会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 31. 发明授权
    • Approach for securing distributed deduplication software
    • 保护分发重复数据删除软件的方法
    • US08453257B2
    • 2013-05-28
    • US12541191
    • 2009-08-14
    • Matthew J. AnglinDavid M. CannonAvishai H. HochbergAlexei KojenovJames P. SmithMark L. Yakushev
    • Matthew J. AnglinDavid M. CannonAvishai H. HochbergAlexei KojenovJames P. SmithMark L. Yakushev
    • H04L29/06
    • G06F11/1453G06F21/55G06F21/64
    • The various embodiments of the present invention include techniques for securing the use of data deduplication activities occurring in a source-deduplicating storage management system. These techniques are intended to prevent fake data backup, target data contamination, and data spoofing attacks initiated by a source. In one embodiment, one technique includes limiting chunk querying to authorized users. Another technique provides detection of attacks and unauthorized access to keys within the target system. Additional techniques include the combination of validating the existence of data from the source by validating the data chunk, validating a data sample of the data chunk, or validating a hash value of the data chunk. A further embodiment involves the use of policies to provide authorization levels for chunk sharing and linking within the target. These techniques separately and in combination provide a comprehensive strategy to avoid unauthorized access to data within the target storage system.
    • 本发明的各种实施例包括用于确保在源 - 重复数据删除存储管理系统中发生的重复数据删除活动的使用的技术。 这些技术旨在防止由源发起的假数据备份,目标数据污染和数据欺骗攻击。 在一个实施例中,一种技术包括限制对授权用户的块查询。 另一种技术提供对目标系统内的攻击和未授权访问密钥的检测。 附加技术包括通过验证数据块来验证来自源的数据的存在,验证数据块的数据样本或验证数据块的哈希值的组合。 进一步的实施例涉及使用策略来为目标内的块共享和链接提供授权级别。 这些技术分开并组合提供了一种全面的策略,以避免未经授权的访问目标存储系统中的数据。
    • 33. 发明授权
    • Securely deleting data in a transactionally consistent manner
    • 以事务一致的方式安全地删除数据
    • US08352448B2
    • 2013-01-08
    • US11626126
    • 2007-01-23
    • Mark A. HayeMatthew J. AnglinDavid M. Cannon
    • Mark A. HayeMatthew J. AnglinDavid M. Cannon
    • G06F17/00
    • G06F11/1448G06F9/466G06F11/1441G06F11/1474G06F21/10G06F21/6218G06F2221/0795G06F2221/2143
    • A process is disclosed by which data is securely deleted in a transactionally consistent manner. This may be accomplished by committing a preparation transaction for a data object within a system managing the data object in order to return the system to an initial condition if necessary, attempting to commit an execution transaction with the data object only after committing the preparation transaction, and securely deleting any portion of the data object necessary to return the system to the initial condition if committing the execution transaction fails and to change the system to a completed condition only if committing the execution transaction succeeds. In a delete or move transaction an existing backup object may be assigned a new logically deleted state such that if the delete or move transaction fails, the data will be made accessible again.
    • 公开了以事务一致的方式安全地删除数据的过程。 这可以通过在管理数据对象的系统内为数据对象提交准备事务来实现,以便如果需要,将系统返回到初始条件,仅在提交准备事务之后试图提交与数据对象的执行事务, 并且如果提交执行事务失败,则安全地删除将系统返回到初始条件所需的数据对象的任何部分,并且只有在提交执行事务成功时才将系统更改为完成条件。 在删除或移动事务中,可以为现有的备份对象分配新的逻辑删除状态,以便如果删除或移动事务失败,则数据将被再次访问。
    • 34. 发明授权
    • Method and system for assuring integrity of deduplicated data
    • 确保重复数据删除数据完整性的方法和系统
    • US08280859B2
    • 2012-10-02
    • US12848486
    • 2010-08-02
    • Matthew J. AnglinDavid M. Cannon
    • Matthew J. AnglinDavid M. Cannon
    • G06F17/30
    • G06F17/30162G06F11/1453
    • The present invention provides for a system and method for assuring integrity of deduplicated data objects stored within a storage system. A data object is copied to secondary storage media, and a digital signature such as a checksum is generated of the data object. Then, deduplication is performed upon the data object and the data object is split into chunks. The chunks are combined when the data object is subsequently accessed, and a signature is generated for the reassembled data object. The reassembled data object is provided if the newly generated signature is identical to the originally generated signature, and otherwise a backup copy of the data object is provided from secondary storage media.
    • 本发明提供了一种确保存储在存储系统内的重复数据删除的数据对象的完整性的系统和方法。 将数据对象复制到辅助存储介质,并且生成诸如校验和的数字签名。 然后,对数据对象执行重复数据删除,数据对象被分割成块。 当随后访问数据对象时,组合块,并为重新组装的数据对象生成签名。 如果新生成的签名与原始生成的签名相同,则提供重组的数据对象,否则从辅助存储介质提供数据对象的备份副本。
    • 35. 发明申请
    • RESTORING A RESTORE SET OF FILES FROM BACKUP OBJECTS STORED IN SEQUENTIAL BACKUP DEVICES
    • 从依序备份设备中存储的备份对象恢复文件的恢复
    • US20120158666A1
    • 2012-06-21
    • US12972291
    • 2010-12-17
    • Matthew J. AnglinDavid M. CannonAvishai H. HochbergDavid G. Van HiseMark L. Yakushev
    • Matthew J. AnglinDavid M. CannonAvishai H. HochbergDavid G. Van HiseMark L. Yakushev
    • G06F17/30
    • G06F11/1469G06F11/1453G06F11/1466
    • Provided are a computer program product, system, and method for restoring a restore set of files from backup objects stored in sequential backup devices. Backup objects are stored in at least one sequential backup device. A client initiates a restore request to restore a restore set of data in a volume as of a restore point-in-time. A determination is made of backup objects stored in at least one sequential backup device including the restore set of data for the restore point-in-time, wherein the determined backup objects are determined from a set of backup objects including a full volume backup and delta backups providing data in the volume at different points-in-time, and wherein extents in different backup objects providing data for blocks in the volume at different points-in-time are not stored contiguously in the sequential backup device. A determination is made of extents stored in the at least one sequential backup device for the determined backup objects. The determined extents are sorted according to an order in which they are stored in the at least one sequential backup device to generate a sort list. The extents are retrieved from the at least one sequential backup device according to the order in the sort list to access the extents sequentially from the sequential backup device in the order in which they were stored. The retrieved extents are returned to the client and the client reconstructs the restore data set from the received extents.
    • 提供了一种计算机程序产品,系统和方法,用于从存储在顺序备份设备中的备份对象恢复恢复文件集。 备份对象存储在至少一个顺序备份设备中。 客户端启动还原请求,以恢复卷中恢复的还原数据集。 确定存储在至少一个顺序备份设备中的备份对象,包括用于恢复时间点的还原数据集,其中所确定的备份对象由一组备份对象确定,包括全卷备份和增量 在不同时间点在卷中提供数据的备份,并且其中不同备份对象中的不同备份对象中的盘区在不同时间点为块中的块提供数据不会连续存储在顺序备份设备中。 确定存储在所确定的备份对象的至少一个顺序备份设备中的范围。 确定的区段根据它们存储在至少一个顺序备份设备中的顺序进行排序以生成排序列表。 根据排序列表中的顺序从至少一个顺序备份设备检索扩展数据块,以顺序备份设备按顺序从存储顺序访问区段。 检索到的盘区返回到客户端,客户机从收到的盘区重构恢复数据集。
    • 36. 发明申请
    • SECURELY DELETING DATA IN A TRANSACTIONALLY CONSISTENT MANNER
    • 安全地删除数据在一个交易一致的人
    • US20080177802A1
    • 2008-07-24
    • US11626126
    • 2007-01-23
    • Mark A. HayeMatthew J. AnglinDavid M. Cannon
    • Mark A. HayeMatthew J. AnglinDavid M. Cannon
    • G06F17/00
    • G06F11/1448G06F9/466G06F11/1441G06F11/1474G06F21/10G06F21/6218G06F2221/0795G06F2221/2143
    • A process is disclosed by which data is securely deleted in a transactionally consistent manner. This may be accomplished by committing a preparation transaction for a data object within a system managing the data object in order to return the system to an initial condition if necessary, attempting to commit an execution transaction with the data object only after committing the preparation transaction, and securely deleting any portion of the data object necessary to return the system to the initial condition if committing the execution transaction fails and to change the system to a completed condition only if committing the execution transaction succeeds. In a delete or move transaction an existing backup object may be assigned a new logically deleted state such that if the delete or move transaction fails, the data will be made accessible again.
    • 公开了以事务一致的方式安全地删除数据的过程。 这可以通过在管理数据对象的系统内为数据对象提交准备事务来实现,以便如果需要,将系统返回到初始条件,仅在提交准备事务之后试图提交与数据对象的执行事务, 并且如果提交执行事务失败,则安全地删除将系统返回到初始条件所需的数据对象的任何部分,并且只有在提交执行事务成功时才将系统更改为完成条件。 在删除或移动事务中,可以为现有的备份对象分配新的逻辑删除状态,以便如果删除或移动事务失败,则数据将被再次访问。
    • 37. 发明申请
    • Deduplication of data object over multiple passes
    • 多遍重复数据对象
    • US20120005171A1
    • 2012-01-05
    • US12830343
    • 2010-07-04
    • Matthew J. AnglinColin S. DawsonHoward N. MartinMichael G. Sisco
    • Matthew J. AnglinColin S. DawsonHoward N. MartinMichael G. Sisco
    • G06F17/30
    • G06F3/0641G06F17/30303
    • In each of a number of passes to deduplicate a data object, a transaction is started. Where an offset into the object has previously been set, the offset is retrieved; otherwise, the offset is set to reference a beginning of the object. A portion of the object beginning at the offset is deduplicated until an end-of-transaction criterion has been satisfied. The transaction is ended to commit deduplication; where the object has not yet been completely deduplicated, the offset is moved just past where deduplication has already occurred. The object is locked during each pass; other processes cannot access the object during each pass, but can access the object between passes. Each pass is relatively short, so the length of time in which the object is inaccessible is relatively short. By comparison, deduplicating an object within a single pass prevents other processes from accessing the object for a longer time.
    • 在对数据对象进行重复数据删除的多个传递中的每一个中,开始事务。 如果先前设置了对象的偏移量,则检索偏移量; 否则,偏移被设置为引用对象的开头。 偏移量开始的对象的一部分被重复数据删除,直到满足事务结束标准为止。 交易结束,以执行重复数据删除; 其中对象尚未完全重复数据删除,偏移量刚刚移动已经发生重复数据删除。 对象在每次通过期间被锁定; 其他进程在每次传递期间都无法访问对象,但可以在通过之间访问对象。 每个通行证相对较短,因此对象无法访问的时间长度相对较短。 相比之下,在单个通过内重复数据删除对象会阻止其他进程访问该对象较长时间。
    • 40. 发明授权
    • Policy based sharing of redundant data across storage pools in a deduplicating system
    • 基于策略的冗余数据在重复数据删除系统中跨存储池共享
    • US08495032B2
    • 2013-07-23
    • US12243743
    • 2008-10-01
    • Matthew J. AnglinDavid M. Cannon
    • Matthew J. AnglinDavid M. Cannon
    • G06F17/00
    • G06F3/0641G06F3/0604G06F3/067G06F11/1453
    • One aspect of the present invention includes enabling data chunks to be shared among different storage pools within a storage management system, according the use of deduplication and storage information kept at the system level, and applied with policy-based rules that define the scope of deduplication. In one embodiment, the parameters of performing deduplication are defined within the policy, particularly which of the plurality of storage pools allow deduplication to which other pools. Accordingly, a data object may be linked to deduplicated data chunks existent within other storage pools, and the transfer of a data object may occur by simply creating references to existing data chunks in other pools provided the policy allows the pool to reference chunks in these other pools. Additionally, a group of storage pools may be defined within the policy to perform a common set of deduplication activities across all pools within the group.
    • 本发明的一个方面包括根据使用在系统级别保存的重复数据删除和存储信息,使数据块在存储管理系统内的不同存储池之间共享,并且应用于定义重复数据删除范围的基于策略的规则 。 在一个实施例中,执行重复数据删除的参数在策略内被定义,特别是多个存储池中的哪一个允许重复数据删除到哪个其他池。 因此,数据对象可以链接到其他存储池中存在的重复数据删除的数据块,并且数据对象的传输可以通过简单地创建对其他池中的现有数据块的引用而发生,只要该策略允许池在其他存储池中引用块 游泳池。 另外,策略内可以定义一组存储池,以便在组内的所有池上执行一组通用的重复数据删除活动。