专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US08205090B2 Secure recovery in a serverless distributed file system 有权
标题翻译：在无服务器分布式文件系统中安全恢复
公开(公告)号：US08205090B2
公开(公告)日：2012-06-19
申请号：US12235343
申请日：2008-09-22
申请人： Miguel Oom Temudo de Castro , Atul Adya , John R. Douceur , William J. Bolosky
发明人： Miguel Oom Temudo de Castro , Atul Adya , John R. Douceur , William J. Bolosky
IPC分类号： H04L9/00
CPC分类号： H04L63/0435 , G06F17/30194 , G06F21/40 , G06F21/62 , G06F2221/2101 , H04L9/3236 , H04L9/3247 , H04L9/3255 , H04L63/0442 , H04L63/0823
摘要： Systems and methods for secure file writes after a catastrophic event are allowed over an unauthenticated channel in a serverless distributed file system if an authenticator accompanies the secure file writes. The authenticator can be a power-of-attorney certificate with time limitations, a vector of message authenticated code, or a single message authenticator with secured with a secret shared among members of the serverless distributed file system. The serverless distributed file system includes at least 3f+1 participating computer members, with f representing a number of faults tolerable by the system. The group requires at least one authenticator for file creation and file uploads. Any changes to files stored among the members can be made over an unauthenticated channel if the file changes are secured by the authenticator and the group is able to verify the authenticator.
摘要翻译：如果认证者伴随着安全文件写入，则在无故障分布式文件系统中，通过未经身份验证的通道允许灾难性事件之后的安全文件写入的系统和方法。验证器可以是具有时间限制的授权证书，消息认证代码的向量，或者具有在无服务器分布式文件系统的成员之间共享的秘密的单个消息认证器。无服务器分布式文件系统至少包括3f + 1个参与的计算机成员，其中f表示系统可容忍的许多故障。该组至少需要一个身份验证器用于文件创建和文件上传。如果文件更改由验证者保护，并且该组能够验证验证器，则可以通过未经身份验证的通道对存储在成员中的文件进行任何更改。

2. 发明授权

US07428751B2 Secure recovery in a serverless distributed file system 有权
标题翻译：在无服务器分布式文件系统中安全恢复
公开(公告)号：US07428751B2
公开(公告)日：2008-09-23
申请号：US10310440
申请日：2002-12-05
申请人： Miguel Oom Temudo de Castro , Atul Adya , John R. Douceur , William J. Bolosky
发明人： Miguel Oom Temudo de Castro , Atul Adya , John R. Douceur , William J. Bolosky
IPC分类号： H04L29/00 , G06F21/00
CPC分类号： H04L63/0435 , G06F17/30194 , G06F21/40 , G06F21/62 , G06F2221/2101 , H04L9/3236 , H04L9/3247 , H04L9/3255 , H04L63/0442 , H04L63/0823
摘要： Systems and methods for secure file writes after a catastrophic event are allowed over an unauthenticated channel in a serverless distributed file system if an authenticator accompanies the secure file writes. The authenticator can be a power-of-attorney certificate with time limitations, a vector of message authenticated code, or a single message authenticator with secured with a secret shared among members of the serverless distributed file system. The serverless distributed file system includes at least 3f+1 participating computer members, with f representing a number of faults tolerable by the system. The group requires at least one authenticator for file creation and file uploads. Any changes to files stored among the members can be made over an unauthenticated channel if the file changes are secured by the authenticator and the group is able to verify the authenticator.
摘要翻译：如果认证者伴随着安全文件写入，则在无故障分布式文件系统中，通过未经身份验证的通道允许灾难性事件之后的安全文件写入的系统和方法。验证器可以是具有时间限制的授权证书，消息认证代码的向量，或者具有在无服务器分布式文件系统的成员之间共享的秘密的单个消息认证器。无服务器分布式文件系统至少包括3f + 1个参与的计算机成员，其中f表示系统可容忍的许多故障。该组至少需要一个身份验证器用于文件创建和文件上传。如果文件更改由验证者保护，并且该组能够验证验证器，则可以通过未经身份验证的通道对存储在成员中的文件进行任何更改。

3. 发明申请

US20090019288A1 SECURE RECOVERY IN A SERVERLESS DISTRIBUTED FILE SYSTEM 有权
标题翻译：在无刷分布式文件系统中的安全恢复
公开(公告)号：US20090019288A1
公开(公告)日：2009-01-15
申请号：US12235343
申请日：2008-09-22
申请人： Miguel Oom Temudo de Castro , Atul Adya , John R. Douceur , William J. Bolosky
发明人： Miguel Oom Temudo de Castro , Atul Adya , John R. Douceur , William J. Bolosky
IPC分类号： H04L29/00 , G06F21/00
CPC分类号： H04L63/0435 , G06F17/30194 , G06F21/40 , G06F21/62 , G06F2221/2101 , H04L9/3236 , H04L9/3247 , H04L9/3255 , H04L63/0442 , H04L63/0823
摘要： Systems and methods for secure file writes after a catastrophic event are allowed over an unauthenticated channel in a serverless distributed file system if an authenticator accompanies the secure file writes. The authenticator can be a power-of-attorney certificate with time limitations, a vector of message authenticated code, or a single message authenticator with secured with a secret shared among members of the serverless distributed file system. The serverless distributed file system includes at least 3f+1 participating computer members, with f representing a number of faults tolerable by the system. The group requires at least one authenticator for file creation and file uploads. Any changes to files stored among the members can be made over an unauthenticated channel if the file changes are secured by the authenticator and the group is able to verify the authenticator.
摘要翻译：如果认证者伴随着安全文件写入，则在无故障分布式文件系统中，通过未经身份验证的通道允许灾难性事件之后的安全文件写入的系统和方法。验证器可以是具有时间限制的授权证书，消息认证代码的向量，或者具有在无服务器分布式文件系统的成员之间共享的秘密的单个消息认证器。无服务器分布式文件系统至少包括3f + 1个参与的计算机成员，其中f表示系统可容忍的许多故障。该组至少需要一个身份验证器用于文件创建和文件上传。如果文件更改由验证者保护，并且该组能够验证验证器，则可以通过未经身份验证的通道对存储在成员中的文件进行任何更改。

4. 发明授权

US07401220B2 On-disk file format for a serverless distributed file system 有权
公开(公告)号：US07401220B2
公开(公告)日：2008-07-15
申请号：US11014491
申请日：2004-12-16
申请人： William J. Bolosky , Gerald Cermak , Atul Adya , John R. Douceur
发明人： William J. Bolosky , Gerald Cermak , Atul Adya , John R. Douceur
IPC分类号： H04L29/00
CPC分类号： G06F17/30097 , G06F19/00 , H04L9/0656 , H04L9/3239 , H04L9/3249 , H04L2209/20 , H04L2209/38 , H04L2209/60
摘要： A file format for a serverless distributed file system is composed of two parts: a primary data stream and a metadata stream. The data stream contains a file that is divided into multiple blocks. Each block is encrypted using a hash of the block as the encryption key. The metadata stream contains a header, a structure for indexing the encrypted blocks in the primary data stream, and some user information. The indexing structure defines leaf nodes for each of the blocks. Each leaf node consists of an access value used for decryption of the associated block and a verification value used to verify the encrypted block independently of other blocks. In one implementation, the access value is formed by hashing the file block and encrypting the resultant hash value using a randomly generated key. The key is then encrypted using the user's key as the encryption key. The verification value is formed by hashing the associated encrypted block using a one-way hash function. The file format supports verification of individual file blocks without knowledge of the randomly generated key or any user keys. To verify a block of the file, the file system traverses the tree to the appropriate leaf node associated with a target block to be verified. The file system hashes the target block and if the hash matches the access value contained in the leaf node, the block is authentic.

5. 发明授权

US07310644B2 Locating potentially identical objects across multiple computers 有权
标题翻译：在多个计算机上定位潜在的相同对象
公开(公告)号：US07310644B2
公开(公告)日：2007-12-18
申请号：US09876377
申请日：2001-06-06
申请人： Atul Adya , William J. Bolosky , John R. Douceur , Marvin M. Theimer
发明人： Atul Adya , William J. Bolosky , John R. Douceur , Marvin M. Theimer
IPC分类号： G06F17/30
CPC分类号： G06F17/30156
摘要： Potentially identical objects (such as files) across multiple computers are located. In one embodiment, a computer generates object information for an object stored on the computer. The object information can be generated in a variety of manners (e.g., based on hashing the object, based on characteristics of the object, and so forth). The object information is then transferred to one or more database server computers, where the object information can be compared to object information from other computers to determine whether the object is potentially identical to another object on one of the other computers.
摘要翻译：位于多个计算机上的潜在相同对象（如文件）。在一个实施例中，计算机生成存储在计算机上的对象的对象信息。可以以各种方式生成对象信息（例如，基于对象的散列，基于对象的特征等）。然后将对象信息传送到一个或多个数据库服务器计算机，其中可以将对象信息与来自其他计算机的对象信息进行比较，以确定对象是否与其他计算机之一上的另一个对象潜在地相同。

6. 发明授权

US07519623B2 Locating potentially identical objects across multiple computers based on stochastic partitioning of workload 有权
公开(公告)号：US07519623B2
公开(公告)日：2009-04-14
申请号：US10991656
申请日：2004-11-18
申请人： John R. Douceur , Marvin M. Theimer , Atul Adya , William J. Bolosky
发明人： John R. Douceur , Marvin M. Theimer , Atul Adya , William J. Bolosky
IPC分类号： G06F17/30
CPC分类号： G06F17/30156 , Y10S707/99944 , Y10S707/99946 , Y10S707/99952 , Y10S707/99953
摘要： Potentially identical objects (e.g., files) are located across multiple computers based on stochastic partitioning of workload. For each of a plurality of objects stored on a plurality of computers in a network, a portion of object information corresponding to the object is selected. The object information can be generated in a variety of manners (e.g., based on hashing the object, based on characteristics of the object, and so forth). Any of a variety of portions of the object information can be used (e.g., the least significant bits of the object information). A stochastic partitioning process is then used to identify which of the plurality of computers to communicate the object information to for identification of potentially identical objects on the plurality of computers.

7. 发明授权

US07478243B2 On-disk file format for serverless distributed file system with signed manifest of file modifications 有权
公开(公告)号：US07478243B2
公开(公告)日：2009-01-13
申请号：US09814337
申请日：2001-03-21
申请人： William J. Bolosky , Atul Adya , John R. Douceur
发明人： William J. Bolosky , Atul Adya , John R. Douceur
IPC分类号： H04L1/00
CPC分类号： G06F21/64 , G06F2221/2101 , H04L9/3236 , H04L9/3247 , H04L2209/20 , H04L2209/60 , H04L2209/80
摘要： In a serverless distributed file system, the writer of a file can provide file authentication information to a verifying machine without having to compute a new digital signature every time a written file is closed. Periodically, the writer compiles a list of the hash values of all files that have been written over a recent interval, computes a hash of the list, and signs the hash. This signed list of hash values is known as a manifest, akin to a shipping manifest that enumerates the items in a shipment. The advantage of using a signed manifest is that the writer need only perform a single signature computation in order to authenticate the writes to multiple files, rather than having to compute a separate signature for each file, as it would if a signature were embedded in each file.

8. 发明授权

US07415608B2 On-disk file format for a serverless distributed file system 有权
公开(公告)号：US07415608B2
公开(公告)日：2008-08-19
申请号：US11014262
申请日：2004-12-16
申请人： William J. Bolosky , Gerald Cermak , Atul Adya , John R. Douceur
发明人： William J. Bolosky , Gerald Cermak , Atul Adya , John R. Douceur
IPC分类号： H04L29/00
CPC分类号： G06F17/30097 , G06F19/00 , H04L9/0656 , H04L9/3239 , H04L9/3249 , H04L2209/20 , H04L2209/38 , H04L2209/60
摘要： A file format for a serverless distributed file system is composed of two parts: a primary data stream and a metadata stream. The data stream contains a file that is divided into multiple blocks. Each block is encrypted using a hash of the block as the encryption key. The metadata stream contains a header, a structure for indexing the encrypted blocks in the primary data stream, and some user information. The indexing structure defines leaf nodes for each of the blocks. Each leaf node consists of an access value used for decryption of the associated block and a verification value used to verify the encrypted block independently of other blocks. In one implementation, the access value is formed by hashing the file block and encrypting the resultant hash value using a randomly generated key. The key is then encrypted using the user's key as the encryption key. The verification value is formed by hashing the associated encrypted block using a one-way hash function. The file format supports verification of individual file blocks without knowledge of the randomly generated key or any user keys. To verify a block of the file, the file system traverses the tree to the appropriate leaf node associated with a target block to be verified. The file system hashes the target block and if the hash matches the access value contained in the leaf node, the block is authentic.

9. 发明授权

US07346774B2 Encrypted key cache 有权
标题翻译：加密密钥缓存
公开(公告)号：US07346774B2
公开(公告)日：2008-03-18
申请号：US11206525
申请日：2005-08-18
申请人： John R. Douceur , Atul Adya , William J. Bolosky , Marvin M. Theimer
发明人： John R. Douceur , Atul Adya , William J. Bolosky , Marvin M. Theimer
IPC分类号： H04L9/00
CPC分类号： H04L9/0825 , H04L9/0894
摘要： A file that has been encrypted using a symmetric key and that has a corresponding access control entry with the symmetric key encrypted using the public key of a public/private key pair can be accessed. An encrypted key cache is also accessed to determine whether an access control entry to symmetric key mapping exists in the cache for the access control entry corresponding to the file. If such a mapping exists in the cache, then the mapped-to symmetric key is obtained form the cache, otherwise the encrypted symmetric key is decrypted using the private key of the public/private key pair. The encrypted key cache itself can also be encrypted and stored as an encrypted file.
摘要翻译：可以访问已经使用对称密钥加密并具有使用公钥/私钥对的公钥加密的对称密钥的相应访问控制条目的文件。还访问加密密钥高速缓存以确定对应于该文件的访问控制条目的高速缓存中是否存在对称密钥映射的访问控制条目。如果高速缓存中存在这样的映射，则从高速缓存获得映射到对称密钥，否则使用公钥/私钥对的私钥解密加密的对称密钥。加密的密钥缓存本身也可以加密并存储为加密文件。

10. 发明授权

US07272630B2 Locating potentially identical objects across multiple computers based on stochastic partitioning of workload 有权
标题翻译：基于工作负载的随机分区，在多台计算机上定位潜在的相同对象
公开(公告)号：US07272630B2
公开(公告)日：2007-09-18
申请号：US10991571
申请日：2004-11-18
申请人： John R. Douceur , Marvin M. Theimer , Atul Adya , William J. Bolosky
发明人： John R. Douceur , Marvin M. Theimer , Atul Adya , William J. Bolosky
IPC分类号： G06F15/13
CPC分类号： G06F17/30156 , Y10S707/99944 , Y10S707/99946 , Y10S707/99952 , Y10S707/99953
摘要： Potentially identical objects (e.g., files) are located across multiple computers based on stochastic partitioning of workload. For each of a plurality of objects stored on a plurality of computers in a network, a portion of object information corresponding to the object is selected. The object information can be generated in a variety of manners (e.g., based on hashing the object, based on characteristics of the object, and so forth). Any of a variety of portions of the object information can be used (e.g., the least significant bits of the object information). A stochastic partitioning process is then used to identify which of the plurality of computers to communicate the object information to for identification of potentially identical objects on the plurality of computers.
摘要翻译：基于工作负载的随机划分，潜在地相同的对象（例如，文件）位于多个计算机之间。对于存储在网络中的多个计算机上的多个对象中的每一个，选择与对象相对应的对象信息的一部分。可以以各种方式生成对象信息（例如，基于对象的散列，基于对象的特征等）。可以使用对象信息的各种部分中的任何一个（例如，对象信息的最低有效位）。然后使用随机划分过程来识别多个计算机中的哪个计算机传达对象信息以便在多个计算机上识别可能相同的对象。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式