Distributed Storage Network Access Token Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer storage systems face challenges with data integrity and security due to the failure of memory devices, particularly those using physical movement technologies, such as disc drives, which can lead to data loss and unauthorized access, especially as data volume grows and maintenance demands increase.
Innovation Solution
A distributed storage network (DSN) system that employs error coding dispersal storage to partition and encode data into multiple slices, storing them across geographically diverse locations, allowing for reliable and secure data retrieval even in the event of device failures, and includes a storage integrity processing unit for verification and rebuilding of corrupted slices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If data is stored in traditional disc drives with physical movement, then storage capacity and accessibility are improved, but data integrity and reliability deteriorate due to device failures and bit corruption
Solution Approach 1:
The patent divides data into multiple slices and distributes them across different storage locations, so that no single point of failure can corrupt the entire dataset. This segmentation approach maintains storage capacity while improving reliability through distribution.
Solution Approach 2:
The patent introduces an intermediary authentication token that stores access information separately from the data itself. This token acts as a mediator that controls access to distributed data slices, ensuring data integrity and secure retrieval without requiring centralized storage.
2Reliability
If multiple redundant disc drives are used to replicate data, then data security and availability are improved, but device complexity and maintenance demands increase
Solution Approach 1:
Instead of replicating entire datasets across multiple drives, the patent segments data into slices and distributes them. This reduces the complexity of managing redundant systems while maintaining data availability through error coding that allows reconstruction from fewer slices.
Solution Approach 2:
The patent changes the parameter of data representation by using error-coded slices rather than exact copies. This allows the system to tolerate failures and maintain availability without requiring complex redundant drive configurations.
3Reliability
If data is distributed across geographically diverse locations, then security and fault tolerance are improved, but access management and retrieval complexity increase
Solution Approach 1:
The authentication token serves as an intermediary that consolidates access management. It contains the necessary information to retrieve distributed slices and manages authentication centrally, simplifying access control despite geographic distribution of data slices.
Solution Approach 2:
The authentication token performs multiple functions: it stores access information, validates user credentials, and coordinates slice retrieval. This multi-functionality reduces the need for separate access management systems at each distributed location.
Data Source
AI summary
A method includes affiliating an authentication token with user information of a user. The method further includes generating a private/public key pairing associated with the user information. The method further includes applying a share encoding function on a private key of the private/public key pairing to produce a set of encoded shares. The method further includes generating a set of random numbers and generating a set of hidden passwords based on the user information. The method further includes generating a set of encryption keys based on the set of hidden passwords and the set of random numbers. The method further includes encrypting the set of encoded shares utilizing the set of encryption keys to produce a set of encrypted shares. The method further includes outputting the set of encrypted shares to the authentication token for storage therein and outputting the set of random numbers to a set of authenticating units.