Secure File-Level Restore from Block-Based Backup Metadata
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for mounting a block-based backup (BBB) to a recovery host allow unauthorized access and hinder secure file-level restoration, compromising data security and integrity.
Innovation Solution
A method and system that generates and analyzes file system metadata to create a reordered index, allowing secure file-level restoration without mounting the BBB to the recovery host by verifying user access levels and selectively restoring permitted assets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the BBB is mounted to the recovery host to enable file-level restore, then file-level restoration capability is improved, but security is worsened because all assets become accessible and unauthorized access is permitted
Solution Approach 1:
The patent extracts the file system metadata from the mounted BBB and processes it separately on the recovery host. By parsing the metadata to create an index of permitted assets before mounting the BBB, the system enables file-level restore operations without requiring the entire BBB to be mounted and accessible, thus preventing unauthorized access while maintaining restore capability
Solution Approach 2:
The patent performs preliminary actions by parsing the file system metadata and generating an index of permitted assets before the BBB is mounted to the recovery host. This advance preparation allows the system to control which files can be restored without requiring full mounting of the backup, thereby maintaining security while enabling file-level operations
2Adaptability or versatility
If the BBB is mounted to access all assets for restoration, then restoration flexibility is improved, but data security is worsened due to exposure of all assets
Solution Approach 1:
The patent segments the backup data by extracting and processing only the file system metadata separately from the actual backup data. This segmentation allows the system to create a structured index that identifies permitted assets, enabling selective restoration of specific files or folders without exposing or requiring access to the entire backup, thus maintaining both flexibility and security
3Ease of operation
If mounting BBB is required for file-level restore, then restore functionality is improved, but computing resource consumption is worsened
Solution Approach 1:
The patent extracts only the necessary file system metadata from the backup and processes it locally on the recovery host to generate an index. By taking out and processing only this essential metadata rather than mounting and accessing the entire backup image, the system significantly reduces computing resource consumption while maintaining full restore functionality for permitted assets
Data Source
AI summary
A method for managing a block-based backup (BBB) includes: sending a file system parsing request to a file system, in which the file system is backed up in a backup storage as the BBB; obtaining file system metadata, in which the file system metadata is generated and stored in the backup storage in response to the file system parsing request; analyzing the file system metadata to generate an index for each asset of the file system; reordering the index of each asset to generate a reordered index; determining a user access level of a user; identifying assets in the reordered index to obtain a set of permitted assets for the user; providing a graphical user interface (GUI) specifying the set of permitted assets; receiving selected assets among the set of permitted assets via the GUI; and restoring the selected assets from the BBB.