Intermediary Data Handler for OS-Independent Secure Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems lack effective mechanisms to prevent unauthorized data tampering and alteration, particularly from malware and unauthorized access, while maintaining data integrity and accessibility across different operating systems.
Innovation Solution
The Secured Data Storage Subsystem (SDSS) employs an intermediary data handler that sits between the operating system and the storage device, processing requests according to its own file system and rule set, mimicking responses to the OS to maintain data integrity and security, and allowing administrative control independent of the OS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the operating system directly accesses the storage device to perform read/write operations, then the ease of operation and system simplicity is improved, but the security and data integrity deteriorates due to unauthorized modification risks
Solution Approach 1:
The patent introduces an intermediary data handler positioned between the operating system and the storage device. This intermediary component intercepts and processes all read/write requests, validating them against security policies before allowing access to protected files. It mimics the appearance of successful operations to the OS while actually blocking unauthorized modifications, thus maintaining data integrity without compromising system ease of operation.
2Ease of operation
If the storage device uses a fixed file system format to ensure data accessibility, then the ease of operation is improved, but the adaptability to different operating systems deteriorates
Solution Approach 1:
The patent implements a universal data handler that can emulate multiple file system formats (NTFS, EXT4, HFS+, etc.) and partition schemes. The intermediary component detects the requesting operating system's requirements and dynamically adapts its interface to match the expected format, allowing the same storage device to be seamlessly accessed by different operating systems without reformatting or loss of protected data.
3Productivity
If the storage device allows direct write access to improve productivity, then the productivity is improved, but the security against malware and unauthorized access deteriorates
Solution Approach 1:
The patent implements preliminary anti-action by establishing security policies and access control rules before any write operations occur. The intermediary data handler pre-configures protection levels for different files and directories, and automatically enforces these policies by blocking unauthorized write requests from malware or unauthorized processes while allowing legitimate operations to proceed, thus maintaining productivity without compromising security.
Data Source
Figure 1A~1B
Figure 2
Figure 3A
AI summary
An intermediary data handler is used in a Secured Data Storage Subsystem (SDSS), to provide a host electrical computer system with security of certain data stored in memory of the computer system's static data storage device. The intermediary data handler is functionally disposed between the operating system (OS) and data storage device of the host computer. The data handler has Processor, Memory, and User Interface circuits, and resident software adapted to generate mocked-up response data in reply to an unauthorized read/write communication from the OS, the mock data response being automatically formatted to have a content and data-structure format acceptable by the host OS, while isolating and controlling the original communication from the OS. The SDSS includes host software adapted to integrate operation and function of the intermediary data handler with the host computer system to accomplish the security of data stored on the storage device.