公开(公告)号：US10178079B2

公开(公告)日：2019-01-08

申请号：US15361558

申请日：2016-11-28

Applicant: NetApp Inc.

Inventor： Craig Fulmer Everhart ,  Steven Ewing

IPC: H04L29/06 ,  H04L9/08 ,  H04L9/32

Abstract: Exemplary embodiments provide various techniques for managing groups of authenticated entities. In one exemplary computer-implemented method, an entity accesses a group roster that includes a first group identifier identifying a first group, a first group digital certificate associated with the first group, and a first entity identifier identifying the entity being a member of the first group. The entity also receives a request to update the group roster. Here, the request includes a second group identifier identifying a second group and a second group digital certificate associated with the second group. In response to the request, the entity replaces the first group identifier in the group roster with the second group identifier. Additionally, in response to the request, the entity replaces the first group digital certificate with the second group digital certificate. The replacements change a membership of the entity from the first group to the second group.

公开(公告)号：US20160132841A1

公开(公告)日：2016-05-12

申请号：US14539052

申请日：2014-11-12

Applicant: NetApp Inc.

Inventor： Craig Fulmer Everhart

IPC: G06Q20/02 ,  G06Q20/38

CPC classification number: G06Q20/027 ,  G06Q20/08 ,  G06Q20/12 ,  G06Q20/3829

Abstract: One or more techniques and/or systems are provided for facilitating transactions across multiple transactional domains. For example, a first committer stores first data according to a first transactional domain (e.g., communication protocol data of a smart television) and a second committer stores second data according to a second transactional domain (e.g., communication protocol data of a mobile device). The first committer may commit to updating the first data from an old data state to a new data state (e.g., update from an unauthenticated protocol to an authenticated protocol). The first committer may instruct the second committer to perform a second commit of the second data to the new data state. If the second commit succeeds, then the first committer may utilize the new data state (e.g., utilize the authenticated protocol for communication) otherwise the first committer may utilize the old data state (e.g., utilize the unauthenticated protocol for communication).

Abstract translation: 提供一个或多个技术和/或系统以促进跨多个事务域的事务。 例如，第一提交者根据第一事务域（例如，智能电视的通信协议数据）存储第一数据，而第二提交者根据第二事务域（例如，移动设备的通信协议数据）存储第二数据， 。 第一提交者可以承诺将第一数据从旧的数据状态更新到新的数据状态（例如，从未认证的协议更新为认证的协议）。 第一提交者可以指示第二提交者执行第二数据的第二次提交到新的数据状态。 如果第二次提交成功，则第一提交者可以利用新的数据状态（例如，利用经认证的协议进行通信），否则第一提交者可以利用旧的数据状态（例如，利用未经认证的协议进行通信）。

公开(公告)号：US20160112408A1

公开(公告)日：2016-04-21

申请号：US14978557

申请日：2015-12-22

Applicant: NETAPP, INC.

Inventor： Craig Fulmer Everhart ,  David Slik

IPC: H04L29/06 ,  H04L9/32 ,  G06F21/33

CPC classification number: H04L63/0823 ,  G06F21/33 ,  G06F21/44 ,  H04L9/3247 ,  H04L9/3268 ,  H04L63/065 ,  H04L63/104

Abstract: Example embodiments provide various techniques for securing communications within a group of entities. In one example method, a request from an entity to join the group is received and a signed, digital certificate associated with the entity is accessed. Here, the signed, digital certificate is signed with a group private key that is associated with a certification authority for the group. The signed, digital certificate is added to a group roster, and this addition is to admit the entity into the group. The group roster with the signed, digital certificate is itself signed with the group private key and distributed to the group, which includes the entity that transmitted the request. Communication to the entity is then encrypted using the signed, digital certificate included in the group roster.

Abstract translation: 示例性实施例提供用于保护一组实体内的通信的各种技术。 在一个示例性方法中，接收来自实体加入组的请求，并且访问与该实体相关联的签名的数字证书。 这里，签名的数字证书使用与该组的认证机构相关联的组私钥进行签名。 签名的数字证书被添加到组名册中，并且这个添加是将实体接纳到组中。 具有签名的数字证书的组名册本身已经用组私钥签名并分发给组，其中包括发送请求的实体。 然后使用组名册中包含的签名的数字证书对与该实体的通信进行加密。

公开(公告)号：US11070479B2

公开(公告)日：2021-07-20

申请号：US16689386

申请日：2019-11-20

Applicant: NetApp Inc.

Inventor： Craig Fulmer Everhart ,  Vishwajith Shivappa

IPC: G06F15/173 ,  H04L12/825 ,  H04L29/08 ,  G06F9/50

Abstract: One or more techniques and/or devices are provided for dynamic resource allocation based upon network flow control. For example, a first counter, corresponding to a count of communication availability signals provided by a network interface to a storage process, may be maintained. A second counter, corresponding to a count of communication unavailability signals provided by the network interface to the storage process, may be maintained. Responsive to the first counter exceeding a resource allocation threshold, additional resources may be dynamically allocated to the storage process during operation of the storage process. Responsive to the second counter exceeding a resource deallocation threshold, resources may be dynamically deallocated from the storage process during operation of the storage process. In this way, resources allocation for the storage process may be dynamically adjusted based upon real-time network flow control information indicative of whether the storage process is efficiently utilizing network communication channel availability.

公开(公告)号：US09917784B2

公开(公告)日：2018-03-13

申请号：US14842086

申请日：2015-09-01

Applicant: NetApp Inc.

Inventor： Craig Fulmer Everhart ,  Vishwajith Shivappa

IPC: G06F15/173 ,  H04L12/825 ,  H04L29/08 ,  G06F9/50

CPC classification number: H04L47/25 ,  G06F9/5011 ,  H04L67/1097

Abstract: One or more techniques and/or devices are provided for dynamic resource allocation based upon network flow control. For example, a first counter, corresponding to a count of communication availability signals provided by a network interface to a storage process, may be maintained. A second counter, corresponding to a count of communication unavailability signals provided by the network interface to the storage process, may be maintained. Responsive to the first counter exceeding a resource allocation threshold, additional resources may be dynamically allocated to the storage process during operation of the storage process. Responsive to the second counter exceeding a resource deallocation threshold, resources may be dynamically deallocated from the storage process during operation of the storage process. In this way, resources allocation for the storage process may be dynamically adjusted based upon real-time network flow control information indicative of whether the storage process is efficiently utilizing network communication channel availability.

公开(公告)号：US09565276B2

公开(公告)日：2017-02-07

申请号：US14500973

申请日：2014-09-29

Applicant: NetApp, Inc.

Inventor： Craig Fulmer Everhart ,  Daniel Joseph Ellard

IPC: G06F15/16 ,  H04L29/06 ,  H04L29/08 ,  H04L29/12

CPC classification number: H04L67/42 ,  H04L61/1511 ,  H04L61/1552 ,  H04L67/2814

Abstract: In some embodiments, a first location server, in response to a request from a client to access an object, determines whether a first location information stored at the first location server indicates locations of instance(s) of the object. The first location server, in response to a determination that the first location information indicates the locations of the instances of the object, determines a first location of a first instance of the object at a first payload server and a second location of a second instance of the object at a second payload server from the first location information. The first location server determines priority values of the first and second locations. The first location server generates a reply to the request, the reply indicating the first and second locations of the first and second instances of the object, and the priority values of the first and second locations.

Abstract translation: 在一些实施例中，响应于客户端访问对象的请求，第一位置服务器确定存储在第一位置服务器处的第一位置信息是否指示对象的实例的位置。 第一位置服务器响应于确定第一位置信息指示对象的实例的位置，确定在第一有效载荷服务器处的对象的第一实例的第一位置和第二位置信息的第二实例的第二位置 所述对象在第二有效载荷服务器处从所述第一位置信息。 第一位置服务器确定第一和第二位置的优先级值。 第一位置服务器产生对请求的答复，该回复指示对象的第一和第二实例的第一和第二位置以及第一和第二位置的优先级值。

公开(公告)号：US20150019635A1

公开(公告)日：2015-01-15

申请号：US14500973

申请日：2014-09-29

Applicant: NetApp, Inc.

Inventor： Craig Fulmer Everhart ,  Daniel Joseph Ellard

IPC: H04L29/06

CPC classification number: H04L67/42 ,  H04L61/1511 ,  H04L61/1552 ,  H04L67/2814

Abstract: In some embodiments, a first location server, in response to a request from a client to access an object, determines whether a first location information stored at the first location server indicates locations of instance(s) of the object. The first location server, in response to a determination that the first location information indicates the locations of the instances of the object, determines a first location of a first instance of the object at a first payload server and a second location of a second instance of the object at a second payload server from the first location information. The first location server determines priority values of the first and second locations. The first location server generates a reply to the request, the reply indicating the first and second locations of the first and second instances of the object, and the priority values of the first and second locations.

Abstract translation: 在一些实施例中，响应于客户端访问对象的请求，第一位置服务器确定存储在第一位置服务器处的第一位置信息是否指示对象的实例的位置。 第一位置服务器响应于确定第一位置信息指示对象的实例的位置，确定在第一有效载荷服务器处的对象的第一实例的第一位置和第二位置信息的第二实例的第二位置 所述对象在第二有效载荷服务器处从所述第一位置信息。 第一位置服务器确定第一和第二位置的优先级值。 第一位置服务器产生对请求的答复，该回复指示对象的第一和第二实例的第一和第二位置以及第一和第二位置的优先级值。

公开(公告)号：US10523573B2

公开(公告)日：2019-12-31

申请号：US15848840

申请日：2017-12-20

Applicant: NetApp Inc.

Inventor： Craig Fulmer Everhart ,  Vishwajith Shivappa

IPC: G06F15/173 ,  H04L12/825 ,  H04L29/08 ,  G06F9/50

Abstract: One or more techniques and/or devices are provided for dynamic resource allocation based upon network flow control. For example, a first counter, corresponding to a count of communication availability signals provided by a network interface to a storage process, may be maintained. A second counter, corresponding to a count of communication unavailability signals provided by the network interface to the storage process, may be maintained. Responsive to the first counter exceeding a resource allocation threshold, additional resources may be dynamically allocated to the storage process during operation of the storage process. Responsive to the second counter exceeding a resource deallocation threshold, resources may be dynamically deallocated from the storage process during operation of the storage process. In this way, resources allocation for the storage process may be dynamically adjusted based upon real-time network flow control information indicative of whether the storage process is efficiently utilizing network communication channel availability.

公开(公告)号：US20180159783A1

公开(公告)日：2018-06-07

申请号：US15848840

申请日：2017-12-20

Applicant: NetApp Inc.

Inventor： Craig Fulmer Everhart ,  Vishwajith Shivappa

IPC: H04L12/825 ,  G06F9/50 ,  H04L29/08

CPC classification number: H04L47/25 ,  G06F9/5011 ,  H04L67/1097

Abstract: One or more techniques and/or devices are provided for dynamic resource allocation based upon network flow control. For example, a first counter, corresponding to a count of communication availability signals provided by a network interface to a storage process, may be maintained. A second counter, corresponding to a count of communication unavailability signals provided by the network interface to the storage process, may be maintained. Responsive to the first counter exceeding a resource allocation threshold, additional resources may be dynamically allocated to the storage process during operation of the storage process. Responsive to the second counter exceeding a resource deallocation threshold, resources may be dynamically deallocated from the storage process during operation of the storage process. In this way, resources allocation for the storage process may be dynamically adjusted based upon real-time network flow control information indicative of whether the storage process is efficiently utilizing network communication channel availability.

公开(公告)号：US20170034064A1

公开(公告)日：2017-02-02

申请号：US14842086

申请日：2015-09-01

Applicant: NetApp Inc.

Inventor： Craig Fulmer Everhart ,  Vishwajith Shivappa

IPC: H04L12/825 ,  H04L29/08

CPC classification number: H04L47/25 ,  G06F9/5011 ,  H04L67/1097

Abstract: One or more techniques and/or devices are provided for dynamic resource allocation based upon network flow control. For example, a first counter, corresponding to a count of communication availability signals provided by a network interface to a storage process, may be maintained. A second counter, corresponding to a count of communication unavailability signals provided by the network interface to the storage process, may be maintained. Responsive to the first counter exceeding a resource allocation threshold, additional resources may be dynamically allocated to the storage process during operation of the storage process. Responsive to the second counter exceeding a resource deallocation threshold, resources may be dynamically deallocated from the storage process during operation of the storage process. In this way, resources allocation for the storage process may be dynamically adjusted based upon real-time network flow control information indicative of whether the storage process is efficiently utilizing network communication channel availability.

Abstract translation: 提供一种或多种技术和/或设备用于基于网络流控制的动态资源分配。 例如，可以维持对应于由网络接口​​向存储处理提供的通信可用性信号的计数的第一计数器。 可以维持对应于由网络接口​​向存储处理提供的通信不可用信号的计数的第二计数器。 响应于超过资源分配阈值的第一计数器，可以在存储过程的操作期间将附加资源动态分配给存储过程。 响应于超过资源分配阈值的第二计数器，可以在存储过程的操作期间从存储过程动态地释放资源。 以这种方式，可以基于指示存储过程是否有效利用网络通信信道可用性的实时网络流量控制信息来动态地调整用于存储过程的资源分配。