利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

80 条记录 (耗时 0.053 秒)

    Durability enforcement of cryptographic keys in a key management system
    1.
    发明授权
    Durability enforcement of cryptographic keys in a key management system 有权

    公开(公告)号：US12010229B2

    公开(公告)日：2024-06-11

    申请号：US17329604

    申请日：2021-05-25

    申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION

    发明人： Vaijayanthimala K. Anand ,  Wesley Leggette ,  Akila Srinivasan ,  Bruno Henriques ,  Cameron Paul Kurotori

    IPC分类号： H04L9/14 ,  G06F9/54 ,  H04L9/08

    CPC分类号： H04L9/0894 ,  G06F9/546 ,  H04L9/14

    摘要： Systems and methods for enforcing durability of second level encryption keys by a key management system (KMS) are provided. In embodiment, a method includes: receiving a first request to encrypt a first level key, the request including the first level key and a second level key identification associated with a stored encrypted second level key; determining that a durability check of the encrypted second level key is required based on the request; determining a durability status of the encrypted second level key by comparing actual storage of the encrypted second level key in one or more storage locations with predetermined storage rules for a durability level of the encrypted second level key, wherein the durability status indicates that the storage of the encrypted second level key complies with the durability level; and sending a notification regarding the durability status to the data storage service.

    Dispersed storage network secure hierarchical file directory
    3.
    发明授权
    Dispersed storage network secure hierarchical file directory 有权

    公开(公告)号：US10387213B2

    公开(公告)日：2019-08-20

    申请号：US16113437

    申请日：2018-08-27

    申请人： International Business Machines Corporation

    发明人： Wesley Leggette ,  Jason K. Resch

    IPC分类号： G07B15/02 ,  G06F9/50 ,  G06F21/60 ,  H04L29/08 ,  G06F11/10 ,  H04L29/06 ,  G06F21/62 ,  G06F11/14 ,  G06F11/20 ,  H03M13/09 ,  H03M13/15 ,  G06F3/06

    摘要： A method includes creating a file directory entry in a directory file of a secure hierarchical file directory system for a file. The file directory entry includes a path name, an encryption access control list, and a source name. The file is encrypted with a key and the key is encrypted with each public key of user devices authorized to access the file. The encryption access control list includes identities of the set of user devices and the set of object content keys. The method further includes encrypting the directory file using a second key. The method further includes generating second object content keys based on the second key and public keys of second user devices authorized to access the directory file. The method further includes creating a next level directory file entry in a next higher directory file of the secure hierarchical file directory system for the directory file.

    Lifecycle management of memory devices
    4.
    发明授权
    Lifecycle management of memory devices 有权

    公开(公告)号：US10353620B2

    公开(公告)日：2019-07-16

    申请号：US15827155

    申请日：2017-11-30

    申请人： International Business Machines Corporation

    发明人： Wesley Leggette ,  Manish Motwani ,  Brian F. Ober ,  Jason Resch ,  Patrick A. Tamborski

    IPC分类号： G06F3/06

    摘要： Aspects of the present invention disclose a method, computer program product, and system for determining drive health. The method includes one or more processors aggregating health data information associated with one or more memory devices in a dispersed storage network, where aggregating the health data information includes determining trends of the health data information on the dispersed storage network. The method further includes one or more processors determining health status of the dispersed storage network, where the health status is a function of the aggregated health data information associated with memory devices of the dispersed storage network. The method further includes one or more processors determining an action to execute on the dispersed storage network based on the determined health status of the dispersed storage network, wherein the action includes altering activity of the one or more memory devices on the dispersed storage network.

    Storing data in accordance with encoded data slice revision levels in a dispersed storage network
    5.
    发明申请
    Storing data in accordance with encoded data slice revision levels in a dispersed storage network 审中-公开

    公开(公告)号：US20190034274A1

    公开(公告)日：2019-01-31

    申请号：US16138753

    申请日：2018-09-21

    申请人： International Business Machines Corporation

    发明人： Andrew D. Baptist ,  Wesley Leggette ,  Jason K. Resch

    IPC分类号： G06F11/10 ,  G06F3/06 ,  H04L29/06 ,  H04L29/08

    摘要： A method includes sending, by a computing device of a dispersed storage network (DSN), a set of write request messages to a set of storage units of the DSN regarding a plurality of sets of encoded data slices. The method continues by receiving, from a first storage unit, a first write response message including a group of status messages, which indicate whether a corresponding revision level of each of the first encoded data slices is a next revision level in accordance with a current revision level. The method continues by interpreting the group of status messages to determine whether an encoded data slice of first encoded data slices has a revision level error. When the error, the method continues by flagging the encoded data slices for a rollback message and when no error, the method continues by flagging each encoded data slice for a write commit message.

    SELECTING A DATA STORAGE RESOURCE OF A DISPERSED STORAGE NETWORK
    9.
    发明申请
    SELECTING A DATA STORAGE RESOURCE OF A DISPERSED STORAGE NETWORK 审中-公开

    公开(公告)号：US20180077238A1

    公开(公告)日：2018-03-15

    申请号：US15812706

    申请日：2017-11-14

    申请人： International Business Machines Corporation

    发明人： Jason K. Resch ,  Wesley Leggette ,  Greg Dhuse

    IPC分类号： H04L29/08 ,  H03M13/37 ,  H03M13/09 ,  H03M13/15

    CPC分类号： H04L67/1097 ,  H03M13/09 ,  H03M13/1515 ,  H03M13/3761

    摘要： A method includes receiving, by a storage unit of a set of storage units of a dispersed storage network (DSN) from a computing device of the DSN, a write request of a set of write requests regarding an encoded data slice of a set of encoded data slices. The write request includes a write set information table that includes a listing of which storage unit of the set of storage units is being sent which encoded data slice of the set of encoded data slices for storage therein. The method further includes interpreting the write set information table to determine that a particular encoded data slice assigned to a particular storage unit should be stored by a different storage unit. The method further includes facilitating storing of the particular encoded data slice in the different storage unit.