SECURE REBUILDING OF AN ENCODED DATA SLICE IN A DISPERSED STORAGE NETWORK
    45.
    发明申请
    SECURE REBUILDING OF AN ENCODED DATA SLICE IN A DISPERSED STORAGE NETWORK 有权
    在分散式存储网络中安全编码数据片

    公开(公告)号:US20120054500A1

    公开(公告)日:2012-03-01

    申请号:US13291009

    申请日:2011-11-07

    IPC分类号: G06F12/14

    摘要: A method begins by a processing module identifying an encoded data slice to be rebuilt, selecting a decode threshold number of dispersed storage (DS) units of a storage set of DS units, generating a decode threshold number of key pairs, wherein a key pair of the decode threshold number of key pairs corresponds to a DS unit of the decode threshold number of DS units, and sending partial rebuilding requests to the decode threshold number of DS units, wherein a partial rebuilding request of the partial rebuilding requests includes the key pair. The method continues with the processing module receiving encrypted partial encoded data slices, wherein an encrypted partial encoded data slice received from the corresponding DS unit includes a multiple encryption, using the key pair, of a partial encoded data slice and decoding the encrypted partial encoded data slices to rebuild the encoded data slice.

    摘要翻译: 一种方法由识别要重建的编码数据切片的处理模块开始,选择DS单元的存储集合的分散存储(DS)单元的解码阈值数量,生成解密阈值数量的密钥对,其中密钥对 密钥对的解码阈值数目对应于DS单元的解码阈值数目的DS单位,并且将部分重建请求发送到DS单元的解码阈值数量,其中部分重建请求的部分重建请求包括密钥对。 所述方法继续处理模块接收加密的部分编码数据片,其中从对应的DS单元接收的加密的部分编码数据片包括使用密钥对的部分编码数据片的多重加密,并对加密的部分编码数据进行解码 切片重建编码数据切片。

    STORAGE OF SENSITIVE DATA IN A DISPERSED STORAGE NETWORK
    46.
    发明申请
    STORAGE OF SENSITIVE DATA IN A DISPERSED STORAGE NETWORK 有权
    存储在分散存储网络中的敏感数据

    公开(公告)号:US20110286594A1

    公开(公告)日:2011-11-24

    申请号:US13097396

    申请日:2011-04-29

    IPC分类号: H04L9/00

    摘要: A method begins by a processing module applying a share encoding function on data to produce a plurality of encoded shares and generating a corresponding plurality of random numbers for the plurality of encoded shares. The method continues with the processing module generating an encryption key based on a common password and a corresponding one of the corresponding plurality of random numbers and encrypting the encoded share utilizing the encryption key to produce an encrypted share for each encoded share of the plurality of encoded shares. The method continues with the processing module facilitating storage of the corresponding plurality of random numbers and each of the encrypted shares.

    摘要翻译: 一种方法由处理模块开始,对数据应用共享编码功能以产生多个编码的共享,并为多个编码的共享产生相应的多个随机数。 该方法继续处理模块基于公共密码和对应的多个随机数中的相应一个生成加密密钥,并且利用加密密钥对编码的共享进行加密,以产生针对多个编码的每个编码的每个编码的共享的加密共享 分享。 该方法继续处理模块便于存储对应的多个随机数和每个加密的共享。

    Storage of sensitive data in a dispersed storage network
    47.
    发明授权
    Storage of sensitive data in a dispersed storage network 有权
    将敏感数据存储在分散的存储网络中

    公开(公告)号:US08861727B2

    公开(公告)日:2014-10-14

    申请号:US13097396

    申请日:2011-04-29

    摘要: A method begins by a processing module applying a share encoding function on data to produce a plurality of encoded shares and generating a corresponding plurality of random numbers for the plurality of encoded shares. The method continues with the processing module generating an encryption key based on a common password and a corresponding one of the corresponding plurality of random numbers and encrypting the encoded share utilizing the encryption key to produce an encrypted share for each encoded share of the plurality of encoded shares. The method continues with the processing module facilitating storage of the corresponding plurality of random numbers and each of the encrypted shares.

    摘要翻译: 一种方法由处理模块开始,对数据应用共享编码功能以产生多个编码的共享,并为多个编码的共享产生相应的多个随机数。 该方法继续处理模块基于公共密码和对应的多个随机数中的相应一个生成加密密钥,并且利用加密密钥对编码的共享进行加密,以产生针对多个编码的每个编码的每个编码的共享的加密共享 分享。 该方法继续处理模块便于存储对应的多个随机数和每个加密的共享。

    Retrieving data utilizing a distributed index
    49.
    发明授权
    Retrieving data utilizing a distributed index 有权
    使用分布式索引检索数据

    公开(公告)号:US09507786B2

    公开(公告)日:2016-11-29

    申请号:US13718961

    申请日:2012-12-18

    IPC分类号: G06F17/30 G06F11/08 G06F11/10

    摘要: A method begins by a dispersed storage (DS) processing module receiving a request to retrieve a data object based on a search attribute. The method continues with the DS processing module retrieving and decoding a set of encoded index data slices to reconstruct an index file. The method continues with the DS processing module identifying a child index file, retrieving and decoding a set of encoded child index data slices to reconstruct the child index file, and determining whether the child index file includes a dispersed storage network (DSN) address for the data object. When the child index file includes the DSN address for the data object, the method continues with the DS processing module retrieving a plurality of sets of encoded data slices based on the DSN address and decoding the plurality of sets of encoded data slices to recapture the data object.

    摘要翻译: 分散存储(DS)处理模块基于搜索属性接收到检索数据对象的请求,开始一种方法。 该方法继续DS处理模块检索和解码一组经编码的索引数据切片以重构索引文件。 该方法继续DS处理模块识别子索引文件,检索和解码一组经编码的子索引数据切片以重建子索引文件,以及确定子索引文件是否包括用于该索引文件的分散存储网络(DSN)地址 数据对象。 当子索引文件包括用于数据对象的DSN地址时,该方法继续DS处理模块基于DSN地址检索多组编码数据片,并解码多组编码数据片以重新获取数据 目的。

    Dispersed storage network data manipulation
    50.
    发明授权
    Dispersed storage network data manipulation 有权
    分散存储网络数据操纵

    公开(公告)号:US09167277B2

    公开(公告)日:2015-10-20

    申请号:US12776098

    申请日:2010-05-07

    摘要: A method begins by a processing module receiving data for dispersed storage, wherein the data has an associated user identification (ID), and obtaining a codec flag based on the associated user ID. The codec flag may indicate one or more codec types and a codec execution order. The codec types may include two or more of: a null data manipulation, one or more versions of a data integrity function, one or more versions of a compression function, and/or one or more versions of an encryption function. The method continues with the processing module manipulating the data to produce manipulated data utilizing the one or more codec types in the codec execution order, encoding the manipulated data using an error coding dispersal storage function to produce a plurality of encoded data slices, and sending the slices and codec flag to a plurality of DS storage units for storage.

    摘要翻译: 一种方法由处理模块开始接收用于分散存储的数据,其中数据具有关联的用户标识(ID),并且基于相关联的用户ID获得编解码器标志。 编解码器标志可以指示一种或多种编解码器类型和编解码器执行顺序。 编解码器类型可以包括以下两个或更多个:空数据操纵,数据完整性功能的一个或多个版本,压缩函数的一个或多个版本,和/或加密功能的一个或多个版本。 该方法继续处理模块处理数据以利用编解码器执行顺序中的一种或多种编解码器类型产生操纵数据,使用错误编码分散存储功能对所操纵的数据进行编码以产生多个编码数据片,并发送 切片和编解码器标志到多个DS存储单元用于存储。