Storage System Offline Data Protection via Volume Locking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection solutions for storage systems are ineffective when the host computer is offline or shut down, leaving logical volumes exposed to threats and lacking mechanisms for detecting unauthorized access.
Innovation Solution
A method and system that lock assigned logical volumes when the host computer goes offline, record access history, and perform integrity checks upon resuming operation, using a storage system with a security module to store access information and hash values to detect security breaches.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If host-based security applications are used to protect data, then data protection is provided during host operation, but data protection is lost when host computer is offline or shut down
Solution Approach 1:
The storage system acts as an intermediary between the host computer and the data, providing security functions independently. When the host is offline, the storage system continues to monitor access attempts, lock volumes, and detect unauthorized operations, thereby maintaining data protection without requiring the host to be online.
Solution Approach 2:
The storage system performs security functions autonomously without continuous host intervention. It automatically locks volumes when host goes offline, monitors access history, detects unauthorized operations, and maintains security state independently, enabling self-service security operation during host downtime.
2Reliability
If volume locking is implemented to protect data during host offline, then data security is improved, but access performance and availability may be affected
Solution Approach 1:
The volume locking mechanism is dynamic rather than static. The storage system automatically adjusts the locking state based on host availability - locking volumes when host is offline to provide security, and unlocking when host comes online to restore access. This dynamic behavior resolves the contradiction between security and availability.
Solution Approach 2:
The system implements feedback mechanisms to monitor host status and volume access patterns. Based on this feedback, the storage system automatically adjusts locking states and access permissions, ensuring that security is applied only when necessary while maintaining availability when the host is operational.
3Difficulty of detecting and measuring
If access history monitoring is performed to detect unauthorized access, then security detection capability is improved, but system complexity and overhead increase
Solution Approach 1:
The security monitoring function is extracted from the host computer and placed in the storage system. The storage system independently tracks access history, monitors for unauthorized operations, and maintains security logs, thereby simplifying the overall system architecture by removing the need for complex host-based monitoring during offline periods.
Data Source
AI summary
Protection mechanism is provided for data stored in logical volumes, especially during the time the corresponding host computer is off line. Additionally, integrity check mechanism is provided for logical volume when the host computer is started, so that host computer can detect unauthorized access to its assigned logical volume during off-line period, and execute security check.