Offload Provider Bulk Data Transfer via Token Trust
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transfer methods are inefficient for bulk data transfer, especially over networks, due to increased time and security complexities, and lack secure channel establishment between independent offload providers.
Innovation Solution
The solution involves extending trust between source and destination offload providers to transfer bulk data over a secure channel without the data traversing the initiator, using tokens and cryptographic means to authenticate and encrypt communication, allowing independent offload providers to securely transfer data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is transferred by reading into main memory and writing to destination, then data transfer can be completed, but transfer time increases significantly for bulk data
Solution Approach 1:
The patent extracts the data transfer operation from the initiator's main memory and moves it to a dedicated offload provider. The initiator only needs to read data once into its own memory, then provides a token to the offload provider which handles the actual bulk transfer to the destination, eliminating the need for the initiator to manually write data to the destination.
Solution Approach 2:
The offload provider acts as an intermediary between the initiator and the destination. The initiator provides a token representing the data to the offload provider, which then uses this token to retrieve the data from the initiator's storage and transfer it to the destination storage, facilitating efficient bulk data transfer without the initiator directly managing the entire transfer process.
2Adaptability or versatility
If data is accessed over a network, then remote data transfer is enabled, but additional network delays are imposed
Solution Approach 1:
The system performs preliminary actions by establishing secure communication channels and authentication mechanisms before the actual data transfer begins. The offload provider authenticates the initiator and destination in advance, and sets up the transfer protocol, so that when bulk data transfer occurs, it can proceed efficiently without authentication delays during the transfer itself.
3Reliability
If security measures are implemented for data transfer, then data protection is improved, but system complexity increases
Solution Approach 1:
The patent uses tokens as simplified copies or representations of the actual data for authentication and transfer purposes. Instead of managing complex security protocols for every data operation, the system creates token copies that encapsulate the necessary authorization information, allowing secure data transfer through simpler token-based authentication mechanisms.
4Adaptability or versatility
If independent offload providers are used for source and destination, then system flexibility is improved, but trust establishment becomes difficult
Solution Approach 1:
The initiator acts as an intermediary that bridges the trust gap between independent offload providers. The initiator authenticates both the source and destination offload providers, and provides tokens that serve as trusted credentials. This allows two independent offload providers to work together securely without needing to establish direct trust relationships between themselves.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The subject matter described herein relates to offload technology. A source offload provider (520) may transfer bulk data to a destination offload provider (521) even if the offload providers are different and independent from each other and have no prior knowledge of each other. The data transfer is based on a token being exchanged that represents the bulk data. In preparation for transferring bulk data, trust between an initiator (505) of the transfer and the respective offload providers (520, 521) may be extended to the offload providers, i.e. the offload providers (520, 521) trust each other as they each trust the initiator (505). After authentication, the offload providers may transfer all or a portion of the bulk data over a secure channel (530) without the data traversing the initiator (505) of the transfer.