公开(公告)号：US08621580B2

公开(公告)日：2013-12-31

申请号：US13197998

申请日：2011-08-04

申请人： Jason K. Resch ,  Gary W. Grube ,  S. Christopher Gladwin ,  Thomas Franklin Shirley, Jr. ,  Timothy W. Markison

发明人： Jason K. Resch ,  Gary W. Grube ,  S. Christopher Gladwin ,  Thomas Franklin Shirley, Jr. ,  Timothy W. Markison

IPC分类号： G06F7/04 ,  G06F17/30 ,  G06F15/177

CPC分类号： H04L63/10 ,  G06F21/10 ,  H04L9/085 ,  H04L9/0863 ,  H04L9/0869 ,  H04L9/0894 ,  H04L63/08 ,  H04L63/083 ,  H04L67/1097 ,  H04L2209/04 ,  H04L2209/34

摘要： A method begins by a processing module obtaining a set of recovered random numbers, decoding encrypted share slices to produce a set of encrypted shares, and obtaining a set of personalized authenticating values regarding user access to data. The method continues with the processing module generating a set of hidden passwords based on the set of personalized authenticating values, generating a set of blinded passwords based on the set of hidden passwords and a set of blinded random numbers, and generating a set of passkeys based on the set of blinded passwords and the set of recovered random numbers. The method continues with the processing module generating a set of decryption keys based on the set of blinded random numbers and the set of passkeys, decrypting the set of encrypted shares to produce a set of shares, and decoding the set of shares to reproduce the data.

公开(公告)号：US10193689B2

公开(公告)日：2019-01-29

申请号：US13198078

申请日：2011-08-04

申请人： Jason K. Resch ,  Gary W. Grube ,  S. Christopher Gladwin ,  Thomas Franklin Shirley, Jr. ,  Timothy W. Markison

发明人： Jason K. Resch ,  Gary W. Grube ,  S. Christopher Gladwin ,  Thomas Franklin Shirley, Jr. ,  Timothy W. Markison

IPC分类号： H04L9/08

摘要： A method begins by a processing module applying a share encoding function on data to produce a plurality of encoded shares and generating a plurality of random numbers. The method continues with the processing module obtaining a set of personalized authenticating values regarding user access to the data and generating a plurality of hidden passwords based on the set of personalized authenticating values. The method continues with the processing module generating an encryption key based on a corresponding one of the plurality of hidden passwords and a corresponding one of the plurality of random numbers and encrypting the encoded share utilizing the encryption key to produce an encrypted share for each encoded share of the plurality of encoded shares. The method continues with the processing module facilitating storage of the plurality of random numbers and each of the encrypted shares.

公开(公告)号：US08522074B2

公开(公告)日：2013-08-27

申请号：US12842932

申请日：2010-07-23

申请人： Timothy W. Markison ,  Gary W. Grube ,  S. Christopher Gladwin ,  Alan E. Holmes ,  Wesley Leggette ,  Jason K. Resch

发明人： Timothy W. Markison ,  Gary W. Grube ,  S. Christopher Gladwin ,  Alan E. Holmes ,  Wesley Leggette ,  Jason K. Resch

IPC分类号： G06F11/00

CPC分类号： H04N21/2181 ,  G06F11/1008 ,  G06F11/1076 ,  G06F11/1092 ,  G11C29/52 ,  H03M13/09 ,  H03M13/15 ,  H03M13/1515 ,  H03M13/23 ,  H03M13/356 ,  H04N21/23439 ,  H04N21/2393 ,  H04N21/274 ,  H04N21/2747 ,  H04N21/6587

摘要： A method begins by a processing module receiving a first request to store a program. The method continues with the processing module determining first error coding dispersal storage function parameters and encoding a data segment of the program. The method continues with the processing module determining whether a second request to store the program is received. The method continues with the processing module encoding a second data segment of the program in accordance with the first error coding dispersal storage function parameters when the second request is not received. The method continues with the processing module changing the first error coding dispersal storage function parameters based on the another request to produce second error coding dispersal storage function parameters when the second request is received. The method continues with the processing module encoding the second data segment in accordance with the second error coding dispersal storage function parameters.

摘要翻译： 一种方法由处理模块开始，该处理模块接收存储程序的第一请求。 该方法继续处理模块确定第一错误编码分散存储功能参数并对程序的数据段进行编码。 该方法继续处理模块确定是否接收到存储程序的第二请求。 当不接收到第二请求时，该方法继续处理模块根据第一错误编码分散存储功能参数对程序的第二数据段进行编码。 该方法继续，处理模块基于另一请求改变第一错误编码分散存储功能参数，以在接收到第二请求时产生第二错误编码分散存储功能参数。 该方法继续处理模块根据第二错误编码分散存储功能参数对第二数据段进行编码。

公开(公告)号：US08458233B2

公开(公告)日：2013-06-04

申请号：US12885244

申请日：2010-09-17

申请人： S. Christopher Gladwin ,  Kumar Abhijeet ,  Greg Dhuse ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

发明人： S. Christopher Gladwin ,  Kumar Abhijeet ,  Greg Dhuse ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

IPC分类号： G06F7/00 ,  G06F17/30

CPC分类号： G06F21/602 ,  G06F3/0608 ,  G06F3/0619 ,  G06F3/0641 ,  G06F3/067 ,  G06F11/1076 ,  G06F11/1092 ,  G06F17/30067 ,  G06F17/30159 ,  G06F17/30194 ,  G06F17/302 ,  G06F17/30283 ,  G06F21/6272 ,  G06F2211/1028 ,  G06F2221/2107 ,  H04L9/0861 ,  H04L63/0428 ,  H04L69/04

摘要： A method begins with a processing module receiving, from a requesting device, a data storage request that includes data for storage. The method continues with the processing module determining whether substantially identical data is currently stored in a dispersed storage network (DSN) memory. The method continues with the processing module encoding at least a portion of the data using an error coding dispersal storage function to produce a set of encoded data slices, sending the set of encoded data slices to the DSN memory for storage therein, and generating a unique retrieval matrix for the requesting device, wherein the unique retrieval matrix identifies a sub-set of encoded data slices of the set of encoded data slices for subsequent retrieval of the at least a portion of the data, when the substantially identical data is not stored in the DSN memory.

摘要翻译： 方法开始于处理模块从请求设备接收包括用于存储的数据的数据存储请求。 该方法继续处理模块确定当前是否将基本相同的数据存储在分散的存储网络（DSN）存储器中。 该方法继续处理模块使用错误编码分散存储功能来编码数据的至少一部分，以产生一组编码数据片，将该组编码数据片段发送到DSN存储器以存储在其中，并产生唯一的 用于所述请求设备的检索矩阵，其中所述唯一检索矩阵识别所述编码数据片段集合中的编码数据片段的子集，用于随后检索所述数据的至少一部分，当所述基本相同的数据未被存储在 DSN内存。

公开(公告)号：US20130014254A1

公开(公告)日：2013-01-10

申请号：US13527881

申请日：2012-06-20

申请人： S. Christopher Gladwin ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

发明人： S. Christopher Gladwin ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

IPC分类号： G06F21/24 ,  G06F11/07

CPC分类号： G06F11/1092 ,  G06F3/0619 ,  G06F3/064 ,  G06F3/067 ,  G06F11/1084 ,  G06F11/1096 ,  G06F2211/1028

摘要： A method for responding to a security threat for a maintenance free storage container begins by a dispersed storage (DS) processing module identifying a security threat for the maintenance free storage container, wherein the maintenance free storage container allows for multiple storage servers of a plurality of storage servers to be in a failure mode without replacement. The method continues with the DS processing module determining a failure mode level that is indicative of whether one or more of the multiple storage servers are in the failure mode. The method continues with the DS processing module selecting a security threat countermeasure based on the security threat and the failure mode level. The method continues with the DS processing module implementing the security threat countermeasure.

摘要翻译： 用于响应无维护存储容器的安全威胁的方法由识别无维护存储容器的安全威胁的分散存储（DS）处理模块开始，其中所述免维护存储容器允许多个存储容器的多个存储服务器 存储服务器处于故障模式，无需更换。 该方法继续DS处理模块确定指示多个存储服务器中的一个或多个处于故障模式的故障模式级别。 该方法继续DS处理模块基于安全威胁和故障模式级别选择安全威胁对策。 该方法继续执行安全威胁对策的DS处理模块。

公开(公告)号：US20120290878A1

公开(公告)日：2012-11-15

申请号：US13450212

申请日：2012-04-18

申请人： S. Christopher Gladwin ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

发明人： S. Christopher Gladwin ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

IPC分类号： G06F11/07 ,  G06F11/14

CPC分类号： G06F11/1092 ,  G06F11/0727 ,  G06F11/076 ,  G06F11/0775 ,  G06F11/0793

摘要： A maintenance free storage container includes a plurality of storage servers, wherein the maintenance free storage container allows for multiple storage servers of the plurality of storage servers to be in a failure mode without replacement. The maintenance free storage container further includes a container controller operable to manage failure mode information of the plurality of storage servers, manage mapping of a plurality of virtual storage servers to at least some of the plurality of storage servers based on the failure mode information, communicate storage server access requests with a device external to the maintenance free storage container using addressing of the plurality of virtual storage servers, and communicate the storage server access requests within the maintenance free storage container using addressing of the plurality of storage servers.

摘要翻译： 无维护存储容器包括多个存储服务器，其中所述免维护存储容器允许所述多个存储服务器中的多个存储服务器处于故障模式而不更换。 无维护存储容器还包括可操作用于管理多个存储服务器的故障模式信息的容器控制器，基于故障模式信息管理多个虚拟存储服务器至少部分存储服务器的映射，通信 使用所述多个虚拟存储服务器的寻址，使用所述免维护存储容器外部的设备存储服务器访问请求，以及使用所述多个存储服务器的寻址来传送所述维护空闲存储容器内的所述存储服务器访问请求。

公开(公告)号：US20110107180A1

公开(公告)日：2011-05-05

申请号：US12842932

申请日：2010-07-23

申请人： Timothy W. Markison ,  Gary W. Grube ,  S. Christopher Gladwin ,  Alan E. Holmes ,  Wesley Leggette ,  Jason K. Resch

发明人： Timothy W. Markison ,  Gary W. Grube ,  S. Christopher Gladwin ,  Alan E. Holmes ,  Wesley Leggette ,  Jason K. Resch

IPC分类号： H03M13/05 ,  G06F11/10

CPC分类号： H04N21/2181 ,  G06F11/1008 ,  G06F11/1076 ,  G06F11/1092 ,  G11C29/52 ,  H03M13/09 ,  H03M13/15 ,  H03M13/1515 ,  H03M13/23 ,  H03M13/356 ,  H04N21/23439 ,  H04N21/2393 ,  H04N21/274 ,  H04N21/2747 ,  H04N21/6587

摘要： A method begins by a processing module receiving a first request to store a program. The method continues with the processing module determining first error coding dispersal storage function parameters and encoding a data segment of the program. The method continues with the processing module determining whether a second request to store the program is received. The method continues with the processing module encoding a second data segment of the program in accordance with the first error coding dispersal storage function parameters when the second request is not received. The method continues with the processing module changing the first error coding dispersal storage function parameters based on the another request to produce second error coding dispersal storage function parameters when the second request is received. The method continues with the processing module encoding the second data segment in accordance with the second error coding dispersal storage function parameters.

摘要翻译： 一种方法由处理模块开始，该处理模块接收存储程序的第一请求。 该方法继续处理模块确定第一错误编码分散存储功能参数并对程序的数据段进行编码。 该方法继续处理模块确定是否接收到存储程序的第二请求。 当不接收到第二请求时，该方法继续处理模块根据第一错误编码分散存储功能参数对程序的第二数据段进行编码。 该方法继续，处理模块基于另一请求改变第一错误编码分散存储功能参数，以在接收到第二请求时产生第二错误编码分散存储功能参数。 该方法继续处理模块根据第二错误编码分散存储功能参数对第二数据段进行编码。

公开(公告)号：US09462316B2

公开(公告)日：2016-10-04

申请号：US12903212

申请日：2010-10-13

申请人： S. Christopher Gladwin ,  Kumar Abhijeet ,  Greg Dhuse ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

发明人： S. Christopher Gladwin ,  Kumar Abhijeet ,  Greg Dhuse ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

IPC分类号： G06F15/167 ,  H04N21/274 ,  H04L29/08 ,  H04L29/06 ,  G06F21/10 ,  G06F21/80 ,  H04N21/218 ,  H04N21/231 ,  H04N21/232

CPC分类号： H04N21/274 ,  G06F21/10 ,  G06F21/80 ,  G06F2221/2129 ,  G06F2221/2151 ,  H04L29/06 ,  H04L29/08072 ,  H04L63/102 ,  H04L67/06 ,  H04L67/1097 ,  H04N21/2181 ,  H04N21/23116 ,  H04N21/232

摘要： A method begins by a processing module obtaining a unique retrieval matrix based on an identity of the playback device and sending a request for retrieval of a set of encoded broadcast data slices to a dispersed storage network (DSN) memory, wherein the request includes the unique retrieval matrix and identity of the set of encoded broadcast data slices. The method continues with the processing module receiving a subset of the set of encoded broadcast data slices from the DSN memory, wherein the subset of the set of encoded broadcast data slices is based on the unique retrieval matrix. The method continues with the processing module storing the subset of the sets of encoded broadcast data slices.

摘要翻译： 一种方法由处理模块开始，基于回放设备的身份获得唯一的检索矩阵，并向分散存储网络（DSN）存储器发送检索一组编码的广播数据片段的请求，其中该请求包括唯一的 检索矩阵和编码广播数据片集的身份。 该方法继续处理模块从DSN存储器接收编码的广播数据片段集合的子集，其中编码的广播数据片段集合的子集基于唯一的检索矩阵。 该方法继续处理模块存储编码广播数据片段集合的子集。

公开(公告)号：US08954787B2

公开(公告)日：2015-02-10

申请号：US13450212

申请日：2012-04-18

申请人： S. Christopher Gladwin ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

发明人： S. Christopher Gladwin ,  Jason K. Resch ,  Gary W. Grube ,  Timothy W. Markison

IPC分类号： G06F11/00 ,  G06F11/07 ,  G06F11/10

CPC分类号： G06F11/1092 ,  G06F11/0727 ,  G06F11/076 ,  G06F11/0775 ,  G06F11/0793

摘要： A maintenance free storage container includes a plurality of storage servers, wherein the maintenance free storage container allows for multiple storage servers of the plurality of storage servers to be in a failure mode without replacement. The maintenance free storage container further includes a container controller operable to manage failure mode information of the plurality of storage servers, manage mapping of a plurality of virtual storage servers to at least some of the plurality of storage servers based on the failure mode information, communicate storage server access requests with a device external to the maintenance free storage container using addressing of the plurality of virtual storage servers, and communicate the storage server access requests within the maintenance free storage container using addressing of the plurality of storage servers.

摘要翻译： 无维护存储容器包括多个存储服务器，其中所述免维护存储容器允许所述多个存储服务器中的多个存储服务器处于故障模式而不更换。 无维护存储容器还包括可操作用于管理多个存储服务器的故障模式信息的容器控制器，基于故障模式信息管理多个虚拟存储服务器至少部分存储服务器的映射，通信 使用所述多个虚拟存储服务器的寻址，使用所述免维护存储容器外部的设备存储服务器访问请求，以及使用所述多个存储服务器的寻址来传送所述维护空闲存储容器内的所述存储服务器访问请求。

公开(公告)号：US08918693B2

公开(公告)日：2014-12-23

申请号：US13251618

申请日：2011-10-03

申请人： Greg Dhuse ,  Andrew Baptist ,  Ilya Volvovski ,  Gary W. Grube ,  Timothy W. Markison ,  S. Christopher Gladwin ,  Jason K. Resch

发明人： Greg Dhuse ,  Andrew Baptist ,  Ilya Volvovski ,  Gary W. Grube ,  Timothy W. Markison ,  S. Christopher Gladwin ,  Jason K. Resch

IPC分类号： H03M13/00 ,  H03M13/29 ,  G06F17/30 ,  G06F11/10 ,  H03M13/05 ,  H04L12/707 ,  H03M13/37

CPC分类号： H03M13/29 ,  G06F11/1028 ,  G06F11/1076 ,  G06F17/30194 ,  H03M13/05 ,  H03M13/1515 ,  H03M13/373 ,  H03M13/3761 ,  H04L45/24

摘要： A method begins by a processing module dispersed storage error encoding fundamental component data of data in accordance with dispersed storage error coding parameters to produce a plurality of sets of encoded data slices, wherein the data includes the fundamental component data and enhancement component data. The method continues with the processing module transmitting a set of the plurality of sets of encoded data slices and transmitting a corresponding portion of the enhancement component data substantially concurrently with the transmitting of the set of the plurality of sets of encoded data slices.

摘要翻译： 一种方法开始于处理模块，根据分散的存储错误编码参数分散存储错误编码数据的基本分量数据，以产生多组编码数据片，其中数据包括基本分量数据和增强分量数据。 该方法继续处理模块传送多组编码数据片段的集合，并且基本上与发送多组编码数据片段的集合一起发送增强分量数据的相应部分。