Dual-Actor Backup Authorization System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data backup systems are vulnerable to sabotage by internal malicious actors who can manipulate backup intervals, rendering backup data sets ineffective in restoring uncorrupted data in case of destruction or corruption.
Innovation Solution
A dual-actor authorization system is implemented, where a first actor proposes changes to operational backup parameters and a second actor authorizes these changes, using a token and digital signature to ensure that only authorized modifications are made to the backup system, thereby preventing unauthorized tampering with backup intervals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single actor is allowed to modify backup parameters, then the ease of operation is improved, but the reliability deteriorates due to potential sabotage by malicious internal actors
Solution Approach 1:
The system segments the backup parameter modification process into two distinct roles: a first actor who generates modification requests and a second actor who authorizes these requests. This segmentation ensures that no single individual has complete control over backup parameter changes, thereby preventing sabotage while maintaining operational capability. The dual-actor mechanism divides the previously unified modification function into separate generation and authorization components.
Solution Approach 2:
The system introduces an intermediary authorization mechanism where the second actor serves as a mediator between the first actor's modification requests and the actual system changes. This intermediary layer verifies and approves requests before implementation, creating a controlled pathway for parameter modifications that prevents malicious actions while allowing legitimate operations to proceed.
2Quantity of substance
If backup intervals are shortened to provide more frequent backups, then the quantity of backup data sets is improved, but the loss of time for system performance deteriorates
Solution Approach 1:
The system dynamically adjusts backup intervals based on operational conditions and priorities. Rather than using fixed intervals, the backup mechanism can adapt the timing and frequency of backups to balance the need for multiple backup data sets against system performance requirements. This dynamic approach allows optimization of both quantity and time efficiency.
Solution Approach 2:
The system modifies backup parameters such as interval duration and frequency to optimize the balance between creating sufficient backup data sets and maintaining system performance. By changing these parameters dynamically based on system state and priority levels, the system can achieve adequate backup quantity without excessive performance degradation.
Data Source
AI summary
Changing operational backup parameters on a storage system includes a first actor generating a request to change operational backup parameters, providing the request from the first actor to a second actor, the second actor authorizing the request, and modifying the operational backup parameters in response to the second actor authorizing the request. The first actor may be assigned a role that allows the first actor to generate the request to change operational backup parameters of the storage system and the second actor may be assigned a role that allows the second actor to authorize the request to change operational backup parameters of the storage system. The request may include a time window provided by the first actor. Authorizing a request to change operational backup parameters of the storage system may create a token and an authorization key. The token may be indicative of the request provided by the first actor.