Two-Step Data Deletion with Confirmation Hold
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems in enterprises face challenges in ensuring data integrity and preventing accidental deletion, as data is often inadvertently deleted without proper confirmation, leading to potential loss and increased costs due to missed revenue opportunities and operational downtime.
Innovation Solution
A two-step data deletion process involving immediate encryption of data upon a deletion request, followed by a confirmation stage using asymmetric cryptography to verify the deletion decision against predetermined criteria, allowing for temporary hold and potential restoration if the deletion is found to be incorrect.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is immediately deleted from storage systems, then storage space is freed up, but data may be inadvertently deleted by mistake leading to permanent loss
Solution Approach 1:
The deletion process is segmented into two distinct phases: (1) marking data for deletion while retaining it in storage, and (2) confirming deletion after verification. This segmentation allows the system to free up logical access to data immediately while maintaining physical retention during the confirmation period, thus resolving the contradiction between storage space availability and data integrity.
Solution Approach 2:
The system performs preliminary actions by marking data for deletion and implementing access restrictions before final deletion occurs. During the confirmation hold period, the data is prepared for deletion but not yet permanently removed, allowing verification while effectively freeing up storage space for new data.
2Reliability
If data is retained temporarily after deletion decision, then data can be restored if needed, but storage space remains occupied
Solution Approach 1:
The system applies different quality states to data based on its deletion status. Data marked for deletion enters a special state where it is retained in storage but has restricted access properties. This local quality differentiation allows the system to maintain data recoverability for marked data while effectively managing storage space by preventing new data from being allocated to the same space.
3Reliability
If access to data is prevented immediately upon deletion request, then inadvertent use is avoided, but data restoration becomes difficult if deletion decision is incorrect
Solution Approach 1:
The access control mechanism is dynamic rather than static. When data is marked for deletion, access restrictions are applied dynamically during the confirmation hold period. If deletion is confirmed, permanent access control is implemented. If deletion is revoked, the access restrictions are dynamically removed and data restoration is enabled. This dynamic approach allows the system to maintain strict access control while preserving restoration capability.
Data Source
AI summary
A data management process in a storage system comprises a two-step deletion process with a confirmation hold. Data identified in a service request for deletion is encrypted using a one-time use public key to render the data inaccessible to users and system processes. The data is decrypted using a corresponding private key and verified that the data corresponds to the data and is quarantined to prevent access by changing permissions. The quarantined data is further analyzed using a set of criteria that to determine whether access to the data by system users or process is still needed. If not, the data is permanently deleted by securely deleting the encryption and decryption keys.