Storage Access Management Console Caching Validation Results
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional storage systems face inefficiencies in managing access to storage space due to the need for multiple modules to interact before a client request can be processed, especially when a large number of client computing systems request access simultaneously, leading to a cumbersome validation process through storage servers and domain controllers.
Innovation Solution
Implementing a management console that interfaces with client computing systems and storage servers, which validates client identities and stores validation results in an access control data structure, allowing for future requests to be granted without re-validation by the domain controller, thereby streamlining the access control process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If client requests are validated through multiple modules (management console, storage operating system, domain controller) before processing, then access control security is maintained, but request processing time increases and system efficiency decreases
Solution Approach 1:
The patent applies preliminary action by validating client identities and storing authentication credentials in the access control data structure before actual storage operations are needed. This pre-validation approach allows the system to quickly check against cached credentials during storage operations rather than performing full validation cycles, thereby maintaining security while reducing processing time for subsequent requests
Solution Approach 2:
The patent introduces an intermediary mechanism by implementing an access control data structure that caches validation results between the domain controller and storage operating system. This intermediary layer stores pre-validated credentials, allowing the system to bypass repeated validation cycles through the management console and domain controller, thus reducing request processing time while maintaining the security framework
2Reliability
If multiple modules interact to validate and process each client request, then comprehensive access control is achieved, but system complexity increases
Solution Approach 1:
The patent extracts the validation result caching function from the complex multi-module validation process and implements it as a separate access control data structure. This extracted component stores authentication credentials independently, allowing the system to maintain comprehensive access control through the existing module hierarchy while reducing the complexity of inter-module interactions by eliminating redundant validation steps
Solution Approach 2:
By performing preliminary validation and caching results in the access control data structure, the patent reduces the complexity of real-time multi-module interactions. The pre-stored credentials enable quicker decision-making in the storage operating system without requiring complex coordination with the management console and domain controller for each request
3Productivity
If validation results are cached in an access control data structure, then request processing efficiency improves, but memory storage requirements increase
Solution Approach 1:
The patent implements copying by creating a cached copy of authentication credentials in the access control data structure rather than storing all possible validation information. This selective copying approach stores only the essential authentication data needed for quick verification, improving request processing efficiency while minimizing the memory storage volume required for the cache
Data Source
AI summary
Method and system for managing access to storage space are provided. A plurality of client computing systems interfaces with a management console for accessing storage space at a plurality of storage devices managed by a plurality of storage servers that also interfaces with the management console. The management console is configured to receive a request from a client computing system to access a storage volume or to obtain information regarding the storage volume, validate the request by verifying a client computing system identity with a domain controller, store validation result in an access control data structure at a memory storage device; and use the validation result to either accept or reject any future client computing system request for accessing another storage volume without having to validate the future requests with the domain controller.