DSN Access Token Module for Error-Coded Slice Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional computer storage systems face issues with data integrity and security due to the failure of physical movement-based memory devices, such as disc drives, which can lead to data loss and unauthorized access, especially as the amount of data grows and maintenance demands increase.
Innovation Solution
A dispersed storage network (DSN) system that uses error-coded data slices distributed across multiple geographically diverse storage units, allowing for reliable and secure data storage and retrieval, with a DSN access token module facilitating access and management of these slices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If physical movement-based memory devices (disc drives) are used for data storage, then data storage capacity can be increased, but data integrity deteriorates due to device failure and bit level corruption
Solution Approach 1:
The patent divides data into multiple slices and distributes them across multiple geographically diverse storage units. This segmentation ensures that no single point of failure can corrupt the entire dataset, as each slice is stored independently in different physical locations with different failure modes.
Solution Approach 2:
The patent implements error coding and redundancy mechanisms beforehand to cushion against potential device failures. By encoding data with error correction capabilities and distributing redundant slices across multiple storage units, the system prepares in advance to withstand bit level corruption and device failures without data loss.
2Reliability
If RAID systems are used to protect against data loss, then data reliability improves, but security deteriorates due to unauthorized access risks
Solution Approach 1:
The patent segments encrypted data into multiple slices and distributes them across different storage units. Even if unauthorized access occurs at one location, the attacker only obtains partial encrypted slices that are useless without the corresponding slices from other locations, thereby maintaining security while achieving redundancy.
Solution Approach 2:
The patent applies encryption and error coding locally to each data slice before distribution. Each storage unit receives and stores only its designated encrypted slices, ensuring that local security measures protect against unauthorized access while the distributed architecture provides overall data protection.
3Object-affected harmful factors
If data is distributed across multiple storage units, then data security improves, but system complexity increases
Solution Approach 1:
The patent introduces a DSN access token module as an intermediary that manages the complexity of distributed storage operations. This module handles authentication, authorization, and coordination of data retrieval across multiple storage units, shielding users from the underlying system complexity while maintaining security through distributed architecture.
Solution Approach 2:
The patent creates a universal access token system that can be used across multiple storage units and operations. The token module provides multi-functional capabilities including authentication, encryption key management, and coordinated data retrieval, reducing the need for separate security mechanisms at each storage unit and thereby reducing overall system complexity.
4Ease of operation
If conventional memory devices are used, then ease of operation is maintained, but maintenance demands increase due to device failure
Solution Approach 1:
The patent implements self-healing capabilities through error correction coding and automatic data reconstruction. When a storage unit fails or data corruption is detected, the system automatically retrieves the necessary slices from other storage units and reconstructs the lost data without requiring manual intervention, thereby reducing maintenance demands while maintaining ease of operation.
Data Source
AI summary
A method includes a DSN access token module retrieving one or more sets of at least a threshold number of dispersed storage (DS) error coding function slices from the DSN memory via the computing device. The method continues with the computing device and/or the DSN access token module decoding the one or more sets of the at least a threshold number of DS error coding function slices using a default DS error coding function to recapture a DS error coding function. The method continues with the computing device and/or the DSN access token module generating a plurality of sets of data access requests in accordance with the DS error coding function. The method continues with the computing device sending the plurality of sets of data access requests to the DSN memory.