NAS Control-Path API Access Scheduling for Time-Based Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network access storage (NAS) systems face security risks due to always-active configuration access control frameworks, allowing intruders to exploit APIs for unauthorized access, lacking granular control over access levels, and being vendor-specific.
Innovation Solution
Implement a time-based configuration access control framework that generates schedules with flexible access restrictions using a data store to manage access by user entities, APIs, and request types, allowing for self-resolving conflicts and supervisory control across different NAS systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If configuration access control is always active without time restrictions, then security is maintained continuously, but access flexibility and usability deteriorate
Solution Approach 1:
The access control system dynamically adjusts its behavior based on time-of-day parameters. Configuration access is restricted during nighttime hours (e.g., 10 PM to 6 AM) when security is prioritized, and relaxed during daytime hours when usability is improved. This dynamic adaptation resolves the contradiction by making the system flexible rather than static.
Solution Approach 2:
The system implements periodic access control patterns by allowing configuration access only during specific time windows (daytime) and blocking it during other periods (nighttime). This periodic action creates a rhythm of access that balances security requirements with operational needs, resolving the contradiction between continuous security and access flexibility.
2Reliability
If granular time-based access control is implemented, then security is improved, but system complexity increases
Solution Approach 1:
The access control system is segmented into distinct components: time window definition modules, schedule generation modules, and access determination modules. Each component handles a specific aspect of the control logic, making the overall complex system manageable through modular organization. This segmentation allows granular time-based control while keeping system complexity tractable.
Solution Approach 2:
Access control schedules are generated in advance based on predefined time windows and user permissions. The system performs preliminary calculations to determine whether access should be granted before actual access requests occur. This preliminary action simplifies real-time decision-making and reduces the apparent complexity during operation.
3Object-affected harmful factors
If configuration access is restricted by time windows, then security vulnerabilities are reduced, but access availability decreases
Solution Approach 1:
The system applies different access control qualities to different time periods and different user types. During daytime hours, access is more available to support productivity, while during nighttime hours, access is restricted to enhance security. This local differentiation of access quality resolves the contradiction by allowing both high availability and high security at different times and for different users.
Data Source
AI summary
Described is technology that facilitates control of configuration access to a control path of a network access storage system. An example system comprises at least one processor, and at least one memory that stores executable instructions that, when executed by the at least one processor, facilitate performance of operations, comprising determining a specified time window relative to an application programming interface (API) employed for configuration access to a control path of a storage system, and based on the specified time window, generating a schedule for the configuration access to the control path, wherein the schedule comprises an access-based time window defining allowable access by the API to the control path.