Virtual Machine Disk File Restoration with Self-Service Access Control

Solution Overview

Problem

Current virtual machine backup/restore systems lack user access control, requiring administrator intervention for file restoration, leading to delayed and inefficient file recovery processes due to lack of self-service access rights evaluation.

Innovation Solution

Implementing a method and device that allow virtual machine users to request and access files from a backup disk independently, with identity verification and access control, enabling self-service file browsing and restoration without administrator assistance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If administrator intervention is required for file restoration, then file security and access control are maintained, but restore time and operational efficiency deteriorate

Engineering Contradiction:

Improvefile securityVSAvoidrestore time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary access control evaluation by mounting the backup virtual machine disk and evaluating user access rights to files in advance. This preliminary action stores the evaluation results, so when a restore operation is needed, the access control check has already been completed, eliminating the need for administrator intervention and reducing restore time while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system enables users to perform file restoration independently through automatic access control evaluation. When a user initiates a restore operation, the system automatically evaluates whether the user has access rights to the target files based on pre-stored evaluation results, allowing users to complete restoration without administrator assistance while maintaining security controls.

Inventive Principle:

Principle #25Self-service

2Reliability

If administrator console is used for file restoration, then access control is enforced, but user independence and operational efficiency deteriorate

Engineering Contradiction:

Improveaccess controlVSAvoiduser independence

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary access control evaluation by mounting the backup virtual machine disk and evaluating user access rights to files in advance. This preliminary action stores the evaluation results, so when a restore operation is needed, the access control check has already been completed, eliminating the need for administrator intervention and reducing restore time while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system enables users to perform file restoration independently through automatic access control evaluation. When a user initiates a restore operation, the system automatically evaluates whether the user has access rights to the target files based on pre-stored evaluation results, allowing users to complete restoration without administrator assistance while maintaining security controls.

Inventive Principle:

Principle #25Self-service

3Reliability

If access control list evaluation is performed manually by administrator, then file security is maintained, but productivity and restore scope deteriorate

Engineering Contradiction:

Improvefile securityVSAvoidrestore efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary access control evaluation by mounting the backup virtual machine disk and evaluating user access rights to files in advance. This preliminary action stores the evaluation results, so when a restore operation is needed, the access control check has already been completed, eliminating the need for administrator intervention and reducing restore time while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system enables users to perform file restoration independently through automatic access control evaluation. When a user initiates a restore operation, the system automatically evaluates whether the user has access rights to the target files based on pre-stored evaluation results, allowing users to complete restoration without administrator assistance while maintaining security controls.

Inventive Principle:

Principle #25Self-service

Solution Approach 3:

The system replaces the manual mechanical process of administrator-based access control evaluation with an automated electronic system. The access control evaluation is performed automatically by the system through mounting and evaluating user rights, substituting the manual administrator workflow with an automated process that increases productivity and restore efficiency.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS11620188B2Methods, devices, and a computer readable medium for restoring a file in a virtual machine disk

Publication Date: 2023.04.04 EMC IP HLDG CO LLC

AI summary

Embodiments of the present disclosure relate to methods, devices, and computer readable medium for restoring a file in a virtual machine disk. The method comprises: receiving, from a client, a user's request regarding restoring a file in a virtual machine disk. The method further comprises: determining, based on the request and from a backup disk of the virtual machine disk, files accessible to the user. In addition, the method further comprises providing the client with information related to the files accessible to the user.