Distributed Data Protection Network with Segmented File Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection systems on distributed data storage networks face challenges in maintaining control, privacy, and security of data while allowing distributed file storage and access controls, with vulnerabilities that expose sensitive files over networks.
Innovation Solution
A distributed data storage protection network architecture using a peer-to-peer file sharing model, combined with a DDS protection network that manages file ownership and access, encrypts files into components, and utilizes a Filot Distribution Protocol (FDP) for secure distribution and access control, ensuring only authorized users can decrypt and access files.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is stored on distributed data storage networks, then data accessibility and storage capacity are improved, but data security and privacy control deteriorate due to exposure vulnerabilities
Solution Approach 1:
The patent segments files into multiple components and distributes them across different nodes in the DDS network. Each component file is encrypted and stored separately, so that no single node contains the complete file. This segmentation allows the system to maintain data accessibility across the distributed network while improving security, as compromising one node does not expose the entire file.
Solution Approach 2:
The patent introduces access control lists (ACLs) and encryption mechanisms as intermediaries between the stored data and network access. These intermediaries control who can decrypt and access the file components, providing a layer of protection that maintains security while allowing authorized access. The ACLs act as mediators that verify permissions before allowing data reconstruction.
2Reliability
If access control mechanisms are implemented on distributed storage networks, then data privacy control is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal access control framework using ACLs that can be applied to any file stored on the DDS network. The same ACL mechanism handles permission verification, key distribution, and access control for all files, regardless of their location or ownership. This multi-functional approach improves privacy control while managing complexity through standardization rather than creating separate control mechanisms for each file.
Solution Approach 2:
The system enables file owners to self-manage their own access control lists and permissions without requiring centralized administration. Owners can independently add, remove, or modify ACL entries for their files, and the system automatically handles the cryptographic operations and permission verification. This self-service capability improves privacy control while avoiding the complexity of centralized access control management.
3Reliability
If files are encrypted and distributed across multiple nodes, then data security is improved, but storage efficiency and retrieval speed deteriorate
Solution Approach 1:
The patent performs preliminary actions by pre-segmenting files into components and distributing them across the network before any access requests occur. The system also pre-establishes ACLs and encryption schemes for each file. When retrieval is needed, the system can quickly locate and reconstruct files from pre-distributed components rather than performing segmentation and distribution at the moment of access, thus maintaining security while improving retrieval speed.
Solution Approach 2:
The system implements feedback mechanisms where nodes communicate the location and availability of file components to the network. When a file needs to be retrieved, the system uses this feedback information to efficiently locate the necessary components across the distributed network, reducing retrieval time while maintaining the security benefits of distributed storage and encryption.
Data Source
AI summary
Systems, methods, and computer-readable storage media of data protection on a distributed data storage (DDS) protection network using a distribution protocol. Some methods include identifying, by one or more processing circuits, a request associated with a digital asset. Some methods further include generating, by the one or more processing circuits, a new data object associated with the request. Some methods further include updating, by the one or more processing circuits, a network ledger to comprise the new data object.