File System Driver for Secure Remote Collaboration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing remote access methods to server storage lack integration with housekeeping functions, such as audit trails, which are essential for tracking and managing operations and security within the system.

Innovation Solution

A method that enables a remote computer with a client application to interact with a computerized system's service to retrieve, manipulate, and update storage objects while synchronizing with the system's housekeeping, ensuring that access and changes are recorded and managed securely, even when the remote computer is offline, and updated when reconnecting.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If remote access methods (VPN, remote desktop) are used to access server storage, then remote accessibility is improved, but integration with housekeeping functions (audit trails, security tracking) deteriorates

Engineering Contradiction:
Improveremote accessibilityVSAvoidhousekeeping integration
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a file system driver as an intermediary component that sits between the remote access protocol and the local file system. This driver intercepts file operations, translates them into appropriate remote commands, and maintains audit trails locally while synchronizing with the remote server's housekeeping functions. The intermediary resolves the contradiction by enabling remote accessibility while preserving housekeeping integration through localized audit trail generation and synchronization mechanisms.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If remote computers access and modify storage objects independently, then remote collaboration capability is improved, but system consistency and security management deteriorate

Engineering Contradiction:
Improveremote collaboration capabilityVSAvoidsystem consistency
Core Design Contradiction:
Adaptability or versatilityVSStability of the object's composition

Solution Approach 1:

The patent implements a feedback mechanism where the file system driver on remote computers continuously monitors local modifications to storage objects and communicates these changes back to the central server. The server processes these feedback signals to update its housekeeping records, resolve conflicts, and maintain system-wide consistency. This feedback loop enables independent remote collaboration while preserving overall system consistency through coordinated updates and conflict resolution protocols.

Inventive Principle:
Principle #23Feedback

3Reliability

If audit trails are maintained for all remote operations, then security tracking is improved, but system complexity and overhead increase

Engineering Contradiction:
Improvesecurity trackingVSAvoidsystem overhead
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the audit trail functionality into modular components distributed across remote computers and the central server. Each remote file system driver generates local audit trail segments for its specific operations, while the central server maintains aggregate audit trails and performs periodic synchronization. This segmentation reduces the complexity burden on any single component while maintaining comprehensive security tracking through distributed audit trail generation and consolidation.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10621549B2Method and apparatus for secure enterprise collaboration
Publication Date: 2020.04.14 VARONIS SYSTEMS INC
  • US10621549B2 patent drawing
  • US10621549B2 patent drawing
  • US10621549B2 patent drawing

AI summary

A method for exchanging data between a remote computer and a computerized system remotely connected therebetween, the remote computer having a client application and the computerized system having a storage of objects, a system housekeeping and a service operating on an at least one computer, the method comprising retrieving by the remote computer an object of the storage under the system housekeeping by interaction of the client application with the service, affecting the retrieved object at the remote computer and updating the storage with the affected object, and an apparatus for performing the same.