Value-Based Air Gap Control for Dynamic Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods using air gaps in vaults rely on simple time policies that do not consider the value of the data, leading to inadequate protection strategies.
Innovation Solution
Implement a mechanism that determines when to open or close an air gap based on the value of the data stored in the vault, using relative or absolute valuation methods to define air gap control policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If a time policy is used to control air gap operation, then the policy is easy to define and implement, but the protection strategy does not account for data attributes and value
Solution Approach 1:
The patent changes the control parameter from fixed time-based policies to dynamic value-based policies. The air gap control system now evaluates data value parameters (monetary value, sensitivity, regulatory requirements) and adjusts air gap status accordingly, allowing the same system to adapt to different data types and protection needs without requiring separate policies for each scenario.
2Reliability
If the air gap is opened to protect high-value data, then data protection is improved, but access to lower-value data is unnecessarily restricted
Solution Approach 1:
The patent applies local quality by differentiating air gap control on a per-data-set basis rather than applying a uniform policy to all data. The system evaluates each data set's value and applies appropriate protection levels locally, allowing high-value data to be protected with open air gaps when necessary while lower-value data remains accessible without unnecessary restrictions.
Solution Approach 2:
The patent segments the data storage environment into multiple vaults with different air gap policies based on data value. High-value data is placed in vaults where air gaps are opened selectively based on value thresholds, while lower-value data resides in vaults with different protection levels, allowing differentiated access control without compromising overall security.
3Ease of operation
If the air gap remains closed for easy data access, then operational convenience is improved, but high-value data is vulnerable to external threats
Solution Approach 1:
The patent implements dynamic air gap control that automatically adjusts between closed and open states based on real-time evaluation of data value and threat conditions. The system transitions from static closed or open states to dynamic states that adapt to current operational needs and data value assessments, opening the air gap only when high-value data requires protection and closing it when accessibility is the priority.
Data Source
AI summary
One example method includes defining an airgap control policy that specifies a threshold data value, generating a value for a set of data, determining whether the value that has been generated for the data meets or exceeds the threshold data value, and opening the air gap when the value that has been generated for the data meets or exceeds the threshold data value. The airgap is closed automatically when the value that has been generated for the data meets or exceeds the threshold data value.