Reference-Based ACL Storage for Reducing File-System Memory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file storage systems inefficiently store access control lists (ACLs) for each file, leading to significant memory usage due to duplicated and default ACLs, which are often stored multiple times, occupying a large portion of the total memory space.
Innovation Solution
An ACL management system analyzes ACLs to identify duplicates and generates a unique ACL key for each normalized ACL, storing the key in a separate data structure and referencing it within the file storage system, reducing redundant storage of ACLs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a separate ACL is stored for each file in the file storage system, then access control management is simplified and straightforward, but memory space consumption increases significantly due to duplicated and default ACLs
Solution Approach 1:
The patent extracts duplicate ACLs from individual file storage and consolidates them into a centralized ACL database. Instead of storing complete ACLs with each file, the system stores only unique ACL templates once and references them through keys, thereby reducing memory consumption while maintaining access control functionality.
Solution Approach 2:
The patent uses ACL keys as references or copies that point to the actual ACL data in the database. These keys act as handles or identifiers that allow the system to access complete ACL information when needed, eliminating the need to store redundant ACL copies with each file.
2Reliability
If default ACLs are stored with each file, then access control is consistently applied, but redundant storage occurs when multiple files share the same default ACL
Solution Approach 1:
The patent merges identical default ACLs into a single entry in the centralized ACL database. Multiple files that share the same default ACL permissions now reference the same stored template through their ACL keys, eliminating redundancy while preserving consistent access control application across all files.
3Quantity of substance
If ACLs are stored externally in a separate data structure, then memory space is reduced, but system complexity increases due to the need for ACL analysis and key generation
Solution Approach 1:
The patent performs preliminary analysis of ACLs during the file creation or update process to determine whether an ACL needs to be stored externally. The system analyzes ACL characteristics (such as whether they are default ACLs or duplicates) and generates appropriate keys before actual storage occurs, streamlining the overall process.
Solution Approach 2:
The patent introduces ACL keys as intermediary elements between the file storage system and the external ACL database. These keys serve as mediators that simplify the relationship between files and their ACLs, allowing the system to reference external ACL data without directly managing the complex storage and retrieval operations.
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
A method for storing a plurality of access control lists (ACLs) associated with resources in a file storage system includes analyzing the plurality of ACLs in the file storage system to determine that an ACL from among the plurality of ACLs meets one or more requirements for normalization. The ACL management system may be external to the file storage system and the file storage system stores a plurality of resource, where each resource in the file storage system is stored with an associated ACL. Upon determining that the ACL meets the one or more requirements, the method generates an ACL key for the ACL, where the ACL key references the ACL. The ACL key along with the ACL are stored in an ACL data structure that is external to the file storage system. The ACL key is then transmitted to the file storage system for storage with each file associated with the ACL instead of storing the ACL.