Shared Virtual Disk Mapping for Selective File-Backup Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in providing instant access to data stored in backup storage systems while ensuring that only authorized users can access specific portions of backups and preventing overwriting or exposure of data to unauthorized users.
Innovation Solution
A method and system for managing file-based backups using a FBB metadata file to enable selective access by generating a virtual file system and shared virtual disks, allowing authorized applications to read and write to specific data portions while preventing unauthorized access and overwriting.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If data is stored in backup storage systems, then data security and integrity are maintained, but instant access to data is delayed
Solution Approach 1:
The backup data is segmented into multiple virtual disk files (vmdk) organized in a tree structure with root volume and child volumes. This segmentation allows selective mounting of only the necessary portions of backup data, enabling fast access to specific files without requiring the entire backup to be loaded, thus improving access speed while maintaining security through controlled mounting.
Solution Approach 2:
A virtual file system (VFS) manager acts as an intermediary between the backup storage system and applications. The VFS manager interprets virtual path names, translates them to physical backup locations, and controls access to backup data. This intermediary layer provides instant access to authorized data while maintaining security through authentication and controlled file system operations.
2Productivity
If multiple virtual machines access the same backup data, then resource utilization improves, but data overwriting and unauthorized access risks increase
Solution Approach 1:
The shared backup data is segmented into virtual disk files that can be independently mounted by multiple virtual machines. Each VM receives a mounted copy of the necessary virtual disk portions, allowing simultaneous access without direct interference. The segmentation enables productive multi-VM access while maintaining data integrity through controlled mounting operations.
Solution Approach 2:
When multiple virtual machines need access to the same backup data, the system creates mounted copies of the virtual disk files for each VM. These copies allow simultaneous read access without risking overwriting of the original backup data. The copying mechanism enables high resource utilization while protecting data integrity through isolated access paths.
3Reliability
If selective access to backup portions is enabled, then unauthorized access is prevented, but access complexity increases
Solution Approach 1:
The virtual file system manager automatically handles the complexity of selective access control. It interprets virtual path names, determines which virtual disk files need to be mounted, and performs the mounting operations automatically. This self-service approach provides robust access control while hiding the underlying complexity from users and applications.
Solution Approach 2:
The VFS manager serves as an intermediary that simplifies selective access. Instead of requiring complex manual configuration of access rights and file system mounts, the VFS manager translates simple virtual path names into the appropriate mounted file system operations. This intermediary layer provides secure selective access while maintaining simplicity in the user interface.
Data Source
AI summary
A method for managing file based backups (FBBs) includes obtaining, by a FBB metadata file operating in a production host and from an application, a shared access request for a plurality of virtual machines (VMs) to access a FBB, accessing a FBB metadata file associated with the FBB to determine file data accessible to the plurality of VMs, performing an attribute analysis on the FBB metadata file, wherein the storage location attributes are each associated with a storage location of a portion of the file data in a backup storage system, generating a shared virtual disk in the production host based on the attribute analysis, wherein the shared virtual disk maps the file data to the storage locations, generating the plurality of VMs, wherein the VMs read from and write to the shared virtual disk, and enabling access to the virtual machines by the application.