Two-Part Data Storage with Light-Based Access Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing volume of data, especially confidential and personal information, necessitates secure storage solutions that are impervious to cyber threats, particularly in the context of evolving 5G networks and cloud-based storage vulnerabilities.

Innovation Solution

A two-part data storage apparatus with a network-connected front end and a non-volatile memory unit, utilizing light-based communication ports and an optical shutter to isolate data storage from unauthorized access by deactivating communication channels when operations are complete.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If cloud-based data storage is used to accommodate increasing data volumes, then storage capacity and accessibility are improved, but security and vulnerability to cyber threats worsen

Engineering Contradiction:
Improvedata storage capacityVSAvoiddata security
Core Design Contradiction:
Quantity of substanceVSReliability

Solution Approach 1:

The storage system is divided into two separate parts: a network-accessible front end for data reception and a physically isolated back end containing the non-volatile memory for secure storage. This segmentation allows the system to maintain both accessibility (front end connected to network) and security (back end isolated from network), resolving the contradiction between storage capacity accessibility and data security.

Inventive Principle:
Principle #1Segmentation

2Speed

If light-based communication ports remain active to enable continuous data access, then communication speed and accessibility are improved, but exposure to unauthorized access and interference worsen

Engineering Contradiction:
Improvecommunication speedVSAvoidunauthorized access and radio interference
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The light-based communication ports are activated periodically only when data transfer is required and deactivated when not in use. This periodic activation maintains communication capability when needed while minimizing exposure to unauthorized access and radio frequency interference during inactive periods, thus resolving the contradiction between communication speed and security against harmful factors.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

A light-based communication interface acts as an intermediary between the network-connected front end and the isolated back end. This optical intermediary enables high-speed communication while providing galvanic isolation and resistance to radio frequency interference, resolving the contradiction between communication speed and immunity to harmful electromagnetic factors.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If data storage is isolated from network connections to prevent unauthorized access, then security is improved, but accessibility and ease of operation worsen

Engineering Contradiction:
Improvedata securityVSAvoiddata accessibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system is segmented into a network-accessible front end that handles all network communications and a physically isolated back end that stores data securely. This segmentation allows the front end to provide ease of operation and accessibility while the back end maintains security through physical isolation, resolving the contradiction between security and ease of operation.

Inventive Principle:
Principle #1Segmentation

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Ensures secure and isolated data storage by preventing unauthorized access through radio interference-resistant light-based communication and mechanical obstruction, enhancing cybersecurity in 5G environments.

Implementation Method 1

communicating, by a first part of an apparatus, with a second part of the apparatus using a first light-based communication port comprised in the first part

Methodology Applied
Scientific EffectLight-based communication: Light

Implementation Method 2

deactivating at least one of the first light-based communication port and the second light-based communication port responsive to determining that a read or write operation in the non-volatile memory is complete

Methodology Applied
Scientific EffectMechanical obstruction of light: Physical Containment

Data Source

PatentUS12425451B2Data storage
Publication Date: 2025.09.23 NOKIA TECHNOLOGIES OY
  • US12425451B2 patent drawing
  • US12425451B2 patent drawing
  • US12425451B2 patent drawing

AI summary

According to an example aspect of the present invention, there is provided an apparatus comprising a first part (110) which comprises a first light-based communication port (114) and a network interface (112), a second part (120) which comprises a non-volatile memory (122) and a second light-based communication port (124), and wherein the apparatus is configured to deactivate at least one of the first light-based communication port (114) and the second light-based communication port (124) responsive to determining that a read or write operation in the non-volatile memory (122) is complete.