Request-Based Policies for Data Storage Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud data storage services lack the ability for users to control responses to specific types of requests beyond simple 'allow' or 'deny' actions, limiting their flexibility in managing access and handling requests from various sources.
Innovation Solution
Users can create and configure request-based policies that allow the data storage system to generate custom responses to specific types of requests, including dynamically generating data objects or returning different stored data objects, thereby extending the control over request handling.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If users can only control requests with simple allow or deny actions, then the system is easy to operate, but the adaptability to different request scenarios is insufficient
Solution Approach 1:
The patent segments request handling into distinct policy rules that can be independently configured. Each rule addresses a specific request scenario (e.g., web crawlers, scanners, authenticated users) with customized actions, allowing granular control without overwhelming complexity. The system divides the monolithic access control into modular, manageable policy components.
Solution Approach 2:
The patent introduces dynamic response generation where the system can automatically generate custom responses based on request characteristics. Rather than static allow/deny decisions, the system dynamically adapts its behavior by generating contextualized responses (e.g., returning custom error messages, generating placeholder content, or applying different access levels) based on the detected request type and user credentials.
2Reliability
If the system returns the exact requested data object, then the operation is simple, but the security control is insufficient
Solution Approach 1:
The patent introduces an intermediary policy evaluation layer between the request and the data object retrieval. This intermediary component analyzes the request, evaluates applicable policies, and determines the appropriate response action. It acts as a mediator that can intercept requests, apply security rules, and generate customized responses without directly exposing the underlying data storage complexity.
Solution Approach 2:
The patent changes the response parameters based on policy evaluation. Instead of always returning the requested data object with identical parameters, the system modifies response parameters (such as data format, content subset, access permissions, or response type) according to the evaluated policy rules. This allows the same data object to be returned with different parameters depending on the requester and context.
3Adaptability or versatility
If the system provides basic access control, then the device complexity is low, but the functionality for handling diverse request types is limited
Solution Approach 1:
The patent creates a universal policy management system that handles multiple request types and scenarios through a single unified framework. The same policy evaluation mechanism serves diverse functions: authenticating users, detecting crawlers, preventing scanners, generating custom responses, and managing data access. This multi-functional approach increases versatility without proportionally increasing complexity.
Data Source
AI summary
Techniques are described for enabling users to create and configure request-based policies used by a data storage system to generate custom responses to particular types of requests for users' stored data objects. The request-based policies include rules used to identify types of requests for data objects and corresponding types of responses to be generated responsive to detecting such requests. The types of responses that can be specified in such policies include responses other than simply returning a requested data object or denying a request. For example, a rule for certain types of responses can instruct the data storage system to return a dynamically generated data object, another rule can instruct the system to return a different data object than the one requested, and so forth.