Intermediary Data Handler for Secure Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems lack effective mechanisms to prevent unauthorized data tampering and modification, particularly from malware and unauthorized access, while maintaining data integrity and accessibility across different operating systems.
Innovation Solution
The Secured Data Storage Subsystem (SDSS) employs an intermediary data handler that sits between the operating system and the storage device, processing requests according to its own file system and rule set, mimicking responses to the operating system to maintain control over data integrity and format, thereby preventing unauthorized modifications and ensuring data security across various platforms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an intermediary data handler is introduced to prevent unauthorized data modification, then data security and integrity are improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary data handler device positioned between the operating system and the storage device. This intermediary component intercepts, validates, and controls all data access requests, preventing unauthorized modifications while maintaining data integrity. The data handler acts as a security gateway that mediates between the OS and storage device, implementing security policies without requiring changes to existing system components.
2Reliability
If the SDSS stores data according to its own structure to maintain security, then data security is improved, but compatibility with different operating systems deteriorates
Solution Approach 1:
The data handler creates and maintains a copy of the file system structure that mirrors the expected operating system format. This copy structure allows the data handler to present OS-compatible interfaces and data structures to the operating system, while the actual protected data remains stored in the secure SDSS format. The copying mechanism enables seamless compatibility with different operating systems without compromising the security of the underlying data storage structure.
3Reliability
If the intermediary data handler processes all requests according to its own rules, then data security is improved, but processing speed deteriorates
Solution Approach 1:
The data handler performs preliminary actions by pre-establishing security policies, access control rules, and validation criteria during system initialization. Frequently accessed data is pre-validated and cached with authorization information. This preliminary preparation allows the data handler to make rapid authorization decisions during normal operation without performing complete validation checks for every single request, thereby maintaining security while improving processing speed.
4Reliability
If the SDSS maintains autonomous control over protected data, then data security is improved, but ease of operation deteriorates
Solution Approach 1:
The data handler implements self-service mechanisms by automatically managing security policies, access control lists, and data validation rules without requiring manual intervention. The system autonomously monitors, validates, and enforces security policies on all data access requests. This self-service capability maintains strong security controls while simplifying operation, as users interact with the system through standard OS interfaces without needing to understand or configure the underlying security mechanisms.
Data Source
AI summary
An intermediary data handler is used in a Secured Data Storage Subsystem (SDSS), to provide a host electrical computer system with security of certain data stored in memory of the computer system's static data storage device. The intermediary data handler is functionally disposed between the operating system (OS) and data storage device of the host computer. The data handler has Processor, Memory, and User Interface circuits, and resident software adapted to generate mocked-up response data in reply to an unauthorized read/write communication from the OS, the mock data response being automatically formatted to have a content and data-structure format acceptable by the host OS, while isolating and controlling the original communication from the OS. The SDSS includes host software adapted to integrate operation and function of the intermediary data handler with the host computer system to accomplish the security of data stored on the storage device.