Intelligent Heuristics for File System Bulk Copy Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing ease of accessing and duplicating large amounts of digital data poses a risk of misappropriation of sensitive information, as existing systems struggle to monitor and control bulk data copy operations effectively across large networks without degrading access efficiency.
Innovation Solution
An intelligent Network File Service (NFS) system that employs heuristics and fingerprint recognition to detect and manage bulk data copy operations, determining whether they exceed permitted thresholds and authorizing users, while allowing authorized operations to proceed and halting unauthorized ones to maintain data security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual monitoring of data access operations is implemented, then data security is improved, but access efficiency and productivity deteriorate due to the enormous volume of operations
Solution Approach 1:
The patent segments the monitoring task by dividing data access operations into two categories: individual file operations and bulk copy operations. Instead of monitoring every single operation, the system uses fingerprint recognition to identify patterns characteristic of bulk copy operations, then monitors only those segmented operations that match the bulk copy pattern. This segmentation allows security monitoring to be applied selectively rather than universally, maintaining security for critical operations while preserving efficiency for routine access.
Solution Approach 2:
The patent introduces fingerprint recognition technology as an intermediary mechanism between the file system and the security monitoring system. The fingerprint module acts as a mediator that analyzes file access patterns and identifies bulk copy operations without requiring direct inspection of each individual operation. This intermediary layer enables efficient pattern recognition and classification, allowing the system to distinguish between legitimate bulk operations and potential security threats without degrading overall access performance.
2Productivity
If bulk data copy operations are permitted without restriction, then access efficiency is maintained, but data security deteriorates due to risk of misappropriation
Solution Approach 1:
The patent implements preliminary action by establishing fingerprint templates for bulk copy operations before monitoring begins. The system pre-defines what constitutes a bulk copy operation through fingerprint recognition patterns, allowing it to proactively identify and flag such operations as they occur. This preliminary preparation enables the system to quickly recognize and respond to bulk copy attempts without requiring complex real-time analysis, thus maintaining efficiency while enhancing security through advance pattern establishment.
Solution Approach 2:
The patent implements feedback mechanisms by continuously monitoring file access patterns and comparing them against established fingerprints for bulk copy operations. When a bulk copy operation is detected, the system provides feedback by alerting administrators or triggering security protocols. This feedback loop allows the system to adapt and refine its monitoring based on observed patterns, improving security response while maintaining efficient processing of legitimate operations through learned patterns.
Data Source
AI summary
A data system may detect and halt unauthorized bulk data copy operations without interfering with or degrading authorized data copy operations. Characteristics of a request for access to a file system may be analyzed to determine whether a bulk data copy operation has been requested by a user. The bulk data copy operation may be allowed if the operation is below a particular permitted copy threshold or if the requesting user is authorized to execute a bulk data copy operation exhibiting certain characteristics.