File Management Apparatus for Scanning Error Handling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage services face challenges in ensuring user access to files when scanning errors occur, potentially leading to unintended spread of abnormal files.
Innovation Solution
A management apparatus that includes an inspection unit, a determination unit, a temporary invalidation unit, and a re-inspection determination unit, which processes input information based on inspection results to temporarily invalidate or re-inspect files, thereby ensuring user access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the scanning service stops due to cloud service failures, then the online type scanning service cannot be provided, but the storage service must continue to operate and provide file access to users
Solution Approach 1:
The system performs preliminary classification of scanning errors into recoverable and non-recoverable types before determining the file access policy. By anticipating the nature of scanning errors in advance, the system can pre-determine appropriate responses, allowing file access to continue even when the scanning service is unavailable due to non-recoverable errors.
Solution Approach 2:
The system implements a feedback mechanism that monitors the status of the scanning service and adjusts file access policies based on whether scanning errors are recoverable or non-recoverable. This feedback loop enables the system to maintain file access continuity while scanning service issues are resolved, rather than completely blocking access when scanning fails.
2Object-affected harmful factors
If the system prohibits user access to files when scanning errors occur, then the risk of abnormal file spread is reduced, but users cannot access legitimate files that may have been falsely flagged
Solution Approach 1:
The system applies different access control policies to different types of scanning errors rather than applying a uniform restriction. For non-recoverable scanning errors, the system allows file access to continue, while for recoverable errors, it may implement restrictions. This localized quality approach ensures that legitimate files are not unnecessarily blocked while still protecting against abnormal file spread.
Solution Approach 2:
The system changes the parameter of file access permission based on the type of scanning error detected. Instead of a binary access restriction, the system dynamically adjusts access policies according to the recoverability of the scanning error, allowing users to access files when scanning errors are non-recoverable while maintaining restrictions when errors are recoverable and potentially indicate actual security threats.
3Object-affected harmful factors
If the system deletes files immediately when scanning errors occur, then abnormal files are prevented from spreading, but legitimate files are lost and users cannot access them
Solution Approach 1:
The system performs preliminary classification of scanning errors before taking irreversible actions like file deletion. By determining whether scanning errors are recoverable or non-recoverable in advance, the system可以避免 deleting legitimate files that were falsely flagged due to non-recoverable scanning errors, while still being able to delete confirmed abnormal files.
Solution Approach 2:
The system implements a feedback mechanism that prevents immediate file deletion when scanning errors occur. Instead, it monitors the nature of the scanning error and only proceeds with file deletion when the error is confirmed to be recoverable and indicates an actual security threat. This feedback-based approach prevents loss of legitimate files while maintaining protection against abnormal file spread.
Data Source
AI summary
A management apparatus that communicates with an inspection apparatus configured to inspect whether input information input from a terminal is abnormal information and manages the input information includes: an inspection unit configured to generate an inspection result for the input information, a determination unit configured to, in a case where the inspection result is a result of a type that cannot be expected to be recovered over time, determine that subsequent processing for the input information is temporary invalidation processing and, in a case where the inspection result is a result of a type that can be expected to be recovered over time, determine that the subsequent processing for the input information is re-inspection determination processing.