Hybrid Cloud Data Access Using Key and Location Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems struggle to efficiently manage data access across hybrid and multi-cloud data stores, particularly in managing data location and encryption keys in a hybrid cloud environment.
Innovation Solution
A method and system for managing data access involving a front-end presentation layer, business logic layer, and database layer to identify data location and encryption keys across separate cloud and on-premise data stores, enabling seamless data access and management in a hybrid cloud environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored across multiple separate cloud data stores, then data accessibility and security are improved, but system complexity increases
Solution Approach 1:
The system segments data storage across multiple separate cloud data stores (first cloud data store, second cloud data store) rather than using a single centralized storage location. Each data store can be managed independently with different security policies, improving overall data security while distributing the complexity across manageable components.
Solution Approach 2:
The server information handling system acts as an intermediary between client systems and multiple cloud data stores. It receives read/write requests, validates them through a business logic layer, identifies the appropriate data store location, retrieves encryption keys, and coordinates the data access process, thereby managing the complexity of multi-cloud operations centrally.
2Reliability
If data location and encryption keys are managed across distributed cloud stores, then data security is enhanced, but data access efficiency decreases
Solution Approach 1:
The system performs preliminary actions by pre-identifying the location of data and associated encryption keys through the business logic layer before actual data access occurs. The server validates requests and retrieves necessary authentication credentials in advance, so that when data access is required, the process can proceed efficiently without delays from key retrieval or location determination.
Solution Approach 2:
The business logic layer implements feedback mechanisms by continuously monitoring and tracking the location of data and encryption keys across different cloud stores. This feedback enables the system to optimize data access paths and make informed decisions about where to retrieve data from, improving access efficiency while maintaining security protocols.
3Ease of operation
If a unified system manages access across multiple cloud data stores, then data accessibility is improved, but system complexity increases
Solution Approach 1:
The server information handling system implements a universal interface that handles multiple functions: receiving read/write requests from clients, validating requests through business logic, identifying data locations across different cloud stores, retrieving encryption keys, and coordinating data access. This multi-functional approach improves data accessibility through a single point of contact while managing the underlying complexity internally.
Data Source
AI summary
Managing data access, including receiving, at a front end presentation layer managed, a read/write request associated with data, the server information handling system in communication with the client information handling system; validating, at a business logic layer, the read/write request; identifying, by the business logic layer and from a database layer, a location of data associated with the read/write request that is stored at a data store, the location of the data store distinct from a location of the server information handling system; identifying, by the business logic layer and from the database layer, encryption keys associated with the data; requesting, by the business logic layer and from the data store, the data based on i) the location of the data store storing the data, and ii) the encryption keys associated with the data; providing, by the data store, a response to the read/write request, the response including the data.