Access to content addressable data over a network
    1.
    发明授权
    Access to content addressable data over a network 有权
    通过网络访问内容可寻址数据

    公开(公告)号:US07487551B2

    公开(公告)日:2009-02-03

    申请号:US11296674

    申请日:2005-12-07

    IPC分类号: G06F21/00

    摘要: Access to content addressable data on a network is facilitated using digital information storing devices or data repositories (“silos”) that monitor broadcast data requests over the network. A number of silos automatically monitor both data requests and data itself that are broadcast over a network. The silos selectively store data. Each silo responds to data requests broadcast over the network with data the silo has previously intercepted. A content addressable file scheme is used to enable the data repositories to reliably identify data being requested. When a data request is received, each silo evaluates whether it has all or a portion of the data being requested and responds to requests when it has the data. Requests for data are implemented by broadcasting a cryptographic hash data identifier of the data file needed. The data identifier is used by a silo to determine which data to receive and store.

    摘要翻译: 使用通过网络监视广播数据请求的数字信息存储设备或数据存储库(“孤岛”)来促进访问网络上的内容可寻址数据。 许多孤岛自动监视通过网络广播的数据请求和数据本身。 仓库有选择地存储数据。 每个筒仓响应数据请求,通过网络传播数据,该数据先前已被拦截。 内容可寻址文件方案用于使数据存储库可靠地识别正在请求的数据。 当接收到数据请求时,每个silo评估它是否具有所请求的全部或一部分数据,并且在具有数据时响应请求。 通过广播所需数据文件的加密哈希数据标识符来实现数据请求。 数据标识符由筒仓使用以确定要接收和存储的数据。

    Access to content addressable data over a network
    2.
    发明授权
    Access to content addressable data over a network 有权
    通过网络访问内容可寻址数据

    公开(公告)号:US08074289B1

    公开(公告)日:2011-12-06

    申请号:US12129605

    申请日:2008-05-29

    IPC分类号: G06F7/04

    CPC分类号: H04L63/065 H04L63/0428

    摘要: Access to content addressable data on a network is facilitated using digital information storing devices or data repositories (“silos”) that monitor broadcast data requests over the network. A number of silos automatically monitor both data requests and data itself that are broadcast over a network. The silos selectively store data. Each silo responds to data requests broadcast over the network with data the silo has previously intercepted. A content addressable file scheme is used to enable the data repositories to reliably identify data being requested. When a data request is received, each silo evaluates whether it has all or a portion of the data being requested and responds to requests when it has the data. Requests for data are implemented by broadcasting a cryptographic hash data identifier of the data file needed. The data identifier is used by a silo to determine which data to receive and store. A silo includes a network interface, a digital asset collector, an asset request list, asset storage, an asset identifier processor and an asset supplier. The asset identifier processor computes a cryptographic hash asset identifier for a received asset and compares it to an asset identifier on its asset request list to verify it has the correct asset. A hash of a list of assets is also computed and broadcast over the network. When the hash of the list of assets is received by a silo, it places all the assets in its asset request list.

    摘要翻译: 使用通过网络监视广播数据请求的数字信息存储设备或数据存储库(“孤岛”)来促进访问网络上的内容可寻址数据。 许多孤岛自动监视通过网络广播的数据请求和数据本身。 仓库有选择地存储数据。 每个筒仓响应数据请求,通过网络传播数据,该数据先前已被拦截。 内容可寻址文件方案用于使数据存储库可靠地识别正在请求的数据。 当接收到数据请求时,每个silo评估它是否具有所请求的全部或一部分数据,并且在具有数据时响应请求。 通过广播所需数据文件的加密哈希数据标识符来实现数据请求。 数据标识符由筒仓使用以确定要接收和存储的数据。 仓库包括网络接口,数字资产收集器,资产请求列表,资产存储,资产标识符处理器和资产提供者。 资产标识处理器计算接收到的资产的加密哈希资产标识符,并将其与其资产请求列表上的资产标识符进行比较,以验证其具有正确的资产。 资产列表的散列也被计算并通过网络进行广播。 当资产清单的散列由仓库接收时,它将所有资产放在其资产请求列表中。

    Content addressable information encapsulation, representation, and transfer
    3.
    发明授权
    Content addressable information encapsulation, representation, and transfer 有权
    内容可寻址信息封装,表示和传输

    公开(公告)号:US07770228B2

    公开(公告)日:2010-08-03

    申请号:US11281157

    申请日:2005-11-17

    IPC分类号: G06F7/00

    摘要: Representing a number of assets on an originating computer begins with selecting the assets to be represented. Cryptographic hash asset identifiers are generated; each of the asset identifiers is computed using the contents of a particular asset. The asset identifier is a content-based or content-addressable asset name for the asset and is location independent. An asset list is generated that includes the asset identifiers computed from the assets. A cryptographic hash asset list identifier is generated that is computed from the asset list. The asset list identifier is stored for later retrieval. The amen selected are also stored for safekeeping either locally or on a computer network. In the event of loss of the files from the originating computer, the asset list identifier is retrieved. Using the asset list identifier, the original asset list is found and retrieved from its safe location.

    摘要翻译: 代表始发计算机上的一些资产开始于选择要表征的资产。 生成加密散列资产标识符; 使用特定资产的内容计算每个资产标识符。 资产标识符是资产的基于内容或内容可寻址的资产名称,与位置无关。 生成包含从资产计算的资产标识符的资产列表。 生成从资产列表计算的加密哈希资产列表标识符。 存储资产列表标识符以供以后检索。 所选择的美容也存储在本地或计算机网络上保存。 在从始发计算机丢失文件的情况下,检索资产列表标识符。 使用资产列表标识符,从其安全位置找到并检索原始资产列表。

    Granting access to a content unit stored on an object addressable storage system
    4.
    发明授权
    Granting access to a content unit stored on an object addressable storage system 有权
    授予存储在对象可寻址存储系统上的内容单元的访问权限

    公开(公告)号:US08346926B1

    公开(公告)日:2013-01-01

    申请号:US13025967

    申请日:2011-02-11

    IPC分类号: G06F15/173

    CPC分类号: G06F21/6218

    摘要: Aspects of the invention relate to sharing content stored on an object addressable storage (OAS) system among a plurality of users of the OAS system and authenticating users to an OAS system. In some embodiments, a user may store content units on the OAS system and control access by other users to these content units. In some embodiments, when a user grants one or more other users access to a content unit stored on the OAS system, the OAS system may send a notification of grant of access to the other user(s).

    摘要翻译: 本发明的方面涉及在OAS系统的多个用户之间共享存储在对象可寻址存储(OAS)系统上的内容,并向OAS系统认证用户。 在一些实施例中,用户可以在OAS系统上存储内容单元并且控制其他用户对这些内容单元的访问。 在一些实施例中,当用户授权一个或多个其他用户访问存储在OAS系统上的内容单元时,OAS系统可以向另一个用户发送授权访问的通知。

    Content addressable information encapsulation, representation, and transfer

    公开(公告)号:US07475432B2

    公开(公告)日:2009-01-06

    申请号:US10894284

    申请日:2004-07-19

    IPC分类号: G06F21/00

    摘要: Representing a number of assets on an originating computer begins with selecting the assets to be represented. Cryptographic hash asset identifiers are generated; each of the asset identifiers is computed using the contents of a particular asset. The asset identifier is a content-based or content-addressable asset name for the asset and is location independent. An asset list is generated that includes the asset identifiers computed from the assets. A cryptographic hash asset list identifier is generated that is computed from the asset list. The asset list identifier is stored for later retrieval. The assets selected are also stored for safekeeping either locally or on a computer network. In the event of loss of the files from the originating computer, the asset list identifier is retrieved. Using the asset list identifier, the original asset list is found and retrieved from its safe location. The asset identifiers from the retrieved asset list are used to find and retrieve the individual assets from their backup locations. The assets are verified by recomputing the cryptographic hash asset identifier for each asset retrieved and comparing it to the asset identifier from the asset list. The MD5 algorithm is used for the cryptographic hash function. Assets are retrieved using a multicast protocol. A series of importer programs searches for assets to retrieve in progressively more remote locations. Assets are retrieved whole or in segments.

    System and method for secure storage, transfer and retrieval of content addressable information
    7.
    发明授权
    System and method for secure storage, transfer and retrieval of content addressable information 有权
    用于安全存储,传输和检索内容可寻址信息的系统和方法

    公开(公告)号:US08261066B2

    公开(公告)日:2012-09-04

    申请号:US11094026

    申请日:2005-03-30

    IPC分类号: H04L29/06

    摘要: An algorithm (such as the MD5 hash function) is applied to a file to produce an intrinsic unique identifier (IUI) for the file (or message digest). The file is encrypted using its IUI as the key for the encryption algorithm. An algorithm is then applied to the encrypted file to produce an IUI for the encrypted file. The encrypted file is safely stored or transferred within a network and is uniquely identifiable by its IUI. The encrypted file is decrypted using the IUI of the plaintext file as the key. The IUI serves as both a key to decrypt the file and also as verification that the integrity of the plaintext file has not been compromised. IUIs for any number of such encrypted files may be assembled into a descriptor file that includes meta data for each file, the IUI of the plaintext file and the IUI of the encrypted file. An algorithm is applied to the descriptor file to produce an IUI for the descriptor file. The plaintext descriptor file is then encrypted using the descriptor file IUI as a key for the encryption algorithm. An algorithm is applied to the encrypted descriptor file to produce an IUI for the encrypted descriptor file. The IUI of the encrypted descriptor file is a location-independent identifier to locate the encrypted descriptor file. A flattened descriptor file includes the IUIs of encrypted data files and the IUI of the encrypted descriptor file. An algorithm is applied to the flattened descriptor file to produce its own IUI.

    摘要翻译: 一个算法(如MD5哈希函数)被应用于文件以产生文件(或消息摘要)的固有唯一标识符(IUI)。 该文件使用其IUI作为加密算法的密钥进行加密。 然后将一个算法应用于加密文件,以生成加密文件的IUI。 加密的文件在网络中安全地存储或传输,并由其IUI唯一标识。 使用明文文件的IUI作为密钥解密加密文件。 IUI既可用于解密文件,也可用作验证明文文件的完整性尚未被泄露。 可以将任何数量的这种加密文件的IUI组装成包括每个文件的元数据,明文文件的IUI和加密文件的IUI的描述符文件。 一个算法应用于描述符文件以产生描述符文件的IUI。 然后使用描述符文件IUI作为加密算法的密钥来加密明文描述符文件。 将一种算法应用于加密的描述符文件,以生成加密描述符文件的IUI。 加密描述符文件的IUI是一个位置无关的标识符来定位加密的描述符文件。 扁平化描述符文件包括加密数据文件的IUI和加密描述符文件的IUI。 一个算法应用于展平描述符文件以产生自己的IUI。

    Methods and apparatus for selecting a storage zone for a content unit
    8.
    发明授权
    Methods and apparatus for selecting a storage zone for a content unit 有权
    用于选择内容单元的存储区域的方法和装置

    公开(公告)号:US08046561B1

    公开(公告)日:2011-10-25

    申请号:US11644428

    申请日:2006-12-22

    IPC分类号: G06F12/02

    摘要: Some embodiments are directed to a technique for storing and/or locating content units stored on an object addressable storage (OAS) system, wherein each content unit is identified by an object identifier. The OAS system may comprise a plurality of zones, each of which stores content units. A mapping process may be defined that maps object identifiers for content units to zones on the OAS system. Thus, the storage location for a content unit on the OAS system may be the zone on the OAS system to which the object identifier for the content unit maps.

    摘要翻译: 一些实施例涉及用于存储和/或定位存储在对象可寻址存储(OAS)系统上的内容单元的技术,其中每个内容单元由对象标识符标识。 OAS系统可以包括多个区域,每个区域存储内容单元。 可以定义映射过程,将内容单元的对象标识符映射到OAS系统上的区域。 因此,OAS系统上的内容单元的存储位置可以是内容单元的对象标识符映射到的OAS系统上的区域。

    Methods and apparatus for mounting a file system
    9.
    发明授权
    Methods and apparatus for mounting a file system 有权
    安装文件系统的方法和装置

    公开(公告)号:US07958101B1

    公开(公告)日:2011-06-07

    申请号:US11324726

    申请日:2006-01-03

    IPC分类号: G06F17/30

    CPC分类号: G06F17/30091 G06F17/30126

    摘要: One aspect involves mounting a file system stored on a CAS system. The file system has a directory structure that includes a plurality of directories arranged in a hierarchy and including a root directory at the top of the hierarchy. Each of the directories is represented by a content unit stored on the CAS system, the content unit having a content address that is computed based, at least in part, on at least a portion of the content of the content unit. The file system is mounted by specifying the content address of the content unit that represents the root directory and determining the file system to be mounted based on the content address of the content unit that represents the root directory.

    摘要翻译: 一个方面涉及安装存储在CAS系统上的文件系统。 文件系统具有目录结构,该目录结构包括分层次排列的多个目录,并且在层次结构的顶部包括根目录。 每个目录由存储在CAS系统中的内容单元表示,内容单元具有至少部分地基于内容单元的内容的至少一部分来计算的内容地址。 通过指定表示根目录的内容单元的内容地址并基于表示根目录的内容单元的内容地址来确定要安装的文件系统来安装文件系统。

    Methods and apparatus for increasing the storage capacity of a zone of a storage system
    10.
    发明授权
    Methods and apparatus for increasing the storage capacity of a zone of a storage system 有权
    用于增加存储系统区域的存储容量的方法和装置

    公开(公告)号:US07913051B1

    公开(公告)日:2011-03-22

    申请号:US11644857

    申请日:2006-12-22

    IPC分类号: G06F12/02 G06F12/10

    CPC分类号: G06F17/30097

    摘要: Some embodiments are directed to a technique for storing and/or locating content units stored on an object addressable storage (OAS) system, wherein each content unit is identified by an object identifier. The OAS system may comprise a plurality of zones, each of which stores content units. A mapping process may be defined that maps object identifiers for content units to zones on the OAS system. Thus, the storage location for a content unit on the OAS system may be the zone on the OAS system to which the object identifier for the content unit maps.

    摘要翻译: 一些实施例涉及用于存储和/或定位存储在对象可寻址存储(OAS)系统上的内容单元的技术,其中每个内容单元由对象标识符标识。 OAS系统可以包括多个区域,每个区域存储内容单元。 可以定义映射过程,将内容单元的对象标识符映射到OAS系统上的区域。 因此,OAS系统上的内容单元的存储位置可以是内容单元的对象标识符映射到的OAS系统上的区域。