PROVIDING ENHANCED SECURITY FOR OBJECT ACCESS IN OBJECT-BASED DATASTORES

    公开(公告)号:US20210303530A1

    公开(公告)日:2021-09-30

    申请号:US16872220

    申请日:2020-05-11

    Applicant: VMware, Inc.

    Abstract: A method of enhancing security in object based datastores is provided. The method mounts first and second datastores identified, respectively, by first and second datastore identifiers. The first and second datastores include, respectively, first and second namespace objects that are mapped to first and second subfolders in the first and second datastores. A first file within the first subfolder references a first object via a first object identifier, while a second file within the second subfolder references a second object via a second object identifier. The first and second objects are tagged with the first and second datastores' identifiers. The first and second datastores share an underlying storage and may be configured to have separate access permissions. The method receives a command to access the first object via a datastore identifier, compares the datastore identifier with the first datastore identifier, and if they match, allows access to the first object.

    ONLINE FORMAT CONVERSION OF VIRTUAL DISK FROM REDO-LOG SNAPSHOT FORMAT TO SINGLE-CONTAINER SNAPSHOT FORMAT

    公开(公告)号:US20240248630A1

    公开(公告)日:2024-07-25

    申请号:US18205189

    申请日:2023-06-02

    Applicant: VMware, Inc.

    CPC classification number: G06F3/065 G06F3/0619 G06F3/067

    Abstract: System and method for converting a storage object in a redo-log snapshot format to a single-container snapshot format in a distributed storage system uses a temporary snapshot object, which is created by taking a snapshot of the storage object, and an anchor object, which points to a root object of the storage object. For each object chain of the storage object, each selected object is processed for format conversion. For each selected object, difference data between the selected object and a parent object of the selected object is written to the anchor object, a child snapshot of the anchor object is created in the single-container snapshot format, and the anchor object is updated to point to the selected object. The data of the running point object of the storage object is then copied to the anchor object, and each processed object and the temporary snapshot object are removed.

    Providing enhanced security for object access in object-based datastores

    公开(公告)号:US11580078B2

    公开(公告)日:2023-02-14

    申请号:US16872220

    申请日:2020-05-11

    Applicant: VMware, Inc.

    Abstract: A method of enhancing security in object based datastores is provided. The method mounts first and second datastores identified, respectively, by first and second datastore identifiers. The first and second datastores include, respectively, first and second namespace objects that are mapped to first and second subfolders in the first and second datastores. A first file within the first subfolder references a first object via a first object identifier, while a second file within the second subfolder references a second object via a second object identifier. The first and second objects are tagged with the first and second datastores' identifiers. The first and second datastores share an underlying storage and may be configured to have separate access permissions. The method receives a command to access the first object via a datastore identifier, compares the datastore identifier with the first datastore identifier, and if they match, allows access to the first object.

Patent Agency Ranking