Time-Based Dispersed Storage Access Policy

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data storage systems face challenges with memory device failures, particularly in commercial-grade disc drives, leading to data loss and security issues due to the need for redundant arrays like RAID, which increase maintenance demands and risk of unauthorized access as data is copied across multiple devices.

Innovation Solution

A distributed storage system that uses error-coded data slices stored across multiple physically diverse locations, allowing for reliable and secure data retrieval and integrity verification, with a management unit that oversees data distribution, access policies, and storage integrity processing to ensure data availability and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If redundant arrays like RAID are used to protect against memory device failures, then data reliability is improved, but device complexity and maintenance demands increase

Engineering Contradiction:
Improvedata reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides data into multiple segments and distributes them across different storage locations. Each segment is stored independently, allowing the system to tolerate failures of individual storage devices while maintaining overall data reliability without requiring complex RAID arrays.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary encoding layer that transforms original data into encoded segments before storage. This encoding mechanism provides redundancy and error correction capabilities, improving data reliability while keeping the storage architecture simple and avoiding the complexity of traditional RAID systems.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If data is copied across multiple devices for redundancy, then data reliability is improved, but the risk of unauthorized access increases

Engineering Contradiction:
Improvedata reliabilityVSAvoidunauthorized access risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies different security characteristics to different data segments. Each encoded segment can have its own access controls and security policies, allowing fine-grained security management. This enables the system to maintain data reliability through distribution while controlling unauthorized access risks through localized security measures.

Inventive Principle:
Principle #3Local quality

3Reliability

If multiple disc drives are used to replicate data, then data security is improved, but maintenance demands increase

Engineering Contradiction:
Improvedata securityVSAvoidmaintenance demands
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent implements self-healing capabilities through error-correcting codes and redundancy mechanisms. When data corruption or loss occurs, the system can automatically detect and recover the affected data segments from other stored segments without requiring manual intervention, thereby reducing maintenance demands while maintaining data security.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8990585B2Time based dispersed storage access
Publication Date: 2015.03.24 PURE STORAGE INC
  • US8990585B2 patent drawing
  • US8990585B2 patent drawing
  • US8990585B2 patent drawing

AI summary

A method begins with a processing module receiving a data retrieval request and obtaining a real-time indicator corresponding to when the data retrieval request was received. The method continues with the processing module determining a time-based data access policy based on the data retrieval request and the real-time indicator and accessing a plurality of dispersed storage (DS) units in accordance with the time-based data access policy to retrieve encoded data slices. The method continues with the processing module decoding the threshold number of encoded data slices in accordance with an error coding dispersal storage function when a threshold number of the encoded data slices have been retrieved.