Role-Based User Behavior Modeling for Storage Threat Containment

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing storage systems face inefficiencies in data management and reliability due to redundant write operations and lack of centralized control over storage drives, leading to increased latency and reduced reliability.

Innovation Solution

A direct-mapped flash storage system that addresses data blocks directly without intermediate storage controllers, utilizing a centralized operating system to manage operations such as data rewriting and erasure, and incorporating non-volatile RAM for faster data buffering and power loss protection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional storage controllers manage data blocks, then centralized control is achieved, but redundant write operations occur and latency increases

Engineering Contradiction:
Improvestorage system reliabilityVSAvoidwrite operation latency
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent extracts the data block management function from traditional storage controllers and implements it directly in the flash memory devices themselves. Each flash device independently manages its own data blocks, eliminating the need for centralized controller intervention in routine write operations, thereby reducing latency while maintaining reliability through distributed decision-making

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

Flash memory devices perform self-management of data blocks including self-rewriting and self-erasing operations without requiring controller commands. The system uses feedback mechanisms where flash devices autonomously detect and correct their own write operations, eliminating redundant controller-mediated writes and reducing overall system latency

Inventive Principle:
Principle #25Self-service

2Productivity

If centralized controllers manage all storage operations, then control is simplified, but redundant write operations increase and efficiency decreases

Engineering Contradiction:
Improvestorage operation efficiencyVSAvoidstorage controller complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent extracts management complexity from centralized controllers and distributes it to individual flash devices. Each flash device independently tracks and manages its own data blocks, eliminating the need for complex centralized coordination and reducing redundant write operations while improving overall system efficiency

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The storage management function is segmented into independent units at each flash device level. Each device maintains its own mapping tables and control logic for managing data blocks, replacing the monolithic centralized controller with distributed intelligent units that operate autonomously and efficiently

Inventive Principle:
Principle #1Segmentation

3Reliability

If traditional storage systems lack centralized control, then redundancy is reduced, but data management reliability decreases

Engineering Contradiction:
Improvedata management reliabilityVSAvoidstorage system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Flash memory devices autonomously manage their own data blocks through self-rewriting and self-erasing capabilities. The system incorporates feedback mechanisms where devices independently track and correct their operations, ensuring data management reliability without requiring complex centralized control or additional redundancy mechanisms

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250356031A1User Behavior Modeling for Detecting and Containing Malicious Activity in a Storage System
Publication Date: 2025.11.20 PURE STORAGE INC
  • US20250356031A1 patent drawing
  • US20250356031A1 patent drawing
  • US20250356031A1 patent drawing

AI summary

An illustrative method includes monitoring operations performed with respect to a storage system by an entity using an identity associated with a particular role, the particular role providing the entity with a set of permissions associated with the storage system; determining, based on the monitoring, that one or more operations of the operations deviate from an expected activity profile associated with the role by more than a threshold; and performing, based on the determining that the one or more operations deviate from the expected activity by more than the threshold, a remedial action with respect to the entity.