IoT Edge Storage Using Erasure Coding and Proxy Trust
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current edge storage technologies for IoT devices face challenges in providing robust data security, adaptive sharing capabilities, efficient fault-tolerant mechanisms, and are prone to data leakage due to limitations in access control and communication overhead, with existing solutions being costly and insecure.
Innovation Solution
A robust and reliable edge storage method using a data owner server that encrypts data and sets a trusted access control policy, with a processing server storing encrypted segments based on a Totally Local Reconstruction Code scheme, and a third-party proxy server determining trustworthiness through reputation centers to ensure secure data access and recovery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple copies of each file are deployed on different edge servers to ensure data robustness, then data reliability is improved, but storage space overhead increases significantly
Solution Approach 1:
The patent divides files into multiple data segments and distributes them across different edge servers using erasure coding. Instead of storing complete file copies, the system stores segmented data pieces that can be reconstructed when needed. This segmentation approach maintains data reliability while significantly reducing the storage space overhead compared to traditional replication methods.
Solution Approach 2:
The patent changes the storage parameter from storing complete file copies to storing encoded data segments with redundancy. By using erasure coding parameters (such as (k, n) codes where k is the number of original segments and n is the total number of segments including parity), the system achieves the same reliability level with reduced storage requirements.
2Ease of operation
If complete data is stored on edge servers for easy access, then data accessibility is improved, but data leakage risk increases
Solution Approach 1:
The patent segments data into multiple pieces and distributes them across different edge servers. No single server holds the complete data, which prevents data leakage even if a server is compromised. The segmentation ensures that data accessibility is maintained through distributed storage while minimizing the harm from potential breaches.
Solution Approach 2:
The patent introduces a trusted third-party proxy server as an intermediary that manages data access requests. This proxy server verifies user credentials and coordinates data retrieval across multiple edge servers without any single server having access to complete data. The intermediary mechanism maintains data accessibility while reducing data leakage risk.
3Adaptability or versatility
If a third-party assessment proxy is used to evaluate data requester trust, then access control is improved, but the proxy itself becomes a single point of failure for data security
Solution Approach 1:
The patent segments the trust assessment function across multiple trusted third-party proxies instead of relying on a single proxy. This distribution of assessment authority eliminates the single point of failure problem while maintaining adaptability in access control. Multiple proxies can independently evaluate requester trust, and their assessments are aggregated for final access decisions.
4Object-affected harmful factors
If secret keys are provided to enhance data security, then data protection is improved, but data sharing capability is greatly limited
Solution Approach 1:
The patent segments both data and access control mechanisms. Instead of using a single secret key for all data access, the system divides access rights into multiple segments distributed among different users and proxies. This segmentation enables fine-grained data sharing where different users can access different data segments based on their credentials, maintaining both security and sharing capability.
Solution Approach 2:
The patent changes the access control parameter from a single secret key to multiple distributed credentials and permissions. By using parameter-based access control with multiple factors (user identities, permissions, trust levels), the system enhances data protection while simultaneously improving data sharing capability through flexible permission management.
Data Source
AI summary
Disclosed are a robust and reliable edge storage method for the Internet of Things and a system therefor. A data owner server splits and encrypts raw data into an encrypted data segment, sets a trusted data access control policy and sends it to a third-party proxy server, and sends the encrypted data segment and the trusted data access control policy to a processing server; the processing server stores the encrypted data segment based on a totally local reconstruction code scheme, and forwards the request sent by a data requester server to the third-party proxy server; the third-party proxy server determines whether the data requester server that sends the request is trustable according to the trusted data access control policy, if it is trusted, then sends decrypted information to the data requester server through the processing server; the data requester server decrypts the encrypted data segment according to the decrypted information to obtain the raw data.