Edge Data Segregation Across Secure Logical Data Stores
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing amount of data being processed at edge locations in edge computing architectures makes it difficult to access and manage data in a secure and timely manner, especially for device operational data that requires strict compliance with security and latency requirements.
Innovation Solution
A data management platform that segregates data based on parameters such as policies and geographic locations, tags the data with metadata, and stores it in secure logical data stores, allowing for secure access and aggregation of data portions across distributed data stores, and maps data to network slices for efficient transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is stored in a distributed fashion at edge locations, then data processing capacity and network efficiency are improved, but data accessibility and management difficulty worsen
Solution Approach 1:
The patent segments data into different portions based on security requirements and stores them in different data stores (first data store for sensitive data, second data store for non-sensitive data). This segmentation allows selective access to different data portions, improving overall data accessibility while maintaining security requirements in the distributed edge computing environment.
Solution Approach 2:
The patent introduces a data management platform as an intermediary that coordinates data access across multiple distributed data stores. This intermediary manages the complexity of distributed storage by providing a unified interface for data access, thereby improving ease of operation without compromising the distributed architecture's processing capacity.
2Loss of time
If device operational data is accessed within strict timelines, then device issue response time is improved, but data security and compliance difficulty worsen
Solution Approach 1:
The patent segments operational data into sensitive and non-sensitive portions, storing them in separate data stores with different access controls. This allows rapid access to non-sensitive operational data for timely device issue response while maintaining strict security controls on sensitive data, thus achieving both fast response time and security compliance.
Solution Approach 2:
The patent applies different security policies and access controls to different data portions based on their sensitivity. Non-sensitive operational data allows faster access for immediate device troubleshooting, while sensitive data maintains stricter security measures, enabling differentiated response times that meet both speed and compliance requirements.
3Reliability
If data is segregated into multiple data stores, then data security and compliance are improved, but system complexity increases
Solution Approach 1:
The patent implements a data management platform that provides universal functionality across multiple data stores, handling data segregation, access control, and coordination through a single system. This multi-functional approach maintains high data security through proper segregation while reducing perceived system complexity by providing a unified management interface.
4Loss of energy
If more data is processed at edge locations, then network bandwidth consumption is reduced, but data management difficulty increases
Solution Approach 1:
The patent introduces a data management platform as an intermediary that simplifies data management across distributed edge locations. This intermediary handles data segregation, access coordination, and policy enforcement, thereby reducing network bandwidth consumption through local edge processing while simultaneously reducing data management difficulty through centralized coordination.
Data Source
AI summary
A method comprises receiving data from a plurality of devices and analyzing the data to identify one or more parameters for segregation of the data. In the method, the data is tagged with one or more metadata tags corresponding to the one or more parameters. The method further comprises segregating the data into a plurality of data portions based at least in part on the one or more parameters, and storing respective ones of the plurality of data portions in respective data stores of a plurality of data stores. The one or more parameters comprise at least one of one or more policies corresponding to the data and respective locations of the plurality of devices.