公开(公告)号：US20100162003A1

公开(公告)日：2010-06-24

申请号：US12342523

申请日：2008-12-23

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

IPC分类号： G06F12/14 ,  H04L9/28

CPC分类号： H04L9/0894 ,  G06F3/0611 ,  G06F3/0619 ,  G06F3/0623 ,  G06F3/064 ,  G06F3/067 ,  G06F11/1456 ,  G06F11/2005 ,  G06F11/201 ,  G06F11/2094 ,  G06F12/0866 ,  G06F21/78 ,  G06F2212/263 ,  H04L63/04 ,  H04L67/1097 ,  H04L67/146 ,  H04L67/2842

摘要： A secure storage appliance is disclosed, along with methods of storing and reading data in a secure storage network. The secure storage appliance is configured to present to a client a virtual disk, the virtual disk mapped to the plurality of physical storage devices. The secure storage appliance is capable of executing program instructions configured to generate a plurality of secondary blocks of data by performing splitting and encrypting operations on a block of data received from the client for storage on the virtual disk and reconstitute the block of data from at least a portion of the plurality of secondary blocks of data stored in shares on corresponding physical storage devices in response to a request from the client.

摘要翻译： 公开了一种安全存储设备，以及在安全存储网络中存储和读取数据的方法。 安全存储设备被配置为向客户端呈现映射到多个物理存储设备的虚拟磁盘。 安全存储设备能够执行被配置为通过对从客户端接收的数据块进行分割和加密操作来生成多个次要数据块的程序指令，以存储在虚拟磁盘上并从至少重构数据块 响应于来自客户端的请求，存储在对应的物理存储设备上的共享中的多个次要数据块的一部分。

公开(公告)号：US20100161964A1

公开(公告)日：2010-06-24

申请号：US12342575

申请日：2008-12-23

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

IPC分类号： H04L9/00 ,  G06F21/00 ,  G06F12/14

CPC分类号： G06F21/6272 ,  G06F2221/2107 ,  G06F2221/2141

摘要： Methods and systems of presenting data in a secure data storage network are disclosed. One method includes defining a plurality of communities of interest, each community of interest capable of accessing data stored in a secure data storage network and including a plurality of users desiring access to a common set of data, wherein each of the plurality of communities of interest has a set of security rights. The method also includes associating each of the plurality of communities of interest with a different workgroup key. The method further includes, upon identification of a client device as associated with a user from among the plurality of users in a community of interest, presenting a virtual disk to the client device in accordance with the security rights, the virtual disk associated with the workgroup key associated with the community of interest and a volume containing the common set of data to the community of interest, the volume including a plurality of shares stored on a plurality of physical storage devices.

摘要翻译： 公开了在安全数据存储网络中呈现数据的方法和系统。 一种方法包括定义感兴趣的多个社区，感兴趣的每个社区都能够访问存储在安全数据存储网络中的数据，并且包括希望访问一组共同的数据的多个用户，其中所述多个感兴趣社区中的每一个 有一套担保权。 该方法还包括将感兴趣的多个社区中的每一个与不同的工作组密钥相关联。 该方法还包括：在感兴趣的社区中的多个用户中识别与用户相关联的客户端设备时，根据安全权限向客户端设备呈现虚拟磁盘，与工作组相关联的虚拟磁盘 与所关注的社区相关联的密钥以及包含所述感兴趣社区的共同数据集的卷，所述卷包括存储在多个物理存储设备上的多个共享。

公开(公告)号：US20100162002A1

公开(公告)日：2010-06-24

申请号：US12342414

申请日：2008-12-23

申请人： David Dodgson ,  Joseph Neill ,  Ralph Faring ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

发明人： David Dodgson ,  Joseph Neill ,  Ralph Faring ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

IPC分类号： G06F12/14 ,  G06F12/16 ,  G06F12/08 ,  G06F12/00

CPC分类号： G06F21/6218 ,  G06F11/1464

摘要： Methods and systems for providing data backup are disclosed. One method includes receiving at a virtual tape backup system a data image to be maintained, and transmitting the contents of the data image to a secure storage appliance. The method also includes processing the contents of the data image with the secure storage appliance to cryptographically split one or more blocks of data of the data image such that each of the one or more blocks of data is split into a plurality of secondary data blocks. The method further includes storing the plurality of secondary data blocks in a corresponding plurality of shares located on a plurality of physical storage devices.

摘要翻译： 公开了提供数据备份的方法和系统。 一种方法包括在虚拟磁带备份系统处接收要维护的数据图像，以及将数据图像的内容发送到安全存储设备。 该方法还包括用安全存储设备处理数据图像的内容，以加密地分割数据图像的一个或多个数据块，使得一个或多个数据块中的每一个被分割成多个辅助数据块。 该方法还包括将多个辅助数据块存储在位于多个物理存储设备上的对应的多个共享中。

公开(公告)号：US20100154053A1

公开(公告)日：2010-06-17

申请号：US12336562

申请日：2008-12-17

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

IPC分类号： H04L9/32 ,  G06F21/00

CPC分类号： H04L63/08 ,  G06F3/0622 ,  G06F3/0637 ,  G06F3/067 ,  G06F21/78 ,  H04L63/0428 ,  H04L63/0876

摘要： Methods and systems for presenting a virtual disk to a client device are disclosed. One method includes receiving client credentials from a client device, the client credentials including a client identifier. The method also includes authenticating the client device at a secure storage device. The method further includes determining a volume is associated with the client device based upon the client identifier, the volume associated with a plurality of shares stored on a corresponding plurality of physical storage devices. The method also includes, upon determining the volume is associated with the client device, presenting the volume to the client device.

摘要翻译： 公开了向客户端设备呈现虚拟磁盘的方法和系统。 一种方法包括从客户端设备接收客户端凭证，客户机凭证包括客户端标识符。 该方法还包括在安全存储设备处验证客户端设备。 该方法还包括基于客户端标识符确定与客户端设备相关联的卷，该存储器与存储在相应的多个物理存储设备上的多个共享相关联的卷。 所述方法还包括在确定所述卷与所述客户端设备相关联时，将所述卷呈现给所述客户端设备。

公开(公告)号：US08719594B2

公开(公告)日：2014-05-06

申请号：US13397084

申请日：2012-02-15

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

IPC分类号： H04L29/06 ,  G06F21/00

CPC分类号： H04L9/0894 ,  H04L9/085 ,  H04L67/1097

摘要： Methods and systems for maintaining data connectivity in a secure data storage network are disclosed. In one aspect, a method includes assigning a volume to a primary secure storage appliance located in a secure data storage network the primary secure storage appliance selected from among a plurality of secure storage appliances located in the secure data storage network, the volume presented as a virtual disk to a client device and mapped to physical storage at each of a plurality of storage systems. The method further includes detecting at one of the plurality of secure storage appliances a failure of the primary secure storage appliance. The method also includes, upon detecting the failure of the primary secure storage appliance, reassigning the volume to a second secure storage appliance from among the plurality of secure storage appliances, thereby rendering the second secure storage appliance a new primary secure storage appliance.

摘要翻译： 公开了用于在安全数据存储网络中维护数据连接的方法和系统。 一方面，一种方法包括将卷分配给位于安全数据存储网络中的主安全存储设备，主安全存储设备从位于安全数据存储网络中的多个安全存储设备中选择，该卷呈现为 虚拟磁盘到客户端设备，并映射到多个存储系统中的每一个处的物理存储器。 该方法还包括在多个安全存储设备之一处检测主安全存储设备的故障。 该方法还包括在检测到主安全存储设备的故障之后，将该卷从多个安全存储设备中重新分配到第二安全存储设备，从而使第二安全存储设备成为新的主安全存储设备。

公开(公告)号：US20130212373A1

公开(公告)日：2013-08-15

申请号：US13397084

申请日：2012-02-15

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

IPC分类号： H04L29/06

CPC分类号： H04L9/0894 ,  H04L9/085 ,  H04L67/1097

摘要： Methods and systems for maintaining data connectivity in a secure data storage network are disclosed. In one aspect, a method includes assigning a volume to a primary secure storage appliance located in a secure data storage network the primary secure storage appliance selected from among a plurality of secure storage appliances located in the secure data storage network, the volume presented as a virtual disk to a client device and mapped to physical storage at each of a plurality of storage systems. The method further includes detecting at one of the plurality of secure storage appliances a failure of the primary secure storage appliance. The method also includes, upon detecting the failure of the primary secure storage appliance, reassigning the volume to a second secure storage appliance from among the plurality of secure storage appliances, thereby rendering the second secure storage appliance a new primary secure storage appliance.

摘要翻译： 公开了用于在安全数据存储网络中维护数据连接的方法和系统。 一方面，一种方法包括将卷分配给位于安全数据存储网络中的主安全存储设备，主安全存储设备从位于安全数据存储网络中的多个安全存储设备中选择，该卷呈现为 虚拟磁盘到客户端设备，并映射到多个存储系统中的每一个处的物理存储器。 该方法还包括在多个安全存储设备之一处检测主安全存储设备的故障。 该方法还包括在检测到主安全存储设备的故障之后，将该卷从多个安全存储设备中重新分配到第二安全存储设备，从而使第二安全存储设备成为新的主安全存储设备。

公开(公告)号：US08392682B2

公开(公告)日：2013-03-05

申请号：US12336564

申请日：2008-12-17

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

IPC分类号： G06F12/00

CPC分类号： H04L69/40 ,  G06F21/6218 ,  G06F2221/2113 ,  G06F2221/2141 ,  H04L9/085 ,  H04L9/088 ,  H04L9/0897 ,  H04L63/20 ,  H04L67/1097

摘要： Methods and systems for administrative management of a secure data storage network are disclosed. One system includes a secure storage appliance configured to host a plurality of volumes, each volume associated with a plurality of shares stored on a corresponding plurality of physical storage devices and having a plurality of volume management settings, wherein each volume is accessible by a group of one or more users, each user assigned an administrative access level, the volume management settings are editable by a first user from the group of one or more users associated with the volume and assigned an administrative access level sufficient to edit the volume management settings, and the volume management settings are inaccessible by a second user from outside the group of one or more users associated with the volume and assigned an administrative access level at least equal to that of the first user.

摘要翻译： 公开了用于安全数据存储网络的管理管理的方法和系统。 一个系统包括被配置为托管多个卷的安全存储设备，每个卷与存储在相应的多个物理存储设备上的多个共享相关联，并具有多个卷管理设置，其中每个卷可由一组 一个或多个用户，每个用户分配了管理访问级别，所述卷管理设置可由第一用户从与所述卷相关联的一个或多个用户的组中编辑，并且分配了足以编辑所述卷管理设置的管理访问级别，以及 卷管理设置由第二用户从与卷相关联的一个或多个用户的组之外的外部不可访问，并且分配了至少等于第一用户的管理访问级别。

公开(公告)号：US20100162032A1

公开(公告)日：2010-06-24

申请号：US12342464

申请日：2008-12-23

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

IPC分类号： G06F11/07 ,  G06F15/173

CPC分类号： G06F11/2094 ,  G06F11/1456 ,  G06F11/1464 ,  G06F11/1662 ,  G06F11/2089 ,  G06F21/78 ,  H04L63/04 ,  H04L67/1002 ,  H04L67/1034 ,  H04L67/1097 ,  H04L69/40

摘要： Methods and systems for maintaining data connectivity in a secure data storage network are disclosed. In one aspect, a method includes assigning a volume to a primary secure storage appliance located in a secure data storage network the primary secure storage appliance selected from among a plurality of secure storage appliances located in the secure data storage network, the volume presented as a virtual disk to a client device and mapped to physical storage at each of a plurality of storage systems. The method further includes detecting at one of the plurality of secure storage appliances a failure of the primary secure storage appliance. The method also includes, upon detecting the failure of the primary secure storage appliance, reassigning the volume to a second secure storage appliance from among the plurality of secure storage appliances, thereby rendering the second secure storage appliance a new primary secure storage appliance.

摘要翻译： 公开了用于在安全数据存储网络中维护数据连接的方法和系统。 一方面，一种方法包括将卷分配给位于安全数据存储网络中的主安全存储设备，主安全存储设备从位于安全数据存储网络中的多个安全存储设备中选择，该卷呈现为 虚拟磁盘到客户端设备，并映射到多个存储系统中的每一个处的物理存储器。 该方法还包括在多个安全存储设备之一处检测主安全存储设备的故障。 该方法还包括在检测到主安全存储设备的故障之后，将该卷从多个安全存储设备中重新分配到第二安全存储设备，从而使第二安全存储设备成为新的主安全存储设备。

公开(公告)号：US20100162031A1

公开(公告)日：2010-06-24

申请号：US12342438

申请日：2008-12-23

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers

IPC分类号： G06F11/16

CPC分类号： H04L63/104 ,  G06F11/2007 ,  H04L63/06

摘要： A secure storage appliance is disclosed, along with methods of storing and reading data in a secure storage network. In one aspect, a method includes assigning a volume to a primary secure storage appliance located in a secure data storage network, the secure data storage network including a plurality of secure data paths between the primary secure storage appliance and a client device and a plurality of secure data paths between the secure storage appliance and a plurality of storage systems, the volume corresponding to physical storage at each of the plurality of storage systems. The method also includes detecting a connectivity problem on at least one of the secure data paths. The method further includes assessing whether to reassign the volume to a different secure storage appliance based upon the connectivity problem.

摘要翻译： 公开了一种安全存储设备，以及在安全存储网络中存储和读取数据的方法。 一方面，一种方法包括将卷分配给位于安全数据存储网络中的主要安全存储设备，所述安全数据存储网络包括主安全存储设备和客户端设备之间的多个安全数据路径，以及多个 所述安全存储设备与多个存储系统之间的安全数据路径，所述卷对应于所述多个存储系统中的每一个处的物理存储。 该方法还包括检测至少一个安全数据路径上的连接问题。 该方法还包括基于连接性问题评估是否将卷重新分配给不同的安全存储设备。

公开(公告)号：US20100162005A1

公开(公告)日：2010-06-24

申请号：US12342636

申请日：2008-12-23

申请人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

发明人： David Dodgson ,  Joseph Neill ,  Ralph Farina ,  Edward Chin ,  Albert French ,  Scott Summers ,  Robert Johnson

IPC分类号： H04L9/06 ,  G06F17/30

CPC分类号： G06F21/80 ,  G06F21/6218

摘要： Methods and systems of presenting data in a secure data storage network are disclosed. One method includes defining a community of interest capable of accessing data stored in a secure data storage network, the community of interest including a plurality of users desiring access to a common set of data. The method also includes associating the community of interest with a workgroup key. and, upon identification of a client device as associated with a user from among the plurality of users in the community of interest, presenting a virtual disk to the client device, the virtual disk associated with the workgroup key and a volume containing the common set of data, the volume including a plurality of shares stored on a plurality of physical storage devices.

摘要翻译： 公开了在安全数据存储网络中呈现数据的方法和系统。 一种方法包括定义能够访问存储在安全数据存储网络中的数据的感兴趣社区，感兴趣的社区包括期望访问公共数据集合的多个用户。 该方法还包括将感兴趣的社区与工作组密钥相关联。 并且在所感兴趣的社区中的多个用户中识别与用户相关联的客户端设备，向客户端设备呈现虚拟磁盘时，与工作组密钥相关联的虚拟磁盘和包含公共集合的卷 数据，所述卷包括存储在多个物理存储设备上的多个共享。