Secure capability negotiation between a client and server
    1.
    发明授权
    Secure capability negotiation between a client and server 有权
    客户端和服务器之间的安全功能协商

    公开(公告)号:US08924573B2

    公开(公告)日:2014-12-30

    申请号:US13418256

    申请日:2012-03-12

    IPC分类号: G06F15/16

    CPC分类号: H04L63/205 H04L63/08

    摘要: Embodiments of the present disclosure provide for establishing an authenticated session between a client computing device and a remote computing device. In certain embodiments, a connection is established between the client computing device and the remote computing device. Once the connection is established, the client computing device sends a number of requests to the client computing device including a negotiate request, a setup request, and a validation request. In response to the requests, the client computing device receives a number of responses from the remote computing device including a negotiate response, setup response and a validation response. Once the responses have been received, a determination is made as to whether information contained in the validation response matches information contained in the negotiate response. If the information matches, an authenticated session is established between the remote computing device and the client computing device.

    摘要翻译: 本公开的实施例提供在客户端计算设备和远程计算设备之间建立认证会话。 在某些实施例中,在客户端计算设备和远程计算设备之间建立连接。 一旦建立了连接,客户端计算设备向客户端计算设备发送多个请求,包括协商请求,建立请求和验证请求。 响应于该请求,客户端计算设备从远程计算设备接收包括协商响应,建立响应和验证响应的多个响应。 一旦接收到响应,就确定包含在验证响应中的信息是否匹配包含在协商响应中的信息。 如果信息匹配,则在远程计算设备和客户端计算设备之间建立认证会话。

    Secure Capability Negotiation between a Client and Server
    2.
    发明申请
    Secure Capability Negotiation between a Client and Server 有权
    客户端与服务器之间的安全能力协商

    公开(公告)号:US20130238809A1

    公开(公告)日:2013-09-12

    申请号:US13418256

    申请日:2012-03-12

    IPC分类号: G06F15/16

    CPC分类号: H04L63/205 H04L63/08

    摘要: Embodiments of the present disclosure provide for establishing an authenticated session between a client computing device and a remote computing device. In certain embodiments, a connection is established between the client computing device and the remote computing device. Once the connection is established, the client computing device sends a number of requests to the client computing device including a negotiate request, a setup request, and a validation request. In response to the requests, the client computing device receives a number of responses from the remote computing device including a negotiate response, setup response and a validation response. Once the responses have been received, a determination is made as to whether information contained in the validation response matches information contained in the negotiate response. If the information matches, an authenticated session is established between the remote computing device and the client computing device.

    摘要翻译: 本公开的实施例提供在客户端计算设备和远程计算设备之间建立认证会话。 在某些实施例中,在客户端计算设备和远程计算设备之间建立连接。 一旦建立了连接,客户端计算设备向客户端计算设备发送多个请求,包括协商请求,建立请求和验证请求。 响应于该请求,客户端计算设备从远程计算设备接收包括协商响应,建立响应和验证响应的多个响应。 一旦接收到响应,就确定包含在验证响应中的信息是否匹配包含在协商响应中的信息。 如果信息匹配,则在远程计算设备和客户端计算设备之间建立认证会话。

    Directory Leasing
    3.
    发明申请
    Directory Leasing 有权
    目录租赁

    公开(公告)号:US20120072596A1

    公开(公告)日:2012-03-22

    申请号:US12885384

    申请日:2010-09-17

    IPC分类号: G06F15/173

    摘要: Described are embodiments for allowing clients that access a distributed file system to locally cache directory metadata. The client may request a read lease which allows the client to cache the directory metadata locally and service requests received from the same application which originally requested the directory metadata using the cache. In addition, the client may also request a handle lease which allows a client to delay the closing of a directory handle and allow the handle to be reused to service subsequent directory metadata requests from the same or a different application. A client may also request a write lease which allows an application on the client to modify the directory metadata, such as by creating or deleting new files in the directory, or changing their attributes, and cache those changes.

    摘要翻译: 描述了允许访问分布式文件系统的客户端本地缓存目录元数据的实施例。 客户端可以请求读取租约,允许客户端本地缓存目录元数据,并从使用缓存最初请求目录元数据的同一应用程序接收的服务请求。 此外,客户端还可以请求一个句柄租约,该租约允许客户端延迟目录句柄的关闭,并允许该句柄被重新用于从相同或不同的应用程序服务后续的目录元数据请求。 客户端还可以请求允许客户端上的应用程序修改目录元数据的写入租约,例如通过创建或删除目录中的新文件或更改其属性,并缓存这些更改。

    DIRECTORY OPLOCK
    4.
    发明申请

    公开(公告)号:US20120072400A1

    公开(公告)日:2012-03-22

    申请号:US12884624

    申请日:2010-09-17

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30171

    摘要: Current file systems may implement opportunistic locks on files that allow clients to locally cache file data, while promoting data consistency when multiple clients read/write the same file. Unfortunately, when a client locally caches directory content of a directory, the file system may lack a mechanism for notifying the client of changes to the directory that would render the cached directory content “stale”. Accordingly, one or more systems and/or techniques for managing a directory oplock are disclosed herein. A directory oplock may be generated based upon an oplock request comprising a first target key and a first parent key. Subsequent access requests for access to the directory or objects therein may be compared with the directory oplock to determine whether to break the directory oplock, and notify the client (e.g., directory oplock is broken if the client submitting the access request is different than the client owning the directory oplock).

    摘要翻译: 当前的文件系统可能会在允许客户端本地缓存文件数据的文件上实现机会锁定,同时在多个客户端读/写同一文件时提高数据一致性。 不幸的是,当客户端本地缓存目录的目录内容时,文件系统可能缺少通知客户机将使缓存的目录内容“陈旧”的目录更改的机制。 因此,本文公开了用于管理目录oplock的一个或多个系统和/或技术。 可以基于包括第一目标密钥和第一父密钥的oplock请求来生成目录oplock。 可以将访问其目录或对象的后续访问请求与目录oplock进行比较,以确定是否中断目录oplock,并通知客户机(例如,如果客户端提交访问请求不同于客户端,则目录oplock被破坏 拥有目录oplock)。

    Directory oplock
    5.
    发明授权
    Directory oplock 有权
    目录oplock

    公开(公告)号:US08965862B2

    公开(公告)日:2015-02-24

    申请号:US12884624

    申请日:2010-09-17

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30171

    摘要: Current file systems may implement opportunistic locks on files that allow clients to locally cache file data, while promoting data consistency when multiple clients read/write the same file. Unfortunately, when a client locally caches directory content of a directory, the file system may lack a mechanism for notifying the client of changes to the directory that would render the cached directory content “stale”. Accordingly, one or more systems and/or techniques for managing a directory oplock are disclosed herein. A directory oplock may be generated based upon an oplock request comprising a first target key and a first parent key. Subsequent access requests for access to the directory or objects therein may be compared with the directory oplock to determine whether to break the directory oplock, and notify the client (e.g., directory oplock is broken if the client submitting the access request is different than the client owning the directory oplock).

    摘要翻译: 当前的文件系统可能会在允许客户端本地缓存文件数据的文件上实现机会锁定,同时在多个客户端读/写同一文件时提高数据一致性。 不幸的是,当客户端本地缓存目录的目录内容时,文件系统可能缺少通知客户机将使缓存的目录内容“陈旧”的目录更改的机制。 因此,本文公开了用于管理目录oplock的一个或多个系统和/或技术。 可以基于包括第一目标密钥和第一父密钥的oplock请求来生成目录oplock。 可以将访问其目录或对象的后续访问请求与目录oplock进行比较,以确定是否中断目录oplock,并通知客户机(例如,如果客户端提交访问请求不同于客户端,则目录oplock被破坏 拥有目录oplock)。

    CLUSTERED CLIENT FAILOVER
    8.
    发明申请
    CLUSTERED CLIENT FAILOVER 有权
    聚集的客户端失败

    公开(公告)号:US20130066941A1

    公开(公告)日:2013-03-14

    申请号:US13228732

    申请日:2011-09-09

    IPC分类号: G06F15/16

    CPC分类号: H04L69/40 H04L67/10

    摘要: An application instance identifier is employed with various systems and methods in order to provide a requestor with continuous access to a resource when operating in a client clustered environment. A requestor residing on a first client in may attempt to access a resource. The first client sends a request to access the resource. The request may be associated with an application instance identifier that identifiers the requestor. At some point, the first client fails and the requestor is associated with a second client via a failover mechanism. The second client sends a second request to access the resource on behalf of the requestor. The second request is associated with the requestor's application instance identifier. The application instance identifier is used to identify the second request as belonging to the same requestor as the first request, thereby granting the second request to access the resource while avoiding a conflict situation.

    摘要翻译: 应用实例标识符用于各种系统和方法,以便在客户端集群环境中操作时向请求者提供对资源的持续访问。 驻留在第一客户端上的请求者可能尝试访问资源。 第一个客户端发送访问资源的请求。 请求可以与标识请求者的应用实例标识符相关联。 在某些时候,第一个客户端失败,请求者通过故障切换机制与第二个客户端相关联。 第二个客户端发送代表请求者访问资源的第二个请求。 第二个请求与请求者的应用实例标识符相关联。 应用实例标识符用于将第二请求标识为属于与第一请求相同的请求者,从而授予第二请求以访问资源,同时避免冲突情况。

    CLIENT-BASED CACHING OF REMOTE FILES
    10.
    发明申请
    CLIENT-BASED CACHING OF REMOTE FILES 有权
    基于客户端的远程文件的缓存

    公开(公告)号:US20100185704A1

    公开(公告)日:2010-07-22

    申请号:US12353982

    申请日:2009-01-15

    IPC分类号: G06F17/30 G06F12/08

    摘要: A lease system is described herein that allows clients to request a lease to a remote file, wherein the lease permits access to the file across multiple applications using multiple handles without extra round trips to a server. When multiple applications on the same client (or multiple components of the same application) request access to the same file, the client specifies the same lease identifier to the server for each open request or may handle the request from the cache based on the existing lease. Because the server identifies the client's cache at the client level rather than the individual file request level, the client receives fewer break notifications and is able to cache remote files in more circumstances. Thus, by providing the ability to cache data in more circumstances common with modern applications, the lease system reduces bandwidth, improves server scalability, and provides faster access to data.

    摘要翻译: 这里描述了允许客户端向远程文件请求租赁的租赁系统,其中租赁允许使用多个句柄跨多个应用访问文件,而不需要对服务器进行额外的往返。 当同一客户端上的多个应用程序(或同一应用程序的多个组件)请求访问同一个文件时,客户机为每个打开的请求指定与服务器相同的租约标识符,或者可以根据现有租约处理来自缓存的请求 。 因为服务器在客户端级别而不是单独的文件请求级别识别客户端的缓存,所以客户端接收到更少的中断通知,并且能够在更多情况下缓存远程文件。 因此,通过提供在现代应用中更常见的情况下缓存数据的能力,租赁系统降低带宽,提高服务器可扩展性,并提供更快速的数据访问。