VIRTUAL TAPE BACKUP ARRANGEMENT USING CRYPTOGRAPHICALLY SPLIT STORAGE
    1.
    发明申请
    VIRTUAL TAPE BACKUP ARRANGEMENT USING CRYPTOGRAPHICALLY SPLIT STORAGE 审中-公开
    虚拟磁带备份配置使用CRYPTOGRAPHICALLY SPLIT存储

    公开(公告)号:US20100162002A1

    公开(公告)日:2010-06-24

    申请号:US12342414

    申请日:2008-12-23

    CPC分类号: G06F21/6218 G06F11/1464

    摘要: Methods and systems for providing data backup are disclosed. One method includes receiving at a virtual tape backup system a data image to be maintained, and transmitting the contents of the data image to a secure storage appliance. The method also includes processing the contents of the data image with the secure storage appliance to cryptographically split one or more blocks of data of the data image such that each of the one or more blocks of data is split into a plurality of secondary data blocks. The method further includes storing the plurality of secondary data blocks in a corresponding plurality of shares located on a plurality of physical storage devices.

    摘要翻译: 公开了提供数据备份的方法和系统。 一种方法包括在虚拟磁带备份系统处接收要维护的数据图像,以及将数据图像的内容发送到安全存储设备。 该方法还包括用安全存储设备处理数据图像的内容,以加密地分割数据图像的一个或多个数据块,使得一个或多个数据块中的每一个被分割成多个辅助数据块。 该方法还包括将多个辅助数据块存储在位于多个物理存储设备上的对应的多个共享中。

    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING
    2.
    发明申请
    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING 审中-公开
    存储安全使用CRYPTOGRAPHIC分割

    公开(公告)号:US20100154053A1

    公开(公告)日:2010-06-17

    申请号:US12336562

    申请日:2008-12-17

    IPC分类号: H04L9/32 G06F21/00

    摘要: Methods and systems for presenting a virtual disk to a client device are disclosed. One method includes receiving client credentials from a client device, the client credentials including a client identifier. The method also includes authenticating the client device at a secure storage device. The method further includes determining a volume is associated with the client device based upon the client identifier, the volume associated with a plurality of shares stored on a corresponding plurality of physical storage devices. The method also includes, upon determining the volume is associated with the client device, presenting the volume to the client device.

    摘要翻译: 公开了向客户端设备呈现虚拟磁盘的方法和系统。 一种方法包括从客户端设备接收客户端凭证,客户机凭证包括客户端标识符。 该方法还包括在安全存储设备处验证客户端设备。 该方法还包括基于客户端标识符确定与客户端设备相关联的卷,该存储器与存储在相应的多个物理存储设备上的多个共享相关联的卷。 所述方法还包括在确定所述卷与所述客户端设备相关联时,将所述卷呈现给所述客户端设备。

    STORAGE COMMUNITIES OF INTEREST USING CRYPTOGRAPHIC SPLITTING
    3.
    发明申请
    STORAGE COMMUNITIES OF INTEREST USING CRYPTOGRAPHIC SPLITTING 审中-公开
    存储利益分享的社区

    公开(公告)号:US20100161964A1

    公开(公告)日:2010-06-24

    申请号:US12342575

    申请日:2008-12-23

    IPC分类号: H04L9/00 G06F21/00 G06F12/14

    摘要: Methods and systems of presenting data in a secure data storage network are disclosed. One method includes defining a plurality of communities of interest, each community of interest capable of accessing data stored in a secure data storage network and including a plurality of users desiring access to a common set of data, wherein each of the plurality of communities of interest has a set of security rights. The method also includes associating each of the plurality of communities of interest with a different workgroup key. The method further includes, upon identification of a client device as associated with a user from among the plurality of users in a community of interest, presenting a virtual disk to the client device in accordance with the security rights, the virtual disk associated with the workgroup key associated with the community of interest and a volume containing the common set of data to the community of interest, the volume including a plurality of shares stored on a plurality of physical storage devices.

    摘要翻译: 公开了在安全数据存储网络中呈现数据的方法和系统。 一种方法包括定义感兴趣的多个社区,感兴趣的每个社区都能够访问存储在安全数据存储网络中的数据,并且包括希望访问一组共同的数据的多个用户,其中所述多个感兴趣社区中的每一个 有一套担保权。 该方法还包括将感兴趣的多个社区中的每一个与不同的工作组密钥相关联。 该方法还包括:在感兴趣的社区中的多个用户中识别与用户相关联的客户端设备时,根据安全权限向客户端设备呈现虚拟磁盘,与工作组相关联的虚拟磁盘 与所关注的社区相关联的密钥以及包含所述感兴趣社区的共同数据集的卷,所述卷包括存储在多个物理存储设备上的多个共享。

    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING
    4.
    发明申请
    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING 审中-公开
    存储安全使用CRYPTOGRAPHIC分割

    公开(公告)号:US20140164790A1

    公开(公告)日:2014-06-12

    申请号:US13706457

    申请日:2012-12-06

    IPC分类号: H04L9/32

    摘要: Methods and systems for administrative management of a secure data storage network are disclosed. One system includes a secure storage appliance configured to host a plurality of volumes, each volume associated with a plurality of shares stored on a corresponding plurality of physical storage devices and having a plurality of volume management settings, wherein each volume is accessible by a group of one or more users, each user assigned an administrative access level, the volume management settings are editable by a first user from the group of one or more users associated with the volume and assigned an administrative access level sufficient to edit the volume management settings, and the volume management settings are inaccessible by a second user from outside the group of one or more users associated with the volume and assigned an administrative access level at least equal to that of the first user.

    摘要翻译: 公开了用于安全数据存储网络的管理管理的方法和系统。 一个系统包括被配置为托管多个卷的安全存储设备,每个卷与存储在相应的多个物理存储设备上的多个共享相关联,并具有多个卷管理设置,其中每个卷可由一组 一个或多个用户,每个用户分配了管理访问级别,所述卷管理设置可由第一用户从与所述卷相关联的一个或多个用户的组中编辑,并且分配了足以编辑所述卷管理设置的管理访问级别,以及 卷管理设置由第二用户从与卷相关联的一个或多个用户的组之外的外部不可访问,并且分配了至少等于第一用户的管理访问级别。

    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING
    5.
    发明申请
    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING 审中-公开
    存储安全使用CRYPTOGRAPHIC分割

    公开(公告)号:US20100150341A1

    公开(公告)日:2010-06-17

    申请号:US12336568

    申请日:2008-12-17

    IPC分类号: H04L9/28 H04L9/00 H04L9/06

    摘要: Methods and systems for securing data in a data storage network are disclosed. One method includes receiving at a secure storage appliance a block of data for storage on a volume, the volume associated with a plurality of shares distributed across a plurality of physical storage devices. The method further includes cryptographically splitting the block of data received by the secure storage appliance into a plurality of secondary data blocks, and cryptographically splitting the session key into a plurality of session key fragments. The method further includes encrypting each of the plurality of secondary data blocks with a different session key, each session key associated with at least one of the plurality of shares, and encrypting each of the plurality of session key fragments with a workgroup key associated with a source of the block of data.

    摘要翻译: 公开了用于在数据存储网络中保护数据的方法和系统。 一种方法包括在安全存储设备处接收用于存储在卷上的数据块,所述数据块与多个物理存储设备上分布的多个共享相关联。 该方法还包括将由安全存储设备接收的数据块加密地分割成多个辅助数据块,以及将会话密钥加密地分割成多个会话密钥片段。 该方法还包括用不同的会话密钥加密多个辅助数据块中的每一个,每个会话密钥与多个共享中的至少一个共享相关联,并且利用与该多个会话密钥相关联的工作组密钥加密每个会话密钥片段 源数据块。

    Storage security using cryptographic splitting
    6.
    发明授权
    Storage security using cryptographic splitting 有权
    使用加密分割的存储安全

    公开(公告)号:US08392682B2

    公开(公告)日:2013-03-05

    申请号:US12336564

    申请日:2008-12-17

    IPC分类号: G06F12/00

    摘要: Methods and systems for administrative management of a secure data storage network are disclosed. One system includes a secure storage appliance configured to host a plurality of volumes, each volume associated with a plurality of shares stored on a corresponding plurality of physical storage devices and having a plurality of volume management settings, wherein each volume is accessible by a group of one or more users, each user assigned an administrative access level, the volume management settings are editable by a first user from the group of one or more users associated with the volume and assigned an administrative access level sufficient to edit the volume management settings, and the volume management settings are inaccessible by a second user from outside the group of one or more users associated with the volume and assigned an administrative access level at least equal to that of the first user.

    摘要翻译: 公开了用于安全数据存储网络的管理管理的方法和系统。 一个系统包括被配置为托管多个卷的安全存储设备,每个卷与存储在相应的多个物理存储设备上的多个共享相关联,并具有多个卷管理设置,其中每个卷可由一组 一个或多个用户,每个用户分配了管理访问级别,所述卷管理设置可由第一用户从与所述卷相关联的一个或多个用户的组中编辑,并且分配了足以编辑所述卷管理设置的管理访问级别,以及 卷管理设置由第二用户从与卷相关联的一个或多个用户的组之外的外部不可访问,并且分配了至少等于第一用户的管理访问级别。

    STORAGE COMMUNITIES OF INTEREST USING CRYPTOGRAPHIC SPLITTING
    7.
    发明申请
    STORAGE COMMUNITIES OF INTEREST USING CRYPTOGRAPHIC SPLITTING 审中-公开
    存储利益分享的社区

    公开(公告)号:US20100162005A1

    公开(公告)日:2010-06-24

    申请号:US12342636

    申请日:2008-12-23

    IPC分类号: H04L9/06 G06F17/30

    CPC分类号: G06F21/80 G06F21/6218

    摘要: Methods and systems of presenting data in a secure data storage network are disclosed. One method includes defining a community of interest capable of accessing data stored in a secure data storage network, the community of interest including a plurality of users desiring access to a common set of data. The method also includes associating the community of interest with a workgroup key. and, upon identification of a client device as associated with a user from among the plurality of users in the community of interest, presenting a virtual disk to the client device, the virtual disk associated with the workgroup key and a volume containing the common set of data, the volume including a plurality of shares stored on a plurality of physical storage devices.

    摘要翻译: 公开了在安全数据存储网络中呈现数据的方法和系统。 一种方法包括定义能够访问存储在安全数据存储网络中的数据的感兴趣社区,感兴趣的社区包括期望访问公共数据集合的多个用户。 该方法还包括将感兴趣的社区与工作组密钥相关联。 并且在所感兴趣的社区中的多个用户中识别与用户相关联的客户端设备,向客户端设备呈现虚拟磁盘时,与工作组密钥相关联的虚拟磁盘和包含公共集合的卷 数据,所述卷包括存储在多个物理存储设备上的多个共享。

    STORAGE COMMUNITIES OF INTEREST USING CRYPTOGRAPHIC SPLITTING
    8.
    发明申请
    STORAGE COMMUNITIES OF INTEREST USING CRYPTOGRAPHIC SPLITTING 审中-公开
    存储利益分享的社区

    公开(公告)号:US20100161981A1

    公开(公告)日:2010-06-24

    申请号:US12342610

    申请日:2008-12-23

    IPC分类号: G06F12/14 H04L9/06 G06F21/22

    CPC分类号: G06F21/80

    摘要: Methods and systems of managing access to data in a secure data storage network are disclosed. One such method includes associating a storage resource with a community of interest, the community of interest associated with a workgroup key providing access to a virtual disk, the virtual disk allowing access to a volume comprising a plurality of shares stored on a plurality of physical storage devices. The method also includes, upon determining a user of a client device is a member of the community of interest, providing access to the storage resource to the user, whereby the storage resource is associated with the workgroup key.

    摘要翻译: 公开了在安全数据存储网络中管理数据访问的方法和系统。 一种这样的方法包括将存储资源与感兴趣的社区相关联,与提供对虚拟磁盘的访问的工作组密钥相关联的兴趣团体,允许访问包含存储在多个物理存储器上的多个共享的卷的虚拟磁盘 设备。 该方法还包括,在确定客户端设备的用户是感兴趣社区的成员时,向用户提供对存储资源的访问,由此存储资源与工作组密钥相关联。

    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING
    9.
    发明申请
    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING 审中-公开
    存储安全使用CRYPTOGRAPHIC分割

    公开(公告)号:US20100153703A1

    公开(公告)日:2010-06-17

    申请号:US12336559

    申请日:2008-12-17

    IPC分类号: G06F12/14 H04L9/00 H04L9/08

    摘要: Methods and systems for storing data securely in a secure data storage network are disclosed. One method includes receiving at a secure storage appliance a block of data for storage on a volume, the volume associated with a plurality of shares distributed across a plurality of physical storage devices. The method also includes cryptographically splitting the block of data received by the secure storage appliance into a plurality of secondary data blocks. The method further includes encrypting each of the plurality of secondary data blocks with a different session key, each session key associated with at least one of the plurality of shares. The method also includes storing each data block and associated session key at the corresponding share, remote from the secure storage appliance.

    摘要翻译: 公开了将数据安全地存储在安全数据存储网络中的方法和系统。 一种方法包括在安全存储设备处接收用于存储在卷上的数据块,所述数据块与多个物理存储设备上分布的多个共享相关联。 该方法还包括将由安全存储设备接收的数据块加密地分割成多个辅助数据块。 该方法还包括用不同的会话密钥加密多个辅助数据块中的每一个,每个会话密钥与多个共享中的至少一个共享相关联。 该方法还包括将每个数据块和相关联的会话密钥存储在远离安全存储设备的相应共享处。

    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING
    10.
    发明申请
    STORAGE SECURITY USING CRYPTOGRAPHIC SPLITTING 有权
    存储安全使用CRYPTOGRAPHIC分割

    公开(公告)号:US20100153670A1

    公开(公告)日:2010-06-17

    申请号:US12336564

    申请日:2008-12-17

    IPC分类号: G06F12/14 G06F12/00

    摘要: Methods and systems for administrative management of a secure data storage network are disclosed. One system includes a secure storage appliance configured to host a plurality of volumes, each volume associated with a plurality of shares stored on a corresponding plurality of physical storage devices and having a plurality of volume management settings, wherein each volume is accessible by a group of one or more users, each user assigned an administrative access level, the volume management settings are editable by a first user from the group of one or more users associated with the volume and assigned an administrative access level sufficient to edit the volume management settings, and the volume management settings are inaccessible by a second user from outside the group of one or more users associated with the volume and assigned an administrative access level at least equal to that of the first user.

    摘要翻译: 公开了用于安全数据存储网络的管理管理的方法和系统。 一个系统包括被配置为托管多个卷的安全存储设备,每个卷与存储在相应的多个物理存储设备上的多个共享相关联,并具有多个卷管理设置,其中每个卷可由一组 一个或多个用户,每个用户分配了管理访问级别,所述卷管理设置可由第一用户从与所述卷相关联的一个或多个用户的组中编辑,并且分配了足以编辑所述卷管理设置的管理访问级别,以及 卷管理设置由第二用户从与卷相关联的一个或多个用户的组之外的外部不可访问,并且分配了至少等于第一用户的管理访问级别。