公开(公告)号：US09507786B2

公开(公告)日：2016-11-29

申请号：US13718961

申请日：2012-12-18

申请人： Greg Dhuse ,  Wesley Leggette ,  Adam Michael Gray ,  Ilya Volvovski ,  Andrew Baptist

发明人： Greg Dhuse ,  Wesley Leggette ,  Adam Michael Gray ,  Ilya Volvovski ,  Andrew Baptist

IPC分类号： G06F17/30 ,  G06F11/08 ,  G06F11/10

CPC分类号： G06F17/30106 ,  G06F3/0619 ,  G06F3/064 ,  G06F3/0647 ,  G06F3/0653 ,  G06F3/067 ,  G06F11/08 ,  G06F11/1004 ,  G06F11/1076 ,  G06F11/1092 ,  G06F11/1096 ,  G06F17/30002 ,  G06F17/30079 ,  G06F17/30091 ,  G06F17/30194 ,  G06F21/602 ,  H04L67/1097

摘要： A method begins by a dispersed storage (DS) processing module receiving a request to retrieve a data object based on a search attribute. The method continues with the DS processing module retrieving and decoding a set of encoded index data slices to reconstruct an index file. The method continues with the DS processing module identifying a child index file, retrieving and decoding a set of encoded child index data slices to reconstruct the child index file, and determining whether the child index file includes a dispersed storage network (DSN) address for the data object. When the child index file includes the DSN address for the data object, the method continues with the DS processing module retrieving a plurality of sets of encoded data slices based on the DSN address and decoding the plurality of sets of encoded data slices to recapture the data object.

摘要翻译： 分散存储（DS）处理模块基于搜索属性接收到检索数据对象的请求，开始一种方法。 该方法继续DS处理模块检索和解码一组经编码的索引数据切片以重构索引文件。 该方法继续DS处理模块识别子索引文件，检索和解码一组经编码的子索引数据切片以重建子索引文件，以及确定子索引文件是否包括用于该索引文件的分散存储网络（DSN）地址 数据对象。 当子索引文件包括用于数据对象的DSN地址时，该方法继续DS处理模块基于DSN地址检索多组编码数据片，并解码多组编码数据片以重新获取数据 目的。

公开(公告)号：US10445164B2

公开(公告)日：2019-10-15

申请号：US13611533

申请日：2012-09-12

申请人： Jason K. Resch ,  Wesley Leggette

发明人： Jason K. Resch ,  Wesley Leggette

IPC分类号： G06F12/00 ,  G06F11/07 ,  H04L1/00 ,  G06F11/10 ,  G06F21/62 ,  H04L29/08

摘要： A method begins by a dispersed storage (DS) processing module receiving a request to copy a data object in a dispersed storage network (DSN). The method continues with the DS processing module identifying one or more sets of at least a decode threshold number of slice names for one or more sets of encoded data slices of the data object and generating one or more sets of at least a decode threshold of new slice names. The method continues with the DS processing module sending the one or more sets of at least a decode threshold of new slice names to storage nodes of the DSN and instructing the storage nodes to link the one or more sets of at least a decode threshold of new slice names to the one or more sets of encoded data slices thereby producing a non-replicated copy of the data object.

公开(公告)号：US20130046973A1

公开(公告)日：2013-02-21

申请号：US13587224

申请日：2012-08-16

申请人： Jason K. Resch ,  Wesley Leggette

发明人： Jason K. Resch ,  Wesley Leggette

IPC分类号： H04L9/32

CPC分类号： H04L9/0894 ,  G06F3/06 ,  G06F3/0604 ,  G06F3/067 ,  G06F11/00 ,  G06F11/1446 ,  G06F11/1612 ,  G06F15/17331 ,  G06F21/00 ,  G06F2211/1028 ,  H04L9/00 ,  H04L9/085 ,  H04L9/0863 ,  H04L9/0869 ,  H04L9/0877 ,  H04L9/32 ,  H04L9/321 ,  H04L9/3263 ,  H04L29/06 ,  H04L2209/16

摘要： A method begins by a dispersed storage (DS) processing module generating a temporary public-private key pair, a restricted use certificate, and a temporary password for a device. The method continues with the DS processing encoding a temporary private key to produce a set of encoded private key shares and encoding the restricted use certificate to produce a set of encoded certificate shares. The method continues with the DS processing module outputting the set of encoded private key shares and the set of encoded certificate shares to a set of authentication units. The method continues with the DS processing module outputting the temporary password to the device such that, when the device retrieves the set of encoded private key shares and the set of encoded certificate shares, the device is able to recapture the temporary private key and the restricted use certificate for accessing a dispersed storage network (DSN).

摘要翻译： 方法由分散存储（DS）处理模块开始，该模块生成用于设备的临时公私密钥对，限制使用证书和临时密码。 该方法继续处理编码临时私钥的DS处理，以产生一组编码的私钥共享并对受限使用证书进行编码以产生一组编码的证书共享。 该方法继续，DS处理模块将编码的私钥共享集合和编码的证书共享集合输出到一组认证单元。 该方法继续DS处理模块向设备输出临时密码，使得当设备检索编码的私钥共享集合和编码的证书共享集合时，该设备能够重新捕获临时私钥并且被限制 使用证书访问分散的存储网络（DSN）。

公开(公告)号：US09304843B2

公开(公告)日：2016-04-05

申请号：US13611622

申请日：2012-09-12

申请人： Jason K. Resch ,  Wesley Leggette ,  Gary W. Grube

发明人： Jason K. Resch ,  Wesley Leggette ,  Gary W. Grube

IPC分类号： G06F7/04 ,  G06F11/07 ,  H04L1/00 ,  G06F11/10 ,  G06F21/62 ,  H04L29/08 ,  G06F12/16

CPC分类号： G06F11/073 ,  G06F11/1076 ,  G06F21/62 ,  G06F2211/1028 ,  H04L1/0057 ,  H04L1/0061 ,  H04L1/0072 ,  H04L1/0083 ,  H04L67/1097

摘要： A method begins by a requesting entity sending a distributed storage network (DSN) access request to a request verification entity, wherein the DSN access request includes a signed certificate and DSN accessing information. The method continues by a request verification entity sending a signed DSN access request to the requesting entity when the request verification entity signs the DSN access request after verifying the signed certificate and the DSN accessing information. The method continues by the requesting entity sending the signed DSN access request to a DSN accessing entity. The method continues by the DSN accessing entity sending an authorized DSN access request to the DSN via a network connection when the DSN accessing entity verifies a signature of the request verification entity, wherein the authorized DSN access request includes, at a minimum, the DSN accessing information.

公开(公告)号：US09231768B2

公开(公告)日：2016-01-05

申请号：US13154740

申请日：2011-06-07

申请人： Jason K. Resch ,  Wesley Leggette

发明人： Jason K. Resch ,  Wesley Leggette

IPC分类号： H04L9/28 ,  H04L9/32 ,  H04W12/04 ,  G06F11/07 ,  G06F11/14 ,  H04L29/06 ,  G06F17/30 ,  G06F21/62

CPC分类号： G06F17/30091 ,  G06F11/0727 ,  G06F11/141 ,  G06F17/30097 ,  G06F21/6209 ,  H04L9/3242 ,  H04L9/3247 ,  H04L9/3263 ,  H04L9/3271 ,  H04L63/0428 ,  H04L63/06 ,  H04L63/12 ,  H04L2209/043 ,  H04L2209/30 ,  H04L2209/34 ,  H04L2209/56 ,  H04L2209/80 ,  H04W12/04

摘要： A method begins by a processing module generating a deterministic key from data and encrypting the data using the deterministic key to produce encrypted data. The method continues with the processing module generating transformed data from the encrypted data and generating a masked key from the deterministic key and the transformed data. The method continues with the processing module combining the masked key and the encrypted data to produce a secure package.

摘要翻译： 一种方法从处理模块开始，从数据生成确定性密钥，并使用确定密钥对数据进行加密以产生加密数据。 该方法继续处理模块从加密数据生成经转换的数据，并从确定性密钥和变换数据生成屏蔽密钥。 该方法继续处理模块组合屏蔽密钥和加密数据以产生安全包。

公开(公告)号：US08656187B2

公开(公告)日：2014-02-18

申请号：US12547753

申请日：2009-08-26

申请人： Wesley Leggette ,  Jason K. Resch

发明人： Wesley Leggette ,  Jason K. Resch

IPC分类号： G06F12/14

CPC分类号： H04L9/085 ,  G06F21/6209 ,  H04L2209/16

摘要： A method operating on a computer begins by generating a read command to read at least some of a plurality of data slices from a dispersed storage network. The method continues by receiving the at least some of the plurality of data slices. The method continues by performing a reverse information dispersal algorithm on at least some of the plurality of data slices to produce a plurality of transposed data elements. The method continues by reverse transposing the plurality of transposed data elements to recover data elements of a data segment.

摘要翻译： 在计算机上操作的方法开始于生成读取命令以从分散的存储网络读取多个数据片段中的至少一些。 该方法通过接收多个数据切片中的至少一些来继续。 该方法通过在多个数据切片中的至少一些上执行反向信息分散算法来产生多个转置的数据元素。 该方法通过反向转置多个转置的数据元素来继续以恢复数据段的数据元素。

公开(公告)号：US08578205B2

公开(公告)日：2013-11-05

申请号：US13021664

申请日：2011-02-04

申请人： Wesley Leggette ,  Jason K. Resch

发明人： Wesley Leggette ,  Jason K. Resch

IPC分类号： G06F11/08

CPC分类号： G06F3/0619 ,  G06F3/0638 ,  G06F3/0689 ,  G06F11/2094 ,  G06F12/1425 ,  H04L63/10

摘要： A method begins by a processing module determining that a data storage request is a cloud data storage request. The method continues with the processing module determining at least one of a cloud storage access reliability indication and a cloud storage data reliability indication for the data storage request. The method continues with the processing module sending the data storage request and the at least one of cloud storage access reliability indication and cloud storage data reliability indication to a cloud storage system.

摘要翻译： 处理模块开始确定数据存储请求是云数据存储请求的方法。 该方法继续处理模块确定用于数据存储请求的云存储访问可靠性指示和云存储数据可靠性指示中的至少一个。 该方法继续处理模块向云存储系统发送数据存储请求和云存储访问可靠性指示和云存储数据可靠性指示中的至少一个。

公开(公告)号：US08522074B2

公开(公告)日：2013-08-27

申请号：US12842932

申请日：2010-07-23

申请人： Timothy W. Markison ,  Gary W. Grube ,  S. Christopher Gladwin ,  Alan E. Holmes ,  Wesley Leggette ,  Jason K. Resch

发明人： Timothy W. Markison ,  Gary W. Grube ,  S. Christopher Gladwin ,  Alan E. Holmes ,  Wesley Leggette ,  Jason K. Resch

IPC分类号： G06F11/00

CPC分类号： H04N21/2181 ,  G06F11/1008 ,  G06F11/1076 ,  G06F11/1092 ,  G11C29/52 ,  H03M13/09 ,  H03M13/15 ,  H03M13/1515 ,  H03M13/23 ,  H03M13/356 ,  H04N21/23439 ,  H04N21/2393 ,  H04N21/274 ,  H04N21/2747 ,  H04N21/6587

摘要： A method begins by a processing module receiving a first request to store a program. The method continues with the processing module determining first error coding dispersal storage function parameters and encoding a data segment of the program. The method continues with the processing module determining whether a second request to store the program is received. The method continues with the processing module encoding a second data segment of the program in accordance with the first error coding dispersal storage function parameters when the second request is not received. The method continues with the processing module changing the first error coding dispersal storage function parameters based on the another request to produce second error coding dispersal storage function parameters when the second request is received. The method continues with the processing module encoding the second data segment in accordance with the second error coding dispersal storage function parameters.

摘要翻译： 一种方法由处理模块开始，该处理模块接收存储程序的第一请求。 该方法继续处理模块确定第一错误编码分散存储功能参数并对程序的数据段进行编码。 该方法继续处理模块确定是否接收到存储程序的第二请求。 当不接收到第二请求时，该方法继续处理模块根据第一错误编码分散存储功能参数对程序的第二数据段进行编码。 该方法继续，处理模块基于另一请求改变第一错误编码分散存储功能参数，以在接收到第二请求时产生第二错误编码分散存储功能参数。 该方法继续处理模块根据第二错误编码分散存储功能参数对第二数据段进行编码。

公开(公告)号：US20120290830A1

公开(公告)日：2012-11-15

申请号：US13449950

申请日：2012-04-18

申请人： Jason K. Resch ,  Wesley Leggette

发明人： Jason K. Resch ,  Wesley Leggette

IPC分类号： H04L9/00

CPC分类号： H04L9/0841 ,  H04L9/3093

摘要： A method begins by a dispersed storage (DS) processing module generating a shared secret key from a public key of another entity and a private key using a first modulo prime polynomial function, wherein a public key is generated from the private key using a second modulo prime polynomial function and wherein the public key of the other entity is derived using the second modulo prime polynomial function on a private key of the other entity. The method continues with the DS module encrypting a message using the shared secret key to produce an encrypted message. The method continues with the DS module outputting the encrypted message to the other entity.

摘要翻译： 一种分散存储（DS）处理模块从另一实体的公开密钥和使用第一模式多项式函数的私钥生成共享密钥的方法开始，其中使用第二模数从私钥生成公开密钥 主多项式函数，并且其中使用另一个实体的私钥上的第二模式多项式函数导出另一实体的公开密钥。 该方法继续DS模块使用共享密钥加密消息以产生加密消息。 该方法继续DS模块将加密消息输出到另一实体。

公开(公告)号：US20110264989A1

公开(公告)日：2011-10-27

申请号：US13021510

申请日：2011-02-04

申请人： Jason K. Resch ,  John Quigley ,  Wesley Leggette

发明人： Jason K. Resch ,  John Quigley ,  Wesley Leggette

IPC分类号： H03M13/03 ,  G06F11/07 ,  G06F11/10 ,  G06F12/14

CPC分类号： G06F11/1076 ,  G06F11/0727 ,  G06F11/076 ,  G06F11/0763 ,  G06F11/1004 ,  G06F11/1008 ,  G06F11/1092 ,  G06F11/1464 ,  G06F11/2094 ,  G06F17/30575 ,  G06F21/6218 ,  G06F21/64 ,  G06F2211/1028 ,  H04L9/085 ,  H04L9/0894 ,  H04L67/1097 ,  H04L2209/30 ,  H04L2209/34 ,  G06F21/60 ,  G06F21/70

摘要： A method begins by a processing module dispersed storage error encoding data to produce a plurality of sets of encoded data slices in accordance with dispersed storage error coding parameters. The method continues with the processing module determining a plurality of sets of slice names corresponding to the plurality of sets of encoded data slices. The method continues with the processing module determining integrity information for the plurality of sets of slice names and sending the plurality of sets of encoded data slices, the plurality of sets of slice names, and the integrity information to a dispersed storage network memory for storage therein.

摘要翻译： 一种方法由处理模块开始，分散存储错误编码数据，以根据分散的存储错误编码参数产生多组编码数据片段。 该方法继续处理模块确定与多组编码数据片相对应的多个片名称集合。 该方法继续处理模块确定多个片名称集合的完整性信息，并将多组编码数据片段，多组片名称和完整性信息发送到分散的存储网络存储器，以便存储在其中 。