公开(公告)号：US09798736B2

公开(公告)日：2017-10-24

申请号：US13901491

申请日：2013-05-23

Applicant: NetApp, Inc.

Inventor： Eric Sirianni ,  Philip Bryan Clay

IPC: G06F17/30 ,  G06F11/14

CPC classification number: G06F17/30221 ,  G06F11/1415 ,  G06F11/1446

Abstract: In one aspect, dynamic determination generates a storage resource graph corresponding to a storage topology. The generating may comprise iterating through storage resources in the storage topology and using a discovery handler to generate a node in the storage resource graph corresponding to each of the iterated storage resources. Dynamic determination generates an operation graph by iterating through nodes in the storage resource graph and using an operating handler to generate operation-specific metadata corresponding to each iterated node of the storage resource graph. Dynamic generating executes the operation graph in a way specific to the operation.

公开(公告)号：US09043598B2

公开(公告)日：2015-05-26

申请号：US14269891

申请日：2014-05-05

Applicant: NetApp, Inc.

Inventor： Philip Bryan Clay

IPC: H04L29/06 ,  H04L9/32

CPC classification number: H04L63/0869 ,  H04L9/3273 ,  H04L63/065 ,  H04L63/104

Abstract: Systems and methods which facilitate secure multicast communications between any valid node of a cluster using authentication between a node joining the cluster and any single node which is validly part of the cluster are disclosed. In accordance with embodiments, a cluster key is utilized to provide security with respect to intra-cluster communications. The cluster key of embodiments is shared by a node which is already part of the cluster with a node joining the cluster only after these two nodes mutually authenticate one another. The mutual authentication handshake of embodiments implements a protocol in which a session key is calculated by both nodes, thereby providing a secure means by which a cluster key may be shared. Having the cluster key, each node of the cluster is enabled to securely communicate with any other node of the cluster, whether individually (e.g., unicast) or collectively (e.g., multicast), according to embodiments.

Abstract translation: 公开了利用加入集群的节点与有效地成为集群的一部分的任何单个节点之间的认证来促进集群的任何有效节点之间的安全组播通信的系统和方法。 根据实施例，使用集群密钥来提供关于集群内通信的安全性。 实施例的集群密钥由已经是集群的一部分的节点共享，节点仅在这两个节点彼此认证之后才加入集群。 实施例的相互认证握手实现了由两个节点计算会话密钥的协议，从而提供可以共享集群密钥的安全装置。 具有集群密钥，根据实施例，集群的每个节点能够独立地（例如，单播）或集体地（例如，多播）来安全地与集群的任何其他节点进行通信。

公开(公告)号：US20140245390A1

公开(公告)日：2014-08-28

申请号：US14269891

申请日：2014-05-05

Applicant: NetApp, Inc.

Inventor： Philip Bryan Clay

IPC: H04L29/06

CPC classification number: H04L63/0869 ,  H04L9/3273 ,  H04L63/065 ,  H04L63/104

Abstract: Systems and methods which facilitate secure multicast communications between any valid node of a cluster using authentication between a node joining the cluster and any single node which is validly part of the cluster are disclosed. In accordance with embodiments, a cluster key is utilized to provide security with respect to intra-cluster communications. The cluster key of embodiments is shared by a node which is already part of the cluster with a node joining the cluster only after these two nodes mutually authenticate one another. The mutual authentication handshake of embodiments implements a protocol in which a session key is calculated by both nodes, thereby providing a secure means by which a cluster key may be shared. Having the cluster key, each node of the cluster is enabled to securely communicate with any other node of the cluster, whether individually (e.g., unicast) or collectively (e.g., multicast), according to embodiments.

Abstract translation: 公开了利用加入集群的节点与有效地成为集群的一部分的任何单个节点之间的认证来促进集群的任何有效节点之间的安全组播通信的系统和方法。 根据实施例，使用集群密钥来提供关于集群内通信的安全性。 实施例的集群密钥由已经是集群的一部分的节点共享，节点仅在这两个节点彼此认证之后才加入集群。 实施例的相互认证握手实现了由两个节点计算会话密钥的协议，从而提供可以共享集群密钥的安全装置。 具有集群密钥，根据实施例，集群的每个节点能够独立地（例如，单播）或集体地（例如，多播）来安全地与集群的任何其他节点进行通信。