Two-Part Data Storage with Light-Based Access Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing volume of data, especially confidential and personal information, necessitates secure storage solutions that are impervious to cyber threats, particularly in the context of evolving 5G networks and cloud-based storage vulnerabilities.
Innovation Solution
A two-part data storage apparatus with a network-connected front end and a non-volatile memory unit, utilizing light-based communication ports and an optical shutter to isolate data storage from unauthorized access by deactivating communication channels when operations are complete.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If cloud-based data storage is used to accommodate increasing data volumes, then storage capacity and accessibility are improved, but security and vulnerability to cyber threats worsen
Solution Approach 1:
The storage system is divided into two separate parts: a network-accessible front end for data reception and a physically isolated back end containing the non-volatile memory for secure storage. This segmentation allows the system to maintain both accessibility (front end connected to network) and security (back end isolated from network), resolving the contradiction between storage capacity accessibility and data security.
2Speed
If light-based communication ports remain active to enable continuous data access, then communication speed and accessibility are improved, but exposure to unauthorized access and interference worsen
Solution Approach 1:
The light-based communication ports are activated periodically only when data transfer is required and deactivated when not in use. This periodic activation maintains communication capability when needed while minimizing exposure to unauthorized access and radio frequency interference during inactive periods, thus resolving the contradiction between communication speed and security against harmful factors.
Solution Approach 2:
A light-based communication interface acts as an intermediary between the network-connected front end and the isolated back end. This optical intermediary enables high-speed communication while providing galvanic isolation and resistance to radio frequency interference, resolving the contradiction between communication speed and immunity to harmful electromagnetic factors.
3Reliability
If data storage is isolated from network connections to prevent unauthorized access, then security is improved, but accessibility and ease of operation worsen
Solution Approach 1:
The system is segmented into a network-accessible front end that handles all network communications and a physically isolated back end that stores data securely. This segmentation allows the front end to provide ease of operation and accessibility while the back end maintains security through physical isolation, resolving the contradiction between security and ease of operation.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Ensures secure and isolated data storage by preventing unauthorized access through radio interference-resistant light-based communication and mechanical obstruction, enhancing cybersecurity in 5G environments.
Implementation Method 1
communicating, by a first part of an apparatus, with a second part of the apparatus using a first light-based communication port comprised in the first part
Implementation Method 2
deactivating at least one of the first light-based communication port and the second light-based communication port responsive to determining that a read or write operation in the non-volatile memory is complete
Data Source
AI summary
According to an example aspect of the present invention, there is provided an apparatus comprising a first part (110) which comprises a first light-based communication port (114) and a network interface (112), a second part (120) which comprises a non-volatile memory (122) and a second light-based communication port (124), and wherein the apparatus is configured to deactivate at least one of the first light-based communication port (114) and the second light-based communication port (124) responsive to determining that a read or write operation in the non-volatile memory (122) is complete.


