Dynamic Shared Folder Mount Point Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing environments face security inefficiencies and vulnerabilities due to fixed paths of shared folders, which increase the risk of attacks and unauthorized access, especially in multi-tenancy multi-user environments.
Innovation Solution
A method and system for dynamic shared folder creation in a network environment, where a random mount point is generated for accessing shared folders, which changes with each user session, and is synchronized with the original folder upon unmounting, reducing attack surfaces and optimizing resource allocation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If fixed paths are used for shared folders, then access is straightforward and simple, but security vulnerability increases and attack surface expands
Solution Approach 1:
The patent applies dynamics by transforming fixed folder paths into dynamic, randomly generated paths that change with each user session. The mount point path is generated dynamically based on user authentication status and session information, making the folder path unpredictable and preventing attackers from targeting fixed locations. This resolves the contradiction by maintaining ease of access through automated path generation while eliminating security vulnerabilities associated with fixed paths.
Solution Approach 2:
The patent changes the parameter of the folder path from a static fixed value to a dynamic randomly generated value. Each time a user accesses the shared folder, a new random path is generated instead of using a predetermined path. This parameter change maintains the simplicity of access (users still access through a single path) while fundamentally altering the security characteristics to prevent targeted attacks.
2Object-affected harmful factors
If dynamic random mount points are generated for each user session, then security is enhanced and attack surface is reduced, but system complexity increases
Solution Approach 1:
The system implements self-service by automatically generating and managing dynamic mount points without requiring manual intervention. The authentication module and folder service work together to automatically create random paths, manage user access, and synchronize changes. This self-service mechanism handles the complexity internally while presenting simple access to users, thus enhancing security without proportionally increasing user-facing system complexity.
Solution Approach 2:
The patent introduces an intermediary layer between the user and the actual folder storage. The dynamic mount point acts as an intermediary that translates simple user access requests into secure, random path references. This intermediary layer absorbs the complexity of path generation and management, shielding users from the underlying complexity while maintaining enhanced security.
3Productivity
If shared folder access is made faster through dynamic path generation, then productivity increases, but synchronization requirements increase
Solution Approach 1:
The patent applies preliminary action by pre-establishing the dynamic mount point path before the user actually accesses the folder. The random path is generated and ready in advance during the authentication process, so when the user requests access, the path is already prepared and can be immediately used. This eliminates the need for real-time path generation during access, improving speed while managing synchronization complexity through pre-computation.
Solution Approach 2:
The system implements feedback mechanisms where changes made through the dynamic mount point are automatically synchronized back to the original shared folder. The feedback loop ensures that modifications made via the random path are reflected in the source folder and vice versa. This feedback mechanism manages synchronization complexity by automating the process and maintaining data consistency without requiring manual intervention.
Data Source
AI summary
A method includes receiving a request over a network from a user to mount a shared folder, which is configured to store electronic data to be selectively accessed based on a policy. The method also includes evaluating whether the user is authenticated. The method also includes generating a random mount point for mounting the shared folder, and redirecting the user to the random mount point if the user is authenticated.