Secure Snapshot Deletion via Support Service Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secure snapshots in storage systems are protected from malware attacks but introduce limitations for users who need to delete them for legitimate reasons, such as low storage space, requiring inefficient and costly manual processes for deletion.
Innovation Solution
A computer-implemented method that allows users to select secure snapshots for deletion by receiving a snapshot deletion key and authenticating the selection through a storage system support service, using an asymmetric cryptographic system to unlock the snapshots for deletion within a limited time frame.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure snapshots are made immutable to protect against malware attacks, then security is improved, but the ability to delete snapshots for legitimate reasons deteriorates
Solution Approach 1:
A support service acts as an intermediary between the user and the storage system for snapshot deletion. The service receives deletion requests, validates them, and coordinates with the storage system to securely delete snapshots. This mediator enables deletion operations while maintaining the immutability protections against malware.
Solution Approach 2:
The system changes the state parameter of snapshots from immutable to deletable through a controlled process. By receiving a snapshot deletion key and authenticating through the support service, the system temporarily modifies the deletion restriction parameter, allowing legitimate deletion while maintaining security through authenticated workflows.
2Reliability
If manual processes are used to delete secure snapshots, then security is maintained, but operational efficiency and cost deteriorate
Solution Approach 1:
The support service enables a self-service deletion model where users can initiate snapshot deletion by providing a snapshot deletion key. The system automatically processes the deletion request through authentication and coordination with the storage system, eliminating the need for costly manual intervention while maintaining security through automated validated workflows.
Data Source
AI summary
A method, computer program product, and computing system for receiving a selection of one or more secure snapshots to remove from a storage system. A snapshot deletion key may be received from the storage system. The selection of the one or more secure snapshots and the snapshot deletion key may be provided to a storage system support service. A snapshot deletion response may be received from the storage system support service. The snapshot deletion response and the selection of the one or more secure snapshots may be authenticated via the storage system. In response to authenticating the snapshot deletion response and the selection of the one or more secure snapshots, the one or more secure snapshots may be unlocked for deletion.