公开(公告)号：US20160352720A1

公开(公告)日：2016-12-01

申请号：US14726442

申请日：2015-05-29

Applicant: Pure Storage, Inc.

Inventor： JIMMY T. HU ,  TERENCE W. NOONAN ,  NEIL A. VACHHARAJANI ,  DAQUAN ZUO

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L67/10 ,  H04L63/0807 ,  H04L67/1097

Abstract: Managing a storage array includes: receiving, by a client-side array services module from a cloud-based security module through data communications on a wide area network, a token representing authentication of user credentials; and managing, by the client-side array services module, a storage array only through data communications on a local area network, including sending, to the storage array, the token with a management instruction.

Abstract translation: 管理存储阵列包括：由客户端阵列服务模块通过广域网上的数据通信从基于云的安全模块接收表示用户凭证的认证的令牌; 并且由客户端阵列服务模块仅通过局域网上的数据通信来管理存储阵列，包括通过管理指令向存储阵列发送令牌。

公开(公告)号：US20240193311A1

公开(公告)日：2024-06-13

申请号：US18525605

申请日：2023-11-30

Applicant: PURE STORAGE, INC.

Inventor： ETHAN L. MILLER ,  JOHN COLGROVE ,  MARK L. MCAULIFFE ,  NAVEEN NEELAKANTAM ,  MARCO SANVIDO ,  NEIL A. VACHHARAJANI ,  TAHER VOHRA

IPC: G06F21/78 ,  G06F21/62 ,  H04L9/06 ,  H04L9/08

CPC classification number: G06F21/78 ,  G06F21/6227 ,  H04L9/065 ,  H04L9/0866 ,  H04L9/0894

Abstract: Utilizing a non-repeating identifier to encrypt data, including: receiving a request to write data to a storage device; selecting a segment-offset pair where the data will be stored, where the selected segment-offset pair is unique to every other segment-offset pair utilized during the lifetime of the storage device; and encrypting the data in dependence upon an identifier of the segment-offset pair.

公开(公告)号：US20220086219A1

公开(公告)日：2022-03-17

申请号：US17536969

申请日：2021-11-29

Applicant: PURE STORAGE, INC.

Inventor： JIMMY T. HU ,  TERENCE W. NOONAN ,  NEIL A. VACHHARAJANI ,  DAQUAN ZUO

IPC: H04L29/08 ,  H04L29/06

Abstract: Managing a storage system, including: receiving, over a first network, user credentials associated with an access request to a storage system; sending, over a second network to a cloud-based security module, the user credentials; receiving, over the second network from the cloud-based security module, a token representing that the user credentials were successfully authenticated by the cloud-based security module; and sending, over the first network to the storage system, the token with a management instruction, wherein the storage system is not coupled for data communications to the cloud-based security module.