Encryption of system paging file
    1.
    发明申请
    Encryption of system paging file 有权
    加密系统页面文件

    公开(公告)号:US20050114688A1

    公开(公告)日:2005-05-26

    申请号:US10721562

    申请日:2003-11-25

    摘要: An operating system copies data from memory pages into a paging file on disk, in order to free up space in the memory. A mechanism is disclosed that causes the data to be encrypted as it is copied into the paging file, thereby protecting the paged data from unauthorized (or otherwise undesired) observation. The data that is stored in the paging file is encrypted with a session key, that is generated shortly after the machine on which the paging file exists is started. The session key, which is used both for encryption and decryption of the paging file data, is stored in volatile memory, so that the key is not persisted across boots of the machine. Since the key is not persisted across boots, old paging file data that was stored prior to the most recent boot cannot be recovered in clear text, thereby protecting the data from observation.

    摘要翻译: 操作系统将数据从内存页复制到磁盘上的页面文件中,以释放内存中的空间。 公开了一种机制,使得数据在被复制到寻呼文件中时被加密,从而保护分页数据免受未经授权(或以其他方式不希望的)观察。 存储在页面文件中的数据使用会话密钥进行加密,会话密钥是在启动了分页文件的计算机之后不久生成的。 用于分页文件数据的加密和解密的会话密钥存储在易失性存储器中,使得密钥不会在机器的引导上持久存储。 由于密钥在整个引导过程中不会持久存在,所以在最新引导之前存储的旧页面文件数据无法以明文形式恢复,从而保护数据免受观察。

    NONVOLATILE MEDIA JOURNALING OF VERIFIED DATA SETS
    2.
    发明申请
    NONVOLATILE MEDIA JOURNALING OF VERIFIED DATA SETS 有权
    不可侵犯的媒体报告数据集

    公开(公告)号:US20130067174A1

    公开(公告)日:2013-03-14

    申请号:US13229736

    申请日:2011-09-11

    IPC分类号: G06F12/00

    摘要: The storage of data sets in a storage set (e.g., data sets written to hard disk drives comprising a RAID array) may diminish the performance of the storage set through non-sequential writes, particularly if the storage devices promptly write data sets that are followed by sequentially following data sets. Additionally, storage sets may exhibit inconsistencies due to non-atomic writes of data sets and verifiers (e.g., checksums) and an intervening failure, such as an occurrence of the RAID write hole. Instead, data sets and verifiers may first be written to a stored on the nonvolatile media of a storage device before being committed to the storage set. Such writes may be sequentially written to the journal, irrespective of the locations of the data sets in the storage set; and recovery of a failure may simply involve re-committing the consistent records in the journal to correct incomplete writes to the storage set.

    摘要翻译: 将数据集存储在存储集中(例如,写入包含RAID阵列的硬盘驱动器的数据集)可能会通过非顺序写入来降低存储集的性能,特别是如果存储设备及时写入遵循的数据集 通过顺序跟随数据集。 此外,由于数据集和验证器(例如,校验和)的非原子写入以及诸如RAID写入孔的发生的中间故障,存储器组可能表现出不一致。 相反,在提交到存储集之前,数据集和验证器可以首先被写入到存储设备的非易失性介质上。 这样的写入可以顺序地写入日志,而不管存储集中的数据集的位置如何; 并且恢复故障可能只是简单地涉及在日志中重新提交一致的记录来纠正对存储集的不完整写入。

    TOKEN DATA OPERATIONS
    4.
    发明申请
    TOKEN DATA OPERATIONS 审中-公开
    TOKEN数据操作

    公开(公告)号:US20120324560A1

    公开(公告)日:2012-12-20

    申请号:US13162592

    申请日:2011-06-17

    IPC分类号: H04L9/32

    CPC分类号: G06F9/544 G06F21/62 G06F21/64

    摘要: In one embodiment, a host application may manage a data set maintained at a storage device using a token. A processor 220 of a host computer executing a host application may obtain a token representing a data set. The processor 220 may read a data set result based on the data set into a memory local to the host application. The data set result may be a data set copy, a data set digest, or a data set transformation.

    摘要翻译: 在一个实施例中,主机应用可以使用令牌来管理在存储设备处维护的数据集。 执行主机应用的主计算机的处理器220可以获得表示数据集的令牌。 处理器220可以基于将数据集合设置到主机应用程序本地的存储器中来读取数据集结果。 数据集结果可以是数据集拷贝,数据集摘要或数据集转换。

    Zero Token
    6.
    发明申请
    Zero Token 审中-公开
    零令牌

    公开(公告)号:US20130179959A1

    公开(公告)日:2013-07-11

    申请号:US13343718

    申请日:2012-01-05

    IPC分类号: H04L9/32

    摘要: Aspects of the subject matter described herein relate to a zero token. In aspects, a zero token may be used to represent one or more zeroes in an offload write command. A component receiving an offload write command with the zero token is free to write the zeroes in a variety of ways including, for example, changing data structures the component uses to represent the zeroes, issuing another command that writes zeroes, writing physical zeroes, and so forth. A component receiving an offload write command with the zero token does not need to verify that the zero token was obtained from a successful offload read or that the zero token is still valid. In response to an offload read request, a component may provide the zero token to represent all or a portion of the data associated with the offload read request.

    摘要翻译: 本文描述的主题的方面涉及零令牌。 在方面,可以使用零令牌来表示卸载写入命令中的一个或多个零。 使用零令牌接收卸载写入命令的组件可以以各种方式自由写入零,包括例如改变组件用于表示零的数据结构,发出另一个写入零的命令,写入物理零点和 等等。 使用零令牌接收卸载写入命令的组件不需要验证是否从成功卸载读取获得零令牌,或者零令牌仍然有效。 响应于卸载读取请求,组件可以提供零令牌来表示与卸载读取请求相关联的数据的全部或一部分。

    STORAGE DEVICE DRIVERS AND CLUSTER PARTICIPATION
    8.
    发明申请
    STORAGE DEVICE DRIVERS AND CLUSTER PARTICIPATION 有权
    存储设备驱动程序和集群参与

    公开(公告)号:US20130067188A1

    公开(公告)日:2013-03-14

    申请号:US13230827

    申请日:2011-09-12

    IPC分类号: G06F12/00

    摘要: The representation of storage devices on computers (e.g., as logical volumes) may be complicated by the pooling of multiple storage devices in order to apply redundancy plans such as mirroring and checksumming. Presented herein is a storage device driver configured to operate as a storage device interface generating representations of the storage regions of the storage devices; to claim those regions as a storage controller; and to expose pooled storage regions as logical disks. Additionally, the storage device driver may support the inclusion of storage devices in a cluster, comprising nodes that may be appointed as managers of the storage pool configuration; as managers of the storage devices; as owners having exclusive read/write access to the storage pool or cluster resources; and as cluster resource writers having excusive write access to a cluster resource. The nodes of the cluster may interoperate to share the storage devices while avoiding write conflicts.

    摘要翻译: 存储设备在计算机上的表示(例如,作为逻辑卷)可能通过汇集多个存储设备而变得复杂,以便应用诸如镜像和校验和之类的冗余计划。 这里呈现的是存储设备驱动器,其被配置为作为产生存储设备的存储区域的表示的存储设备接口来操作; 要求这些地区作为存储控制器; 并将池化的存储区域公开为逻辑磁盘。 此外,存储设备驱动程序可以支持在群集中包括存储设备,包括可被指定为存储池配置的管理者的节点; 作为存储设备的管理者; 作为具有对存储池或集群资源的独占读/写访问权限的所有者; 以及作为群集资源编写者具有对集群资源的可读写入访问权限。 集群的节点可以互操作以共享存储设备,同时避免写入冲突。

    TOKEN BASED FILE OPERATIONS
    9.
    发明申请
    TOKEN BASED FILE OPERATIONS 审中-公开
    基于TOKEN的文件操作

    公开(公告)号:US20130041985A1

    公开(公告)日:2013-02-14

    申请号:US13207014

    申请日:2011-08-10

    IPC分类号: G06F15/16 G06F17/30

    CPC分类号: H04L67/06 G06F21/6218

    摘要: Described are embodiments which allow token-based file operations. The client may request a special offload file operation that is formatted according to a file access protocol. The file operation may be an offload read operation or an offload write operation. In an offload read operation, the client requests that data be logically read from a stored file, or a portion thereof. In response, the file server provides a response that includes a token that represents the logically read data. In some embodiments, the file server may return a response with a token that represents less than all of the requested data if for some reason it cannot provide a token that represents all of the data. The token can then be used by the client in a subsequent offload write operation. In embodiments, the tokens represent immutable data that can be safely and securely used across servers and clients.

    摘要翻译: 描述了允许基于令牌的文件操作的实施例。 客户端可以请求根据文件访问协议格式化的特殊卸载文件操作。 文件操作可以是卸载读取操作或卸载写入操作。 在卸载读取操作中,客户端请求从存储的文件或其一部分逻辑地读取数据。 作为响应,文件服务器提供包括表示逻辑读取数据的令牌的响应。 在一些实施例中,如果由于某些原因它不能提供表示所有数据的令牌,则文件服务器可以返回具有表示小于所有请求的数据的令牌的响应。 然后,客户端可以在后续的卸载写入操作中使用令牌。 在实施例中,令牌表示可以跨服务器和客户机安全和安全地使用的不可变数据。