Location-Based Access Control for Virtual Volumes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data sharing technologies struggle to effectively restrict the disclosure of data based on location, particularly when data does not contain personal information or is not in real-time, and cannot handle data with restricted publication or modified data for ease of use before publication.
Innovation Solution
A data sharing system and method that utilize a storage node with virtual volumes, where an access setting unit restricts readout devices from accessing data based on the location of the readout device and the virtual volume, ensuring that data disclosure is restricted according to its location and the provision of disclosure restrictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If location-based access restriction is implemented, then data security is improved, but system complexity increases
Solution Approach 1:
The patent applies preliminary action by pre-defining location information for both readout devices and virtual volumes, and pre-establishing access restriction rules based on location matching. The storage node automatically retrieves and compares location information when access requests are made, eliminating the need for complex real-time decision-making algorithms and reducing system operational complexity.
Solution Approach 2:
The patent introduces location information as an intermediary element that mediates between the readout device and the virtual volume. Instead of implementing complex direct access control mechanisms, the system uses location information as a simple mediator: the storage node retrieves location info of the device, compares it with the virtual volume's location, and automatically determines access permission. This intermediary approach significantly simplifies the access control system.
2Ease of operation
If comprehensive data sharing is enabled, then data accessibility is improved, but risk of unauthorized disclosure increases
Solution Approach 1:
The patent applies local quality by implementing location-specific access control where different readout devices located in different geographical regions are granted different levels of access to the same virtual volume. The storage node retrieves the location information of each accessing device and compares it with the location information stored in the virtual volume, allowing or denying access based on this local location match. This enables comprehensive data sharing within authorized locations while preventing unauthorized access from other locations.
Data Source
AI summary
To provide a data sharing system and a data sharing method that make it easy to suppress the disclosure of data whose disclosure is restricted according to the location where the data exists, in accordance with the provision of the disclosure restriction.A data sharing system comprising a storage node having virtual volumes accessed by a readout device, the data sharing system comprising: the storage node comprises: an access setting unit configured to restrict a target readout device from reading data from a target virtual volume in accordance with information on a location of the target readout device accessing the data sharing system and information on a location of the target virtual volume from which the target readout device attempts to read data.