Storage Subspace Access Control for Granular Permission Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control technologies in distributed computing scenarios lack flexibility, particularly in setting access types at smaller granularities and adjusting access permissions efficiently, leading to resource inefficiencies and complex operations.
Innovation Solution
Implementing access control at the subspace level within a storage space, allowing for finer granularity control and user-mode adjustments of access types, using space access information and credentials to manage access requests and permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If access control is implemented at the storage space level, then access control is simple to implement, but access control granularity is too coarse and lacks flexibility
Solution Approach 1:
The patent divides the storage space into multiple storage subspaces, each with independent access control attributes. This segmentation allows fine-grained access control at the subspace level while maintaining the simplicity of the overall access control mechanism. Each subspace can be independently configured with different access types and permissions.
Solution Approach 2:
The patent introduces a new dimension of access control by adding access type attributes to the storage subspace structure. This dimensional extension enables multiple access types (e.g., read-only, read-write, execute) to be assigned to different subspaces, providing flexibility without fundamentally changing the access control architecture.
2Productivity
If access types are adjusted in kernel mode, then access control is secure, but operations become complex and inefficient
Solution Approach 1:
The patent enables user-mode programs to directly adjust access types of storage subspaces through system calls, making the access control system self-serviceable. This eliminates the need for complex kernel-mode interventions and allows applications to dynamically adjust permissions without system administrator involvement.
Solution Approach 2:
The patent changes the parameter of access control from static kernel-level configuration to dynamic user-mode adjustable parameters. By allowing access types to be modified through user-mode system calls with appropriate permissions, the system achieves both security and operational efficiency.
3Adaptability or versatility
If fine-grained access control is implemented at subspace level, then access flexibility is improved, but access control complexity increases
Solution Approach 1:
The patent segments the storage space into multiple subspaces with independent access control attributes, enabling fine-grained control. Each subspace can be independently configured with different access types, allowing precise control over data access at the desired granularity level.
Solution Approach 2:
The patent creates a universal access control mechanism that handles multiple access types (read-only, read-write, execute) through a unified subspace-level framework. This multi-functional approach provides fine-grained control without requiring separate complex mechanisms for each access type.
Data Source
AI summary
A first node receives an access request from a second node. The access request is used to access a first storage subspace in the first storage space. The first storage subspace is one of the plurality of storage subspaces. The access request includes space access information and a first access type, and the space access information indicates the first storage space and the first storage subspace. The first node controls access of the second node to the first storage subspace based on the space access information and the first access type. Because a granularity of the first storage subspace is smaller than a granularity of the first storage space, access of the second node to the storage space at a smaller granularity can be controlled.