for data transfer in SAN, then network simplicity is maintained, but reliability deteriorates because multiple transfer attempts may fail
Solution Approach 1:
The patent segments data transfer into multiple independent paths, each carrying different data segments. This allows the system to utilize multiple routes simultaneously, improving transfer reliability without requiring complex routing protocols for each individual path.
Solution Approach 2:
The patent merges multiple simple routes into a unified dispersive storage system. By combining several straightforward data transfer paths, the system achieves high reliability without introducing significant complexity, as each individual route remains simple while the collective system provides redundancy.
4Device complexity
If data is stored on a single storage device, then storage system simplicity is maintained, but security and data integrity are compromised due to single point of failure
Solution Approach 1:
The patent segments data storage across multiple independent devices, eliminating the single point of failure. Each storage device holds only a portion of the data, so compromising one device does not result in complete data theft. This segmentation increases security while keeping individual storage operations simple.
Solution Approach 2:
The system creates multiple copies of data segments distributed across different devices. These copies are not identical to the original but are sufficient for reconstruction, providing both security through distribution and integrity through redundancy without requiring complex verification mechanisms.
Data Source
AI summary
A method for storing data from an electronic device at a plurality of storage devices of a dispersive storage area network includes communicating, from the electronic device via a virtual network connection, one or more packets to a splitting server. The method further includes splitting, at the splitting server, the data for storage on the dispersive storage area network, and communicating, from the splitting server to each of a plurality of storage servers over each of a plurality of virtual network connections, portions of the split data. The method further includes storing, at each of the storage servers, the received portions of the split data for later retrieval.