Storage Array Security Policy for Non-Compliant Active Sessions

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional data storage systems lack flexibility in managing connection security, leading to potential security holes and data unavailability when implementing updated verification settings, as they cannot disconnect or re-authenticate existing connections that do not meet new security requirements.

Innovation Solution

The storage array is provisioned with multiple capabilities to either terminate, maintain, or decline updated security requirements based on user selection, allowing for flexible management of active sessions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the conventional data storage system maintains established connections even when new verification settings are implemented, then connection stability is preserved, but security compliance deteriorates

Engineering Contradiction:

Improveconnection stabilityVSAvoidsecurity compliance

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system dynamically adjusts connection management based on verification settings. When new verification settings are implemented, the system can selectively terminate non-compliant connections while maintaining compliant ones, making the connection management adaptive rather than static. This resolves the contradiction by allowing the system to be both stable (maintaining good connections) and secure (terminating non-compliant connections).

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system applies different treatment to different connections based on their individual compliance status. Rather than uniformly maintaining or terminating all connections, it evaluates each connection against the new verification settings and applies local quality control - maintaining compliant connections while terminating non-compliant ones. This resolves the security compliance issue without unnecessarily disrupting stable connections.

Inventive Principle:

Principle #3Local quality

2Object-affected harmful factors

If the administrator implements more stringent verification settings, then security is improved, but connection flexibility deteriorates

Engineering Contradiction:

ImprovesecurityVSAvoidconnection flexibility

Core Design Contradiction:

Object-affected harmful factorsVSAdaptability or versatility

Solution Approach 1:

The system provides dynamic connection management with multiple capabilities that can be selected based on administrative needs. Administrators can choose between terminating non-compliant connections, maintaining them with warnings, or applying verification settings only to new connections. This dynamic approach maintains security while providing flexibility in how verification settings are applied.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system segments connection management into different capabilities and policies that can be independently selected. Rather than a single rigid approach, administrators can choose from multiple segmented options including different verification policies, termination behaviors, and warning mechanisms. This segmentation provides flexibility while maintaining security through configurable policies.

Inventive Principle:

Principle #1Segmentation

3Device complexity

If the conventional data storage system lacks visibility of established connections compliance, then system simplicity is maintained, but security monitoring deteriorates

Engineering Contradiction:

Improvesystem simplicityVSAvoidsecurity monitoring

Core Design Contradiction:

Device complexityVSDifficulty of detecting and measuring

Solution Approach 1:

The system implements feedback mechanisms that provide administrators with visibility into connection compliance status. Through capability selections and policy applications, the system monitors and reports on which connections comply with verification settings and which do not. This feedback enables security monitoring without excessive complexity, as it provides essential visibility through structured capability reporting.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS12518018B2Managing connection security of storage arrays

Publication Date: 2026.01.06 DELL PROD LP

AI summary

A technique is directed to managing connection security of a storage array. The technique includes provisioning the storage array with capabilities to: implement an updated security requirement and terminate an active session between the storage array and a host device in response to the active session being unable to satisfy the updated security requirement, implement the updated security requirement and maintain the active session even though the active session is unable to satisfy the updated security requirement, and decline implementing the updated security requirement and maintain the active session in response to the active session being unable to satisfy the updated security requirement. The technique further includes, after the storage array has been provisioned with the capabilities, receiving a security policy selection which identifies one of the capabilities. The technique further includes applying one of the capabilities to the storage array based on the security policy selection.