Storage Connection Authentication via Secret Code Duplication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing dispersed storage networks face challenges in efficiently authenticating connections and managing error-encoded data, leading to resource expenditure and potential data loss due to storage unit failures.
Innovation Solution
A dispersed storage network architecture that includes a managing unit for DS management services, an integrity processing unit for rebuilding 'bad' or missing encoded data slices, and a computing core with a DSN interface module for error encoding and decoding, utilizing Cauchy Reed-Solomon encoding and authentication protocols to ensure secure and reliable data storage and retrieval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication is performed for each connection in a dispersed storage network, then connection security is improved, but resource expenditure increases
Solution Approach 1:
The system performs preliminary authentication by establishing a trusted connection between a computing device and the dispersed storage network. Authentication information is obtained and stored during this initial connection, allowing subsequent connections to be authenticated more efficiently without repeating the full authentication process for each new connection.
Solution Approach 2:
The system duplicates authentication information from a first connection to a second connection. By copying the authentication credentials that were established during initial connection, the system enables rapid authentication for subsequent connections without re-expending the full authentication resources, thus reducing resource expenditure while maintaining security.
2Reliability
If redundant copies of data are stored, then data reliability is improved, but storage efficiency deteriorates
Solution Approach 1:
The system segments data into multiple slices and disperses them across different storage units in the network. Instead of creating full redundant copies, the data is divided into fragments that can be reconstructed from a threshold number of slices, reducing total storage requirements while maintaining data reliability through error correction coding.
Solution Approach 2:
The system changes the storage parameter from storing complete redundant copies to storing dispersed data slices with error correction capabilities. This parameter change allows the system to achieve the same reliability level with less storage space by using mathematical reconstruction methods rather than simple duplication.
3Reliability
If error correction encoding is applied to data, then data integrity is improved, but processing complexity increases
Solution Approach 1:
The dispersal module performs multiple functions simultaneously: it segments data, applies error correction encoding, and prepares slices for distribution across storage units. By combining these functions into a single universal module, the system reduces overall processing complexity compared to having separate dedicated components for each function.
Solution Approach 2:
The system merges data segmentation and error correction encoding into a unified dispersal process. The encoding function integrates both operations, creating encoded slices that inherently contain both segmentation and error protection, thereby simplifying the processing architecture while maintaining data integrity.
Data Source
AI summary
A method includes authenticating, by a computing device, a first connection between one or more storage units and at least one of the computing device and a first user computing device. The method further includes determining, by the computing device, to add a second connection between the one or more storage units and at least one of the computing device and a second user computing device. The method further includes generating, by the computing device, a secret code and sending the secret code to the one or more storage units via the first connection. The method further includes sending, by the one or more storage units, responses to the secret code to the computing device via the second connection. The method further includes authenticating, by the computing device, the second connection based on the authentication of the first connection and the responses from the one or more storage units.