Distributed Data Mapping for Fragmented Storage Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security technologies are increasingly vulnerable to technologically adept entities, making secure storage and access of sensitive data challenging, with severe consequences when data falls into the wrong hands.
Innovation Solution
A distributed data architecture is implemented, comprising a data map stored on a first system and data fragments distributed across multiple separate systems, utilizing encryption, access policies, and multi-tiered security measures to protect data elements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption technologies are used to secure data, then data security is improved, but security is increasingly vulnerable to technologically adept entities
Solution Approach 1:
The patent divides data into multiple fragments and stores them across different distributed systems. Each fragment alone is insufficient to reconstruct the original data, providing security through distribution rather than relying solely on encryption that can be bypassed by technologically adept entities.
Solution Approach 2:
The patent introduces a data map as an intermediary component that stores metadata about data fragments without containing the actual data. This intermediary layer provides an additional security barrier, as compromising the data map alone does not expose the sensitive data fragments stored across distributed systems.
2Reliability
If data is distributed across multiple systems, then security against unauthorized access is improved, but system complexity increases
Solution Approach 1:
The data map serves as a central intermediary that manages the complexity of distributed data storage. It stores metadata including fragment identifiers, locations, and reconstruction information, allowing systems to access and reconstruct data without managing the complexity of distributed fragment coordination directly.
Solution Approach 2:
The patent creates a conceptual copy of data organization information in the data map, separate from the actual data fragments. This copying of metadata allows the system to manage distributed data through a simplified interface without duplicating the actual sensitive data across multiple access points.
3Object-affected harmful factors
If data fragments are stored across separate systems, then breach damage is limited, but data access requires multiple systems increasing operation complexity
Solution Approach 1:
The data map acts as a mediator that simplifies the data access process across distributed systems. It contains all necessary information about fragment locations and reconstruction methods, allowing authorized access to retrieve and reconstruct data from multiple systems through a single coordinated operation rather than managing each fragment access separately.
Data Source
Figure 1~3
Figure 4~5
Figure 6
AI summary
A method for conducting a transaction may include: receiving, at a user device from a transaction system, a request for a data element for conducting the transaction; in response to receiving the request, determining a data map corresponding to the requested data element, the data map including containing a plurality of pointers, each pointing to a respective one of a plurality of data fragments located on a respective one of a plurality of different data storage locations, such as a plurality of different data storage systems; retrieving, using the data map, the plurality of data fragments from the plurality of data storage locations; assembling the data element using the retrieved data fragments; and providing, by the user device to the transaction system, the data element to conduct the transaction. A method for processing the data map may include: fragmenting the data element into the plurality of data fragments; storing the plurality of data fragments at the plurality of data storage locations; generating the data map; and storing the data map separate from the plurality of data storage locations.