DEDUPLICATION OF ENCRYPTED DATA WITHIN A REMOTE DATA STORE

    公开(公告)号:US20200320046A1

    公开(公告)日:2020-10-08

    申请号:US16374787

    申请日:2019-04-04

    Applicant: NetApp Inc.

    Abstract: Techniques are provided for deduplicating encrypted data. For example, a device has data to store in an encrypted state within a remote data store. A key is used to encrypt the data to create encrypted data. The data is hashed to create hashed data and the encrypted data is hashed to create hashed encrypted data. A probabilistic data structure of the data is generated. The key is encrypted based upon the data to create an encrypted key. The encrypted data is transmitted to the remote data store, along with metadata comprising the hashed data, the hashed encrypted data, the probabilistic data structure, and the encrypted key. The metadata may be used to implement deduplication for subsequent requests, to store data within the remote data store, with respect to the encrypted data.

    MULTIPLE NODE REPAIR USING HIGH RATE MINIMUM STORAGE REGENERATION ERASURE CODE

    公开(公告)号:US20180060169A1

    公开(公告)日:2018-03-01

    申请号:US15248047

    申请日:2016-08-26

    Applicant: NetApp, Inc.

    Abstract: A distributed storage system can use a high rate MSR erasure code to repair multiple nodes when multiple node failures occur. An encoder constructs m r-ary trees to determine the symbol arrays for the parity nodes. These symbol arrays are used to generate the parity data according to parity definitions or parity equations. The m r-ary trees are also used to identify a set of recovery rows across helper nodes for repairing a systematic node. When failed systematic nodes correspond to different ones of the m r-ary trees, a decoder may select additional recovery rows. The decoder selects additional recovery rows when the parity definitions do not provide a sufficient number of independent linear equations to solve the unknown symbols of the failed nodes. The decoder can select recovery rows contiguous to the already identified recovery rows for access efficiency.

    Object store architecture for distributed data processing system
    23.
    发明授权
    Object store architecture for distributed data processing system 有权
    分布式数据处理系统的对象存储体系结构

    公开(公告)号:US09582213B2

    公开(公告)日:2017-02-28

    申请号:US14939760

    申请日:2015-11-12

    Applicant: NetApp, Inc.

    Abstract: Embodiments described herein provide an object store that efficiently manages and services objects for use by clients of a distributed data processing system. Illustratively, the object store may be embodied as a quasi-shared storage system that interacts with nodes of the distributed data processing system to service the objects as blocks of data stored on a plurality of storage devices, such as disks, of the storage system. To that end, an architecture of the object store may include an on-disk layout, e.g., of the storage system, and an incore layout, e.g., of the nodes, that cooperate to illustratively convert the blocks to objects for access by the clients.

    Abstract translation: 本文描述的实施例提供了有效地管理和服务对象以供分布式数据处理系统的客户端使用的对象存储。 示例性地,对象存储可以被体现为准共享存储系统,其与分布式数据处理系统的节点进行交互,以将对象作为存储在存储系统的多个存储设备(例如磁盘)上的数据块。 为此,对象商店的架构可以包括例如存储系统的磁盘布局,以及诸如节点之类的布局布局,这些布局协作以示意性地将块转换为对象以供客户端访问 。

    Secure proofs of storage for deduplication
    24.
    发明授权
    Secure proofs of storage for deduplication 有权
    确保重复数据删除的存储证明

    公开(公告)号:US09571287B2

    公开(公告)日:2017-02-14

    申请号:US14491750

    申请日:2014-09-19

    Applicant: NetApp, Inc.

    Abstract: Storage providers can securely store data and avoid data duplication with secure derivative data and offload the responsibility of generating the secure derivative data to the data owners. Initially, a data source will provide an encrypted version of data and the secure derivative data to a remote storage provider. The secure derivative data can include a hash of the data, a hash of the encrypted version of the data, a hash tree generated from the data, and an encrypted version of the key used to encrypt the data. When the remote storage provider later receives a request to store the same data, the remote storage provider uses the secure derivative data for secure proofs of storage and for proof of data possession.

    Abstract translation: 存储提供商可以安全地存储数据,避免数据与安全的衍生数据重复,并将生成安全派生数据的责任卸载给数据所有者。 最初,数据源将向远程存储提供商提供数据的加密版本和安全派生数据。 安全派生数据可以包括数据的散列,数据的加密版本的散列,从数据生成的散列树,以及用于加密数据的密钥的加密版本。 当远程存储提供商稍后接收到存储相同数据的请求时,远程存储提供商使用安全派生数据进行安全的存储证明和数据拥有证明。

    DISTRIBUTED FILE SYSTEM GATEWAY
    25.
    发明申请
    DISTRIBUTED FILE SYSTEM GATEWAY 有权
    分布式文件系统网关

    公开(公告)号:US20150113010A1

    公开(公告)日:2015-04-23

    申请号:US14137706

    申请日:2013-12-20

    Applicant: NetApp, Inc.

    Abstract: Technology is disclosed for managing data in a distributed file system (“the technology”). The technology can gather metadata information associated with the data stored within a first file system, store the metadata information in association with a data identifier within a second file system, retrieve the stored metadata information using the data identifier from within the second file system and locate and retrieve the data associated with the metadata information from within first file system.

    Abstract translation: 公开了用于管理分布式文件系统(“技术”)中的数据的技术。 该技术可以收集与存储在第一文件系统中的数据相关联的元数据信息,与第二文件系统内的数据标识符相关联地存储元数据信息,使用来自第二文件系统内的数据标识符检索存储的元数据信息,并且定位 并从第一文件系统内检索与元数据信息相关联的数据。

Patent Agency Ranking