Distributed Storage Security Management via Dynamic Data Redistribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Distributed systems face challenges in maintaining a consistent security risk level across multiple nodes, as changes in security risk levels can compromise data integrity and availability, leading to potential breaches and inefficiencies in data storage and processing.
Innovation Solution
A method and system that continuously monitor and adjust the distribution of data objects across network nodes based on real-time security risk levels, creating new copies of data objects on different nodes to maintain minimal security requirements, using redundancy data for reconstruction and encryption to ensure data integrity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data objects are distributed across multiple network nodes, then storage capacity and availability are improved, but security risk increases due to potential breaches on individual nodes
Solution Approach 1:
The patent segments data objects into multiple data segments and distributes them across different network nodes. Each data segment is stored on a separate node, so that even if one node is compromised, the complete data remains secure. This segmentation approach maintains data availability while reducing the security risk exposure on any single node.
Solution Approach 2:
The patent creates multiple copies of data segments and distributes them across different network nodes. When a node's security risk level changes, the system can recreate data segments using redundancy data from other nodes and redistribute them. This copying mechanism ensures data availability while mitigating security risks through dynamic redistribution.
2Reliability
If security monitoring and data redistribution are performed continuously, then data security is improved, but system complexity and computational overhead increase
Solution Approach 1:
The patent implements a feedback mechanism where the system continuously monitors security risk levels of network nodes and automatically triggers data redistribution when thresholds are exceeded. The management unit receives security risk level updates from nodes and dynamically adjusts data segment distribution accordingly. This feedback-based approach maintains security assurance while avoiding unnecessary system complexity by acting only when needed.
Solution Approach 2:
The patent employs dynamic data segment distribution where the allocation of data segments across network nodes is not fixed but adapts based on changing security conditions. The system can dynamically recreate and redistribute data segments in response to security events, transforming a static storage system into a dynamic one that responds to real-time security requirements without permanent complexity.
3Reliability
If data segments are redistributed in response to security changes, then data integrity is improved, but storage operations and retrieval efficiency may deteriorate
Solution Approach 1:
The patent performs preliminary actions by pre-distributing redundancy data across multiple nodes before security incidents occur. When a security change is detected, the system can quickly recreate data segments using this pre-positioned redundancy data without needing to retrieve everything from original sources. This preliminary preparation maintains data integrity while minimizing the performance impact during actual redistribution events.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
There is provided a method of maintaining a security risk level of data objects stored in a distributed system, comprising: estimating a current security risk level of at least one storage unit of each of a plurality of network nodes based on real time monitoring; distributing a plurality of data objects among the at least one storage units of the plurality of network nodes according to the current security risk level such that a minimal security requirement of each data object is complied with; detecting a change in the current security risk level of the at least one storage unit; and creating a new copy of at least one of the data objects for storage on a different network node such that the minimal security requirement of each data object is maintained.