Host Intermediary for Secure Storage Data Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data storage systems face challenges in securely transferring data between storage devices, particularly in ensuring that only authorized hosts can write data, especially during disaster recovery scenarios where remote storage devices may become writable, potentially violating security and compliance regulations.
Innovation Solution
A system is implemented where a separate device handles I/O requests between applications and storage devices, simulating read-only functionality for remote storage devices by denying write requests and maintaining data integrity through encryption and mirroring, ensuring that only authorized hosts can write data, even if remote devices become writable.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If remote storage devices are configured to be writable for disaster recovery, then data availability and system reliability are improved, but security and data integrity are compromised due to unauthorized write access
Solution Approach 1:
The patent introduces a host system as an intermediary between the application and the storage device. The host system includes software that intercepts I/O requests, determines whether to allow them based on security policies, and forwards approved requests to the storage device. This mediator architecture enables the storage device to be physically writable while maintaining logical security controls that prevent unauthorized writes, thus resolving the contradiction between reliability and security.
2Reliability
If remote storage devices accept write requests for failover capability, then system resilience is improved, but compliance with data handling regulations deteriorates
Solution Approach 1:
The patent implements a feedback mechanism where the host system continuously monitors and controls access to the storage device based on dynamic security policies. The software in the host system evaluates each I/O request against compliance rules and security criteria, allowing writes only when authorized. This feedback loop ensures that the storage device maintains failover capability while adhering to regulatory requirements, as the system can dynamically adjust access permissions based on current security and compliance needs.
3Productivity
If storage devices are configured to allow multiple host systems to access and write data, then data sharing and productivity are improved, but security control and data integrity worsen
Solution Approach 1:
The patent applies local quality by implementing security controls at the host system level rather than uniformly at the storage device level. Each host system can have its own security policies and access controls tailored to its specific needs and security requirements. This allows different hosts to share the storage device with different levels of access permissions, enabling productive data sharing while maintaining granular security control over who can write what data under what conditions.
Data Source
AI summary
Transferring storage device functionality includes providing a device coupled to the storage device, where the device is separate from the storage device, having the device handle I/O requests between an application and the storage device, and, in response to the application issuing an I/O request, having the device determine if the request corresponds to functionality being transferred and, if so, having the device provide the functionality. The device may be a host computer. The application may run on the host computer. A driver on the host computer may provide the functionality. The functionality may include read only functionality, data compression, data encryption, mirroring, and/or status reporting.