MULTIPLE DOMAIN AUTHENTICATION USING DATA MANAGEMENT AND STORAGE NODE

    公开(公告)号:US20200092286A1

    公开(公告)日:2020-03-19

    申请号:US16133494

    申请日:2018-09-17

    Applicant: Rubrik, Inc.

    Abstract: A data management and storage (DMS) cluster of peer DMS nodes provides domain shares and authentication for different domains. Each DMS node includes a domain manager and multiple containers, each container including a domain share. Each container associated with a domain may provide an authentication service for authenticating users for a different domain to access domain shares of the domain, such as by contacting a domain controller of a compute infrastructure associated with the domain. The domain manager controls the creation and deletion of containers and their domain shares. The domain manager also provides a proxy service for the containers for communication with client devices of different domains external to the DMS cluster.

    MULTI-TENANT AUTHORIZATION FRAMEWORK IN A DATA MANAGEMENT AND STORAGE CLUSTER

    公开(公告)号:US20190384929A1

    公开(公告)日:2019-12-19

    申请号:US16453274

    申请日:2019-06-26

    Applicant: Rubrik, Inc.

    Abstract: A data management and storage (DMS) cluster of peer DMS nodes manages resources of a multi-tenant environment. The DMS cluster provides an authorization framework that provides user access which is scoped to the resources within a tenant organization and the privileges of the user within the organization. To authorize an action on a resource by a user, the DMS cluster determines determine user authorizations associated with the user defining privileges of the user on the resources of the multi-tenant environment, and organization authorizations associated defining resources of the multi-tenant environment that belong to the organization. The DMS cluster authorizes the action when the user authorizations and organizations authorized indicate that the action on the resource is authorized.

    FEDERATED LOGIN WITH CENTRALIZED CONTROL
    3.
    发明公开

    公开(公告)号:US20230379317A1

    公开(公告)日:2023-11-23

    申请号:US18212651

    申请日:2023-06-21

    Applicant: Rubrik, Inc.

    CPC classification number: H04L63/0815 H04L63/104 H04L63/101 H04L63/083

    Abstract: In some examples, a centralized management system comprises a central management console including a federated login system embedded in the centralized management system. The federated login system includes at least one processor configured to perform operations in a method of federated login and authorization allowing a user of the centralized management system to manage connected clusters or products without performing an individual cluster or product login.

    Multi-tenant authorization framework in a data management and storage cluster

    公开(公告)号:US10803193B2

    公开(公告)日:2020-10-13

    申请号:US16392908

    申请日:2019-04-24

    Applicant: Rubrik, Inc.

    Abstract: A data management and storage (DMS) duster of peer DMS nodes manages resources of a multi-tenant environment. The DMS cluster provides an authorization framework that provides user access which is scoped to the resources within a tenant organization and the privileges of the user within the organization. To authorize an action on a resource by a user, the DMS cluster determines determine user authorizations associated with the user defining privileges of the user on the resources of the multi-tenant environment, and organization authorizations associated defining resources of the multi-tenant environment that belong to the organization. The DMS cluster authorizes the action when the user authorizations and organizations authorized indicate that the action on the resource is authorized.

    MULTI-TENANT AUTHORIZATION FRAMEWORK IN A DATA MANAGEMENT AND STORAGE CLUSTER

    公开(公告)号:US20190384928A1

    公开(公告)日:2019-12-19

    申请号:US16392908

    申请日:2019-04-24

    Applicant: Rubrik, Inc.

    Abstract: A data management and storage (DMS) duster of peer DMS nodes manages resources of a multi-tenant environment. The DMS cluster provides an authorization framework that provides user access which is scoped to the resources within a tenant organization and the privileges of the user within the organization. To authorize an action on a resource by a user, the DMS cluster determines determine user authorizations associated with the user defining privileges of the user on the resources of the multi-tenant environment, and organization authorizations associated defining resources of the multi-tenant environment that belong to the organization. The DMS cluster authorizes the action when the user authorizations and organizations authorized indicate that the action on the resource is authorized.

    TECHNIQUES FOR SECURE HOST CONNECTIVITY IN DISASTER RECOVERY SCENARIOS

    公开(公告)号:US20240031353A1

    公开(公告)日:2024-01-25

    申请号:US17871308

    申请日:2022-07-22

    Applicant: Rubrik, Inc.

    CPC classification number: H04L63/0823

    Abstract: A method for establishing secure connectivity is described. The method may include transmitting, to one or more host nodes of a data management system (DMS), an indication of a backup service configuration that includes a public key certificate associated with a first cluster of storage nodes in the DMS and a root certificate associated with a certificate authority. The method may further include establishing a primary connection between the first cluster and the host nodes using the public key certificate. The method may further include obtaining, by a second cluster of storage nodes in the DMS, a certificate chain signed by the certificate authority. The method may further include establishing a secondary connection between the second cluster and the host nodes in response to the first cluster becoming disconnected from the host nodes, where the secondary connection is established using the certificate chain.

    Managing key encryption keys using a key wrapping tree

    公开(公告)号:US10756888B2

    公开(公告)日:2020-08-25

    申请号:US15817719

    申请日:2017-11-20

    Applicant: RUBRIK, INC.

    Inventor: Seungyeop Han

    Abstract: Methods and systems for securely deleting electronic files and other data stored within a data storage system are described. Each file or separately deletable portion of data stored within the data storage system may be encrypted using a distinct data encryption key. When the file is selected for deletion, both the file and the corresponding data encryption key may be deleted. The data encryption key used for encrypting the file may be encrypted using a key encryption key. If the file and the corresponding data encryption key are both stored using an SSD, then the key encryption key may be stored using a HDD. The ability to physically delete or directly overwrite the key encryption key stored within the HDD may ensure that the file and the data encryption key stored using the SSD are no longer cryptographically recoverable.

    Multi-tenant authorization framework in a data management and storage cluster

    公开(公告)号:US10380369B1

    公开(公告)日:2019-08-13

    申请号:US16008989

    申请日:2018-06-14

    Applicant: Rubrik, Inc.

    Abstract: A data management and storage (DMS) cluster of peer DMS nodes manages resources of a multi-tenant environment. The DMS cluster provides an authorization framework that provides user access which is scoped to the resources within a tenant organization and the privileges of the user within the organization. To authorize an action on a resource by a user, the DMS cluster determines determine user authorizations associated with the user defining privileges of the user on the resources of the multi-tenant environment, and organization authorizations associated defining resources of the multi-tenant environment that belong to the organization. The DMS cluster authorizes the action when the user authorizations and organizations authorized indicate that the action on the resource is authorized.

    QUORUM-BASED AUTHORIZATION TECHNIQUES

    公开(公告)号:US20250141873A1

    公开(公告)日:2025-05-01

    申请号:US18385275

    申请日:2023-10-30

    Applicant: Rubrik, Inc.

    Abstract: A data management system (DMS) may receive an indication of a configuration for a quorum-based authorization (QAuth) policy that controls interactions between two or more users and a security cloud service of the DMS. The configuration may include a policy scope for the QAuth policy, protected actions that trigger the QAuth policy, and compute objects to which the QAuth policy is assigned. The DMS may receive an instruction to assign a set of role-based access control (RBAC) permissions associated with the QAuth policy to a first user. The DMS may receive a request to perform a protected action on at least one compute object to which the QAuth policy is assigned. In response to the request, the DMS may trigger a two-person rule (TPR) enforcement mechanism of the QAuth policy by requesting approval from the first user with the set of RBAC permissions.

    TECHNIQUES FOR ADAPTIVE LARGE LANGUAGE MODEL USAGE

    公开(公告)号:US20250103809A1

    公开(公告)日:2025-03-27

    申请号:US18371344

    申请日:2023-09-21

    Applicant: Rubrik, Inc.

    Abstract: A method for data management is described. The method includes obtaining data associated with a communication session between a user and a communication service of a data management system (DMS). The method further includes generating a prompt that includes some or all of the data associated with the communication session. The method further includes selecting a large language model (LLM) from a set of LLMs available to the communication service based on a token size of the prompt and a token window size of the LLM. The method further includes transmitting the prompt to the selected LLM and receiving a response from the selected LLM. The method further includes using data from the response in the communication session. In some implementations, if the token size of the prompt exceeds the token window size of the LLM, the DMS may select a different LLM or modify the contents of the prompt.

Patent Agency Ranking