公开(公告)号：US20090041253A1

公开(公告)日：2009-02-12

申请号：US11835646

申请日：2007-08-08

申请人： Hong Chen ,  Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Hong Chen ,  Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： H04L9/08

CPC分类号： H04L9/3247 ,  H04L9/321 ,  H04L2209/30 ,  H04L2209/38

摘要： The present invention relates to a method for proving the correctness of a query result produced by a data publisher while preserving the privacy of the query result. The method comprises delivering a public key of a public key/private key pair from a data owner to a client and delivering data and cryptographic metadata to at least one data publisher, wherein the metadata is associated both with the data and the public key of the public key/private key pair. The method further comprises receiving a query from the client, returning a query result and a verification object from the data publisher to the client in response to the query, and verifying the correctness of the query result, wherein the correctness of the query result is verified utilizing the verification object and the public key.

摘要翻译： 本发明涉及一种用于证明由数据发布者产生的查询结果的正确性的方法，同时保持查询结果的隐私。 该方法包括将公共密钥/私钥对的公开密钥从数据所有者传递到客户端，并将数据和加密元数据传递给至少一个数据发布者，其中元数据与数据和公开密钥相关联 公钥/私钥对。 该方法还包括从客户端接收查询，响应于查询将查询结果和验证对象从数据发布者返回到客户端，以及验证查询结果的正确性，其中验证查询结果的正确性 利用验证对象和公钥。

公开(公告)号：US07979711B2

公开(公告)日：2011-07-12

申请号：US11835646

申请日：2007-08-08

申请人： Hong Chen ,  Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Hong Chen ,  Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： H04L9/32

CPC分类号： H04L9/3247 ,  H04L9/321 ,  H04L2209/30 ,  H04L2209/38

摘要： The present invention relates to a method for proving the correctness of a query result produced by a data publisher while preserving the privacy of the query result. The method comprises delivering a public key of a public key/private key pair from a data owner to a client and delivering data and cryptographic metadata to at least one data publisher, wherein the metadata is associated both with the data and the public key of the public key/private key pair. The method further comprises receiving a query from the client, returning a query result and a verification object from the data publisher to the client in response to the query, and verifying the correctness of the query result, wherein the correctness of the query result is verified utilizing the verification object and the public key.

摘要翻译： 本发明涉及一种用于证明由数据发布者产生的查询结果的正确性的方法，同时保持查询结果的隐私。 该方法包括将公共密钥/私钥对的公开密钥从数据所有者传递到客户端，并将数据和加密元数据传递给至少一个数据发布者，其中元数据与数据和公开密钥相关联 公钥/私钥对。 该方法还包括从客户端接收查询，响应于查询将查询结果和验证对象从数据发布者返回到客户端，以及验证查询结果的正确性，其中验证查询结果的正确性 利用验证对象和公钥。

公开(公告)号：US20100030729A1

公开(公告)日：2010-02-04

申请号：US12182063

申请日：2008-07-29

申请人： Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： G06F17/30 ,  G06F12/02

CPC分类号： G06F17/30

摘要： The invention provides a method and system for managing data access. The method includes receiving a request for accessing a file, determining a type of the received request that corresponds to an access pattern based on history of many files, marking the request based on the type of request to identify the request as a candidate to be part of a sequential scan for accessing files in a sequential order, and processing the request based on the marking to throttle access of the file in the case of a potential ongoing erroneously requested sequential scan.

摘要翻译： 本发明提供了一种用于管理数据访问的方法和系统。 该方法包括接收访问文件的请求，基于许多文件的历史来确定与访问模式相对应的接收到的请求的类型，基于请求的类型来标识请求以将请求标识为候选者 用于按顺序访问文件的顺序扫描，以及在潜在的正在进行的错误请求的顺序扫描的情况下，基于标记来处理该请求以节省文件的访问。

公开(公告)号：US07376062B2

公开(公告)日：2008-05-20

申请号：US10976695

申请日：2004-10-29

申请人： Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： G11B7/00

CPC分类号： H04L9/0836 ,  H04L9/0894

摘要： Files are encrypted and stored on a WORM media device along with their encryption keys, the binary values of which are stored as a combination of written and unwritten sectors in a key storage portion of the media. To shred a file, the associated key is destroyed simply by writing into the unwritten sectors that are associated with the key.

摘要翻译： 文件被加密并存储在WORM媒体设备上以及它们的加密密钥，其二进制值作为写入和未写入扇区的组合存储在媒体的密钥存储部分中。 为了切割文件，关联的密钥只需通过写入与密钥相关联的未写入的扇区来销毁。

公开(公告)号：US07284150B2

公开(公告)日：2007-10-16

申请号：US10711506

申请日：2004-09-22

申请人： Xiaonan Ma ,  Windsor Wee Sun Hsu

发明人： Xiaonan Ma ,  Windsor Wee Sun Hsu

IPC分类号： G06F11/00

CPC分类号： G06F11/1451 ,  G06F11/1458 ,  G06F11/1461 ,  G06F11/1469 ,  G06F11/2074 ,  G06F2201/84

摘要： According to the present invention, there is provided a method for reliably storing data in a computer system. The method includes receiving a piece of data to be stored at a storage system. In addition, the method includes writing a first copy of the data to the storage system according to a first data redundancy scheme. Also, the method includes writing a second copy of the data to the storage system according to a second data redundancy scheme. Also, the system includes maintaining metadata of the data written to the storage system according to the second data redundancy scheme. In addition, the method includes copying the data written to the storage system according to the second data redundancy scheme to a backup storage system, wherein the copying is performed in response to a defined condition being met. Moreover, removing the data written to the storage system according to the second data redundancy scheme after it has been copied to the backup storage system.

摘要翻译： 根据本发明，提供了一种在计算机系统中可靠地存储数据的方法。 该方法包括接收要存储在存储系统中的一条数据。 此外，该方法包括根据第一数据冗余方案将数据的第一副本写入存储系统。 此外，该方法包括根据第二数据冗余方案将数据的第二副本写入存储系统。 此外，该系统包括根据第二数据冗余方案维护写入存储系统的数据的元数据。 此外，该方法包括将根据第二数据冗余方案写入存储系统的数据复制到备份存储系统，其中响应于所规定的条件被满足来执行复制。 此外，在将其复制到备份存储系统之后，根据第二数据冗余方案去除写入存储系统的数据。

公开(公告)号：US07996679B2

公开(公告)日：2011-08-09

申请号：US11243560

申请日：2005-10-05

申请人： Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： H04L9/28 ,  G06F11/30

CPC分类号： G06F21/64 ,  G06F21/606

摘要： A data migration system performs a tamper-resistant data migration for regulatory compliance systems. The system generates a secure hash for the data object, adds a timestamp to the hash, produces a signature for the data object using a private key, and includes the signature in a signature summary of data objects. Immediately prior to data migration, the system signs the signature summary of the set of data objects to be migrated. The signature of the data object maintains integrity of the data object by preventing undetectable modification to a data object during migration. The signed signature summary maintains completeness by preventing undetectable removal of a data object from or insertion of a data object into the set of data objects during migration.

摘要翻译： 数据迁移系统对监管合规系统执行防篡改数据迁移。 系统为数据对象生成安全散列，向散列添加时间戳，使用私钥生成数据对象的签名，并将签名包含在数据对象的签名摘要中。 在数据迁移之前，系统将签署要迁移的数据对象集合的签名摘要。 数据对象的签名通过在迁移期间阻止对数据对象的不可检测的修改来保持数据对象的完整性。 签名签名摘要通过在迁移期间防止将数据对象从数据对象或数据对象插入到该组数据对象中而无法检测到的完整性。

公开(公告)号：US07487178B2

公开(公告)日：2009-02-03

申请号：US11244270

申请日：2005-10-05

申请人： Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： G06F17/30

CPC分类号： G06F21/805 ,  Y10S707/99931 ,  Y10S707/99945 ,  Y10S707/99948

摘要： An object storage system provides a storage object to support index structures, logs, and audit trails in WORM storage. The storage object includes a mutable object, an immutable object, or an appendable object. For each storage object, the system maintains an indication of type, such as mutable, immutable, or appendable object type. A mutable object can be arbitrarily modified, an immutable object cannot be modified, and the contents of the appendable object cannot be modified but can be appended with new data. Appended data becomes immutable. The system enables a protection level represented by the object type to be upgraded but not downgraded. Consequently, data committed to be immutable cannot be changed by changing the type of the storage object.

摘要翻译： 对象存储系统提供一个存储对象来支持WORM存储中的索引结构，日志和审计跟踪。 存储对象包括可变对象，不可变对象或可追加对象。 对于每个存储对象，系统维护类型的指示，例如可变的，不可变的或可追加的对象类型。 可变对象可以任意修改，不可修改的对象不能被修改，并且可追加对象的内容不能被修改，但可以附加新的数据。 附加数据变得不可变。 该系统使得由对象类型表示的保护级别能够升级但不降级。 因此，不能通过更改存储对象的类型来改变承诺为不可变的数据。

公开(公告)号：US20080232593A1

公开(公告)日：2008-09-25

申请号：US12019247

申请日：2008-01-24

申请人： Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： H04L9/14

CPC分类号： H04L9/0836 ,  H04L9/0894

摘要： Files are encrypted and stored on a WORM media device along with their encryption keys, the binary values of which are stored as a combination of written and unwritten sectors in a key storage portion of the media. To shred a file, the associated key is destroyed simply by writing into the unwritten sectors that are associated with the key.

摘要翻译： 文件被加密并存储在WORM媒体设备上以及它们的加密密钥，其二进制值作为写入和未写入扇区的组合存储在媒体的密钥存储部分中。 为了切割文件，关联的密钥只需通过写入与密钥相关联的未写入的扇区来销毁。

公开(公告)号：US20080195583A1

公开(公告)日：2008-08-14

申请号：US11672831

申请日：2007-02-08

申请人： Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： G06F17/30

CPC分类号： G06F17/30477 ,  Y10S707/99933 ,  Y10S707/99934 ,  Y10S707/99935

摘要： A correctness verification system receives a query, executes the query using a query logic, and produces a query result. The query result comprises data records that satisfy the query, data verification objects associated with the data records, index segments accessed during the execution of the query, index verification objects associated with the index segments, and the query. The system transfers the query result to a verification system. The verification system verifies correctness of the query result by executing the query using the query logic. The verification system uses the data verification objects to verify integrity of the data objects, uses the index verification objects to verify the integrity of the index segments, and uses the index verification objects and the data verification objects to verify the completeness of the query result.

摘要翻译： 正确性验证系统接收查询，使用查询逻辑执行查询，并产生查询结果。 查询结果包括满足查询的数据记录，与数据记录相关联的数据验证对象，在执行查询期间访问的索引段，与索引段相关联的索引验证对象和查询。 系统将查询结果传送到验证系统。 验证系统通过使用查询逻辑执行查询来验证查询结果的正确性。 验证系统使用数据验证对象来验证数据对象的完整性，使用索引验证对象来验证索引段的完整性，并使用索引验证对象和数据验证对象来验证查询结果的完整性。

公开(公告)号：US08055635B2

公开(公告)日：2011-11-08

申请号：US12134089

申请日：2008-06-05

申请人： Windsor Wee Sun Hsu ,  Xiaonan Ma

发明人： Windsor Wee Sun Hsu ,  Xiaonan Ma

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： G06F17/30477 ,  Y10S707/99933 ,  Y10S707/99934 ,  Y10S707/99935

摘要： A correctness verification system receives a query, executes the query using a query logic, and produces a query result. The query result comprises data records that satisfy the query, data verification objects associated with the data records, index segments accessed during the execution of the query, index verification objects associated with the index segments, and the query. The system transfers the query result to a verification system. The verification system verifies correctness of the query result by executing the query using the query logic. The verification system uses the data verification objects to verify integrity of the data objects, uses the index verification objects to verify the integrity of the index segments, and uses the index verification objects and the data verification objects to verify the completeness of the query result.

摘要翻译： 正确性验证系统接收查询，使用查询逻辑执行查询，并产生查询结果。 查询结果包括满足查询的数据记录，与数据记录相关联的数据验证对象，在执行查询期间访问的索引段，与索引段相关联的索引验证对象和查询。 系统将查询结果传送到验证系统。 验证系统通过使用查询逻辑执行查询来验证查询结果的正确性。 验证系统使用数据验证对象来验证数据对象的完整性，使用索引验证对象来验证索引段的完整性，并使用索引验证对象和数据验证对象来验证查询结果的完整性。