Snapshot Backup Locking for Ransomware-Resistant Cloud Storage

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data protection methods, including snapshot functions and cloud backups, are vulnerable to advanced cyber attacks, such as deletion or modification of snapshots, and data stored in public clouds is at risk due to external network access, compromising data security.

Innovation Solution

A storage system that includes a processor for acquiring snapshots, comparing them to retrieve incremental data, transferring this data to another storage for backup, and setting locks on the backup data to prevent unauthorized access or modification, thereby enhancing data protection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is backed up to public cloud storage, then data protection is improved, but security vulnerability increases due to external access paths

Engineering Contradiction:

Improvedata protectionVSAvoidsecurity vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a storage lock mechanism as an intermediary protective layer between the backup data and external access. This lock function acts as a mediator that controls and restricts access to backup data in the public cloud, preventing unauthorized operations while maintaining the backup's protective purpose.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If snapshot function is used for data protection, then data security is improved, but vulnerability to deletion or modification attacks increases

Engineering Contradiction:

Improvedata securityVSAvoidsnapshot deletion or modification

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary anti-action by implementing a storage lock mechanism that prevents deletion and modification operations on snapshots before attacks can occur. This preemptive protective measure counteracts the harmful effects of ransomware and other malicious operations targeting snapshots.

Inventive Principle:

Principle #9Preliminary anti-action

Solution Approach 2:

The storage lock serves as an intermediary protective layer between the snapshot data and malicious operations. It mediates access control, allowing legitimate operations while blocking unauthorized deletion or modification attempts by attackers.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Productivity

If incremental backup is used, then backup efficiency is improved, but data protection completeness may be compromised

Engineering Contradiction:

Improvebackup efficiencyVSAvoiddata protection completeness

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The storage lock mechanism acts as an intermediary that ensures the completeness and integrity of incremental backup data. By locking the backup data, the system prevents any loss or corruption during the incremental backup process, maintaining data protection completeness while preserving backup efficiency.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS12608494B2Storage and data protection method of storage

Publication Date: 2026.04.21 HITACHI VANTARA LTD

AI summary

To safely store data. A storage 200 connected to another storage 400 via a network, the storage 200 including: a processor 216 configured to process data to be stored in a storage device 220, in which the processor 216 is configured to acquire a first snapshot for a volume generated using a storage area of the storage device, compare a second snapshot, which is a previously acquired snapshot, with the first snapshot to retrieve incremental data, transfer the incremental data to the other storage and store the incremental data as backup data, and set lock of the backup data stored in the other storage.