Per-File WORM Storage via File System Extended Attributes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage systems that provide write-once-read-many (WORM) access rely on underlying storage systems for security, increasing the risk of malware attacks that can modify or delete files, necessitating improved systems and methods for secure WORM storage.
Innovation Solution
Implementing a method and system that allows for the assignment of a WORM attribute to files, setting a WORM flag with a retention period, and enforcing read-only access until the retention period expires, while supporting additional attributes like append-only, auto-delete, and immutability to enhance security and protect against malware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the underlying storage system is relied upon to provide security for files in read-only mode, then the storage system can maintain files until retention period expires, but the risk of malware attack that can modify and/or delete files increases
Solution Approach 1:
The patent segments the WORM enforcement into multiple independent components: application-level WORM attribute assignment, file system-level WORM flag setting, and storage system-level retention period enforcement. This segmentation isolates the security-critical functions from the vulnerable underlying storage system, allowing each layer to enforce its own security policies independently.
Solution Approach 2:
The patent applies preliminary action by assigning WORM attributes to files at the application layer before the files are written to storage. The WORM flag is set in advance, and the retention period is established prior to storage operations, preventing malware from modifying files during their lifecycle.
Solution Approach 3:
The patent introduces an intermediary file system layer that mediates between the application and the underlying storage system. This file system layer enforces WORM policies by setting WORM flags and managing retention periods, acting as a security buffer that protects files from malware attacks on the storage system while maintaining compatibility with storage operations.
2Object-affected harmful factors
If WORM attribute is assigned to files with retention period and read-only access enforcement, then malware protection is improved, but the system complexity increases due to multiple attributes and enforcement mechanisms
Solution Approach 1:
The patent implements universality by creating a unified WORM attribute system that combines multiple security functions into a single file attribute mechanism. The WORM flag serves multiple purposes: enforcing read-only access, managing retention periods, and coordinating with append-only and secure deletion attributes, thereby reducing overall system complexity through consolidation.
Solution Approach 2:
The patent applies self-service by enabling the file system and storage system to automatically enforce WORM policies without requiring continuous external intervention. Once WORM attributes are assigned and retention periods are set, the system autonomously maintains read-only access control and enforces automatic deletion when retention periods expire, reducing operational complexity.
3Reliability
If per-file WORM access control is implemented with multiple attributes (append-only, auto-delete, immutability), then asset security for sensitive data is enhanced, but the ease of operation decreases due to additional configuration requirements
Solution Approach 1:
The patent applies local quality by allowing different WORM-related attributes to be assigned to individual files or directories based on specific security requirements. Applications can selectively enable append-only, auto-delete, or immutability attributes on a per-file basis, allowing fine-grained security control tailored to local needs without requiring complex global configuration.
Solution Approach 2:
The patent simplifies operation by providing template WORM attribute configurations that can be copied and applied to multiple files or directories. Standard retention period templates and attribute combinations can be replicated across different data sets, reducing the configuration effort required for consistent security policies while maintaining asset security.
Data Source
AI summary
The disclosed computer-implemented method for write-once-read-many storage may include (1) receiving, at a file system on the computing device, a request to assign a write-once-read-many (WORM) attribute to a file, wherein the request is received from an application, (2) setting, in response to the request to assign the WORM attribute to the file, a WORM flag in an extended attribute associated with the file, and (3) associating with the file, in response to the setting of the WORM flag, a retention period attribute and read-only access until the end of the retention period. The provided systems and methods may provide per-file WORM support at a file system level using extended attributes of the file system. Various other methods, systems, and computer-readable media are also disclosed.