Storage-Based Data Anonymization for Real-Time Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data anonymization methods in storage systems incur high costs and low efficiency due to the need for external hosts to perform anonymization processing on production system data.
Innovation Solution
The storage system performs anonymization processing on production system data, reducing the need for external hosts and enabling real-time anonymization, thereby lowering costs and improving efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If external hosts perform anonymization processing on production system data, then data can be anonymized for testing, but anonymization costs increase and efficiency decreases
Solution Approach 1:
The patent merges the anonymization function into the storage system itself, combining data storage and data processing capabilities in a single system. This eliminates the need for separate external hosts to perform anonymization, thereby reducing overall system complexity and cost while improving efficiency. The storage system now directly provides both storage and anonymization services to development nodes.
Solution Approach 2:
The storage system performs anonymization processing on its own stored data without requiring external assistance. By implementing anonymization capabilities internally, the storage system serves its own data processing needs, reducing dependency on external hosts and lowering associated costs and complexity.
2Loss of time
If external hosts perform anonymization processing, then data can be anonymized, but anonymization delay increases
Solution Approach 1:
By merging storage and anonymization functions into a single system, the patent eliminates data transfer delays between external hosts and storage systems. The anonymization process occurs in-place within the storage system, significantly reducing the time required for data preparation and improving overall productivity.
3Adaptability or versatility
If multiple accounts access the same data with different anonymization requirements, then data can be shared, but processing complexity increases
Solution Approach 1:
The patent applies different anonymization rules to different accounts accessing the same data, based on their specific requirements. Each account receives data processed with locally optimized anonymization parameters, allowing customized protection levels while maintaining a unified storage system. This approach enables adaptability without proportionally increasing overall system complexity.
Solution Approach 2:
The storage system implements a universal anonymization framework that can handle multiple account-specific requirements through a single integrated mechanism. The system provides multi-functional anonymization capabilities that serve diverse account needs while maintaining centralized management, thereby achieving versatility without excessive complexity.
Data Source
AI summary
The present disclosure relates to data anonymization methods, apparatuses, and storage systems. In one example method, a storage system obtains a data access request, obtains target data based on the data access request, and performs anonymization processing on the target data to obtain anonymized target data. Then, the storage system sends the anonymized target data.