Secure Hierarchical File Directory for Dispersed Storage Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current dispersed storage networks face challenges in securely and reliably storing and retrieving large amounts of data across multiple geographically distributed locations, particularly in maintaining data integrity and security against failures and hacking attempts.
Innovation Solution
A distributed computing system that employs dispersed error encoding and decoding, where data is segmented, encoded, and distributed across multiple storage units, allowing for secure storage and retrieval while being resistant to failures and hacking, using a secure hierarchical file directory system for management and task processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in a dispersed storage network across multiple geographically distributed locations, then data availability and fault tolerance are improved, but data security and integrity against hacking attempts deteriorate
Solution Approach 1:
The patent segments data into multiple data slices that are distributed across different storage units in the dispersed storage network. Each slice is encrypted and can only reconstruct the original data when a threshold number of slices are combined, providing both availability and security against hacking attempts.
Solution Approach 2:
The patent introduces a secure hierarchical file directory system that acts as an intermediary layer between the user and the dispersed storage network. This directory system manages data slices, tracks their locations, and controls access permissions, thereby maintaining security while enabling data availability across distributed locations.
2Reliability
If data is segmented and distributed across multiple storage units, then fault tolerance is improved, but system complexity increases
Solution Approach 1:
The secure hierarchical file directory system performs multiple functions: it manages data slice locations, controls access permissions, tracks data integrity, and coordinates reconstruction operations. This multi-functional approach simplifies the overall system architecture by consolidating management tasks in a single system rather than requiring separate mechanisms for each function.
Solution Approach 2:
The patent establishes the secure hierarchical file directory system in advance to pre-organize data slices and define access policies before data distribution occurs. This preliminary organization simplifies subsequent fault tolerance operations and data reconstruction processes by having the management framework already in place.
3Reliability
If dispersed error encoding and decoding is used for secure storage, then data integrity is improved, but processing time increases
Solution Approach 1:
The patent applies different levels of error encoding and decoding complexity to different data slices based on their importance and access patterns. Critical data slices use more robust encoding schemes for maximum integrity, while less critical slices use lighter encoding to reduce processing time, thereby optimizing the overall system performance.
Solution Approach 2:
The system performs error checking and decoding operations on only the necessary number of data slices required to reconstruct the original data, rather than processing all distributed slices. This partial action approach maintains data integrity while minimizing unnecessary processing time.
Data Source
AI summary
A method includes creating a file directory entry in a directory file of a secure hierarchical file directory system for a file. The file directory entry includes a path name, an encryption access control list, and a source name. The file is encrypted with a key and the key is encrypted with each public key of user devices authorized to access the file. The encryption access control list includes identities of the set of user devices and the set of object content keys. The method further includes encrypting the directory file using a second key. The method further includes generating second object content keys based on the second key and public keys of second user devices authorized to access the directory file. The method further includes creating a next level directory file entry in a next higher directory file of the secure hierarchical file directory system for the directory file.