专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08601108B1 Credential authentication and authorization in a server device 有权
标题翻译：服务器设备中的身份验证和授权
公开(公告)号：US08601108B1
公开(公告)日：2013-12-03
申请号：US13172157
申请日：2011-06-29
申请人： Tianming Zhang , Gregory W. Lazar , Anthony Arous , Purushottam B. Sane , Weijing Song , James Huang , Keith V. Boland , Seth B. Horan
发明人： Tianming Zhang , Gregory W. Lazar , Anthony Arous , Purushottam B. Sane , Weijing Song , James Huang , Keith V. Boland , Seth B. Horan
IPC分类号： G06F15/173
CPC分类号： H04L63/083
摘要： A server device is configured to perform a method for providing object class information to a management device. The method includes mapping user names included as part of entries of a database associated with the server device to a corresponding Common Information Model (CIM) object manager operating system (OS) role. The method includes receiving a management request associated with the management device, the management request having management request credential information. The method includes authenticating the management request to an operating system associated with the server device based upon the management request credential information. The method includes following authentication, authorizing the management device to a corresponding CIM object manager OS role using the management request credential information. The method includes executing a CIM object call associated with the management request using the associated CIM object manager OS role to access object class information in response to the management request.
摘要翻译：服务器设备被配置为执行向管理设备提供对象类信息的方法。该方法包括将与服务器设备相关联的数据库的条目的一部分包括的用户名映射到相应的公共信息模型（CIM）对象管理器操作系统（OS）角色。该方法包括接收与管理设备相关联的管理请求，该管理请求具有管理请求凭证信息。该方法包括基于管理请求凭证信息向与服务器设备相关联的操作系统认证管理请求。该方法包括以下认证，使用管理请求凭证信息将管理设备授权给相应的CIM对象管理器OS角色。该方法包括使用相关联的CIM对象管理器OS角色执行与管理请求相关联的CIM对象调用以响应于管理请求来访问对象类信息。

2. 发明授权

US08635707B1 Managing object access 有权
标题翻译：管理对象访问
公开(公告)号：US08635707B1
公开(公告)日：2014-01-21
申请号：US12893347
申请日：2010-09-29
申请人： Mark A. Parenti , Stephen J. Todd , Gregory W. Lazar , Millard C. Taylor, II
发明人： Mark A. Parenti , Stephen J. Todd , Gregory W. Lazar , Millard C. Taylor, II
IPC分类号： G06F21/00
CPC分类号： G06F21/6218 , G06F2221/2113
摘要： A method for use in managing object access is disclosed. A request is received at a reference monitor, wherein the request comprises an object type, an action associated with the object, credentials associated with a user, and access information. Template information is received at the reference monitor, wherein the template information specifies allowable access for the object using qualifiers for the object. For the user, determining at a management request engine whether to allow the action associated with the object based on the request and the template. Also disclosed is a system for use in managing object access.
摘要翻译：公开了一种用于管理对象访问的方法。在参考监视器处接收到请求，其中所述请求包括对象类型，与对象相关联的动作，与用户相关联的凭证以及访问信息。在参考监视器处接收模板信息，其中模板信息使用对象的限定符指定对象的允许访问。对于用户，在管理请求引擎处确定是否基于请求和模板来允许与对象相关联的动作。还公开了一种用于管理对象访问的系统。

3. 发明授权

US08621178B1 Techniques for data storage array virtualization 有权
标题翻译：数据存储阵列虚拟化技术
公开(公告)号：US08621178B1
公开(公告)日：2013-12-31
申请号：US13200288
申请日：2011-09-22
申请人： Gregory W. Lazar
发明人： Gregory W. Lazar
IPC分类号： G06F12/00
CPC分类号： G06F12/0223 , G06F3/0605 , G06F3/0631 , G06F3/067 , G06F3/0689
摘要： Described are techniques for performing data storage system management. The data storage system is divided into a plurality of virtual partitions. A plurality of policy sets are specified where each of the policy sets includes one or more policies. One of the plurality of policy sets is assigned to each of the plurality of virtual partitions. Each of the plurality of policy sets includes an access control policy that assigns a portion of data storage of the data storage system as a resource for exclusive use in one of the plurality of virtual partitions that is assigned said each policy set.
摘要翻译：描述了执行数据存储系统管理的技术。数据存储系统被分成多个虚拟分区。指定多个策略集，其中每个策略集包括一个或多个策略。多个策略集中的一个被分配给多个虚拟分区中的每一个。多个策略集合中的每一个包括访问控制策略，其将数据存储系统的数据存储的一部分分配为被分配给每个策略集的多个虚拟分区之一的专用资源。

4. 发明授权

US07054910B1 Data replication facility for distributed computing environments 有权
公开(公告)号：US07054910B1
公开(公告)日：2006-05-30
申请号：US10027694
申请日：2001-12-20
申请人： Richard J. Nordin , Andreas L. Bauer , Sriram Krishnan , Gregory W. Lazar
发明人： Richard J. Nordin , Andreas L. Bauer , Sriram Krishnan , Gregory W. Lazar
IPC分类号： G06F15/16 , G06F12/00 , G06F11/00
CPC分类号： G06F17/30194 , G06F11/1435 , G06F11/2094 , G06F11/2097 , H04L29/12132 , H04L61/1552 , H04L67/1095 , Y10S707/99953 , Y10S707/99955
摘要： A data replication facility for distributed computing environments. A computer network having a plurality of network nodes utilizes a distributed directory provider service (DPS) having an established master node. The DPS supports a file replication service (FRS). The FRS establishes one of the nodes as originator node which receives new or updated files from one or more user/GUIs and/or from one or more software providers such as a security provider. The originator node in cooperation with the master node establish a backup copy of the new or updated file in the master node. Thereafter, the originator node publishes a File Version Variable (FVV) representation of the new or updated file to other network nodes (slave nodes) which obtain such file from the originator or, if need be, from the backup master node. Object observers are utilized to determine changes to the file version variables thereby triggering the downloading of new or updated files into the network nodes, whereby data file replication is accomplished throughout the network. In addition to avoiding a single point of failure, embodiments of the present invention also are network-topology independent. Additional syncing threads are employed as part of the file replication service to further ensure synchronization of the network nodes' data files within a predetermined interval, regardless of network failure modes. Embodiments of the present invention are particularly useful with networks of the client-server storage network variety.

5. 发明授权

US09026667B1 Techniques for resource validation 有权
标题翻译：技术资源验证
公开(公告)号：US09026667B1
公开(公告)日：2015-05-05
申请号：US13429919
申请日：2012-03-26
申请人： Scott E. Joyce , Gregory W. Lazar , Donald Labaj
发明人： Scott E. Joyce , Gregory W. Lazar , Donald Labaj
IPC分类号： G06F15/173 , G06F11/00 , H04L29/06
CPC分类号： H04L29/06857 , G06F21/50 , H04L63/1483
摘要： Described are techniques for validating a resource. A hierarchy of objects is received. The hierarchy includes first and second objects at, respectively, first and second levels of the hierarchy. The second object is a child of the first object. The first object is a parent of the second object and represents a first resource embedding a second resource represented by the second object. Each of the objects in the hierarchy identifies a resource that is automatically retrieved in connection with rendering a webpage. A first server location providing the first resource is determined using the first object. A second server location providing the second resource is determined using the second object. In accordance with trusted location criteria, it is determined whether the first resource is allowed to embed the second resource.
摘要翻译：描述了用于验证资源的技术。接收对象的层次结构。层次结构包括分别在层次结构的第一级和第二级的第一和第二对象。第二个对象是第一个对象的子对象。第一对象是第二对象的父对象，并且表示嵌入由第二对象表示的第二资源的第一资源。层级中的每个对象标识与呈现网页一起自动检索的资源。使用第一对象确定提供第一资源的第一服务器位置。使用第二对象来确定提供第二资源的第二服务器位置。根据可信位置标准，确定是否允许第一资源嵌入第二资源。

6. 发明授权

US08555342B1 Providing secure access to a set of credentials within a data security mechanism of a data storage system 有权
标题翻译：提供对数据存储系统的数据安全机制内的一组凭证的安全访问
公开(公告)号：US08555342B1
公开(公告)日：2013-10-08
申请号：US12645857
申请日：2009-12-23
申请人： Gregory W. Lazar , Greg Mogavero , Michael Hamel , Yidong Wang , Prakash Chanderia , Feng Zhou , Ashwin Ramkrishna Tidke
发明人： Gregory W. Lazar , Greg Mogavero , Michael Hamel , Yidong Wang , Prakash Chanderia , Feng Zhou , Ashwin Ramkrishna Tidke
IPC分类号： G06F12/14 , G06F7/04 , G06F15/16 , G06F21/31 , H04L29/06
CPC分类号： G06F21/31 , G06F21/44 , H04L63/083 , H04L63/0876
摘要： A technique provides secure access to a set of credentials within a data storage system. The technique involves obtaining a unique identifier (e.g., a hostname which is unique to the system) and a set of stable values (e.g., machine-generated codes which are random to users of the system); and, in response to a storage request from a client application, storing a set of credentials of the client application within a data security mechanism of the data storage system. The set of credentials is in encrypted form when stored within the data security mechanism of the data storage system. The technique further involves configuring the data security mechanism of the data storage system to provide the set of credentials in non-encrypted form in response to new fingerprints matching a system fingerprint which is formed at least in part from the unique identifier and the set of stable values.
摘要翻译：一种技术提供对数据存储系统内的一组凭证的安全访问。该技术包括获得唯一的标识符（例如，系统唯一的主机名）和一组稳定的值（例如，对于系统的用户而言是随机的机器生成的代码）; 以及响应于来自客户端应用的存储请求，将所述客户端应用的一组凭证存储在所述数据存储系统的数据安全机制内。当存储在数据存储系统的数据安全机制内时，该凭证集是加密形式。该技术还涉及配置数据存储系统的数据安全机制，以响应于至少部分地根据唯一标识符和一组稳定形成的系统指纹匹配的新指纹来提供非加密形式的凭证集合价值观。

7. 发明授权

US07730180B1 Resolving multiple master node conflict in a DDB 有权
标题翻译：解决DDB中的多个主节点冲突
公开(公告)号：US07730180B1
公开(公告)日：2010-06-01
申请号：US11880325
申请日：2007-07-20
申请人： Sriram Krishnan , Gregory W. Lazar
发明人： Sriram Krishnan , Gregory W. Lazar
IPC分类号： G06F15/173
CPC分类号： G06F17/30575
摘要： In a multinode computer network, a directory database (DDB) in each of the nodes, contents of the DDB being replicated throughout the network through use of one of its nodes having been appointed as master node. The master node updates each DDB in each node in its network or domain configuration when the configuration changes. A global administrator has authority to replace or select a master node and to configure a domain, and performs these and other functions by way of computer terminal screen dialogs offered by a graphical user interface (GUI) associated with the computer network. In the case of multiple master nodes attempting to be master for the same nodes in the same network at the same time, this conflict is resolved in one embodiment of the present invention by allowing the most recently selected purported master node to be the actual master node. After resolution of this conflict the result is communicated by the prevailing master node to all nodes in the network. This resolution takes into account a global network with varying time zones, and further takes into account the remote possibility of a simultaneous appointment of two masters.
摘要翻译：在多节点计算机网络中，每个节点中的目录数据库（DDB），DDB的内容通过使用其节点中的一个被指定为主节点而在整个网络中复制。主节点在配置更改时更新其网络或域配置中每个节点中的每个DDB。全局管理员有权替换或选择主节点并配置域，并通过与计算机网络相关联的图形用户界面（GUI）提供的计算机终端屏幕对话来执行这些和其他功能。在多个主节点同时尝试对相同网络中的相同节点进行主机的情况下，通过允许最近选择的所声称的主节点是实际主节点来解决本发明的一个实施例中的这种冲突。解决此冲突后，结果将由主节点传送到网络中的所有节点。该决议考虑到具有不同时区的全球网络，并进一步考虑到同时预约两位主人的远程可能性。

8. 发明授权

US07664125B1 Indication forwarding in a distributed environment 有权
标题翻译：指示在分布式环境中转发
公开(公告)号：US07664125B1
公开(公告)日：2010-02-16
申请号：US11324740
申请日：2006-01-03
申请人： Andreas L. Bauer , Gregory W. Lazar , Ram Kailasanathan
发明人： Andreas L. Bauer , Gregory W. Lazar , Ram Kailasanathan
IPC分类号： H04L12/24
CPC分类号： H04L41/0668 , H04L41/0233 , H04L41/0813 , H04L43/10 , H04L67/16
摘要： Described are techniques for performing indication forwarding. At an indication consolidator, a request is received from a client to receive indications about a plurality of nodes in accordance with first filter information. A communication structure for forwarding indications is determined. Subscription requests including said first filter information are forwarded from said indication consolidator to others of said plurality of nodes to establish communication connections between said plurality of nodes in accordance with said communication structure. Indications fired from any of said plurality of nodes in accordance with said first filter information are forwarded to said indication consolidator node in accordance with said communication structure. The client is notified of any indications received at said indication consolidator node in accordance with said first filter information.
摘要翻译：描述了用于执行指示转发的技术。在指示整合器处，根据第一过滤器信息，从客户端接收请求以接收关于多个节点的指示。确定用于转发指示的通信结构。包括所述第一过滤器信息的订阅请求从所述指示整合器转发到所述多个节点中的其他节点，以根据所述通信结构在所述多个节点之间建立通信连接。根据所述第一滤波器信息从所述多个节点中的任一个发射的指示根据所述通信结构转发到所述指示整合器节点。根据所述第一过滤器信息，向客户端通知在所述指示整合器节点处接收的任何指示。

9. 发明授权

US07076691B1 Robust indication processing failure mode handling 有权
标题翻译：强大的指示处理故障模式处理
公开(公告)号：US07076691B1
公开(公告)日：2006-07-11
申请号：US10242521
申请日：2002-09-12
申请人： Walter T. Dobberpuhl , Brian R. Gruttadauria , Munish T. Desai , Gregory W. Lazar , Andreas L. Bauer
发明人： Walter T. Dobberpuhl , Brian R. Gruttadauria , Munish T. Desai , Gregory W. Lazar , Andreas L. Bauer
IPC分类号： G06F11/00
CPC分类号： G06F11/2028 , G06F11/2025 , G06F11/2033
摘要： A technique for handling failure modes which may occur during the processing of indications. In a client-server environment such as a client-server network used in computer data storage running object-oriented software, the client may subscribe for certain indications on certain objects in the servers. When the state of any of those certain objects change, an indication is fired back to the client to indicate a state change. Failures in the client, server, or connection therebetween reduce the effectiveness of this state-change notification scheme. The present invention mitigates the impact of such failures, employing a technique by which a failed storage processor in a server can failover to another storage processor in the same server to enable the seamless transition of the processing of such indications to the other processor without stopping and by which the server can destroy any of its resources that were dedicated to the processing of indications for a specific client if and when such client fails.
摘要翻译：用于处理在处理指示期间可能发生的故障模式的技术。在客户端 - 服务器环境中，例如运行面向对象软件的计算机数据存储中使用的客户端 - 服务器网络，客户端可以订阅服务器中某些对象上的某些指示。当任何这些某些对象的状态发生变化时，向客户端发出指示以指示状态改变。客户端，服务器或连接中的故障会降低此状态更改通知方案的有效性。本发明通过使用服务器中的故障存储处理器可以故障切换到同一服务器中的另一个存储处理器的技术来减轻这种故障的影响，以使这种指示的处理无缝地转移到另一个处理器而不停止，由此，如果客户端出现故障，服务器可以销毁其专用于处理特定客户端的指示的资源。

10. 发明授权

US06971090B1 Common Information Model (CIM) translation to and from Windows Management Interface (WMI) in client server environment 有权
标题翻译：公共信息模型（CIM）在客户端服务器环境中从Windows管理界面（WMI）转换
公开(公告)号：US06971090B1
公开(公告)日：2005-11-29
申请号：US09877287
申请日：2001-06-08
申请人： Brian R. Gruttadauria , Andreas L. Bauer , Gregory W. Lazar , Munish T. Desai
发明人： Brian R. Gruttadauria , Andreas L. Bauer , Gregory W. Lazar , Munish T. Desai
IPC分类号： G06F9/45 , G06F9/46 , H04L29/08
CPC分类号： H04L67/1097 , G06F9/54
摘要： A protocol translator for use in a storage system or storage area network for translating between incompatible communication protocols. Apparatus, methodology, computer program product and interface embodiments are disclosed, and code examples are provided, for translating between Common Information Model/eXtensible Markup Language/Hyper Text Transfer Protocol (CIM/XML/HTTP) and Windows Management Interface/Distributed Component Object Model (WMI/DCOM) communication protocols for distributed management software used within a storage system or storage area network in a client server environment.
摘要翻译：用于存储系统或存储区域网络中用于在不兼容的通信协议之间进行转换的协议转换器。公开了装置，方法，计算机程序产品和接口实施例，并且提供了代码示例，用于在公共信息模型/可扩展标记语言/超文本传输协议（CIM / XML / HTTP）和Windows管理接口/分布式组件对象模型（WMI / DCOM）通信协议，用于在客户端服务器环境中的存储系统或存储区域网络内使用的分布式管理软件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式