Systems, methods, and computer-readable media for data security

    公开(公告)号:US12132750B2

    公开(公告)日:2024-10-29

    申请号:US18209577

    申请日:2023-06-14

    申请人: Nasdaq, Inc.

    发明人: Stuart Ogawa

    摘要: Systems and methods are provided for data security. A server system provides data security using one or more processor devices, one or more communication interfaces, and one or more memory devices including computer-executable instructions. Those instructions cause the one or more processor devices to: monitor one or more requests or activities of a computing device; compare the monitored one or more requests or activities with a database of predetermined characteristics to determine whether the monitored one or more requests or activities indicates that the computing device downloaded or attempted to download more than a threshold number of data files or objects; and determine that the one or more requests or activities is suspicious when the comparing determines that the one or more requests or activities indicates that the computing device downloaded or attempted to download more than the threshold number of data files or objects, which causes a response to hinder the monitored one or more requests or activities.

    Global access to filesystem content

    公开(公告)号:US12105671B1

    公开(公告)日:2024-10-01

    申请号:US18306969

    申请日:2023-04-25

    申请人: VAST DATA LTD.

    摘要: A method for managing access to a shared file system entity (FSE), the method includes (i) managing access requests for reading and writing accessed parts of the FSE, by a current point of access storage system (POASS), the current POASS currently acts as a point of access (POA) for the access requests; wherein stored parts of the FSE are stored at multiple POASSs, the multiple POASSs comprise the current POASS and former POASSs; (ii) determining, by the current POASS and while managing the access requests, to store the stored parts of the FSE at a fewer number of the former POASSs; and (iii) reducing, by two or more of the former POASSs, the number of former POASSs that store the stored parts of the FSE.

    Encryption key rotation framework

    公开(公告)号:US12095913B2

    公开(公告)日:2024-09-17

    申请号:US18139755

    申请日:2023-04-26

    摘要: Techniques are described herein for efficiently and expeditiously performing key rotation and key replacement. In an embodiment, a key replacement request is received that specifies one or more key names of a plurality of key names. A location-to-key-name mapping that maps the plurality of key names to a plurality of encrypted-data locations is used to determine one or more encrypted-data locations that are mapped to the one or more key names. A first set of messages is generated where each message identifies a table that is associated with the one or more encrypted-data locations. The first set of messages is stored in a queue for processing by a first plurality of worker processes. Each worker process of the first plurality of worker processes retrieves a message of the first set of messages from the queue and generates a message of a second set of messages that identifies a subset of encrypted data records from the table identified in the message of the first set of messages. Each message of the second set of messages is stored in a distinct queue which is assigned to a worker process of a second plurality of worker processes. Each worker process of the second plurality of worker processes retrieves the message from the assigned queue, decrypts the subset of encrypted data records identified in the respective message, re-encrypts the decrypted data records using a new encryption key that corresponds to a new key name, and stores the re-encrypted data records in a database.

    Facilitating checkpoint locks for distributed systems

    公开(公告)号:US12079170B2

    公开(公告)日:2024-09-03

    申请号:US17810738

    申请日:2022-07-05

    发明人: Ronald Steinke

    摘要: Facilitating checkpoint locks for distributed systems is provided herein. A system can comprise a processor and a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations. The operations can comprise generating an ordered data structure that comprises respective identifications of a group of nodes granted a shared lock for a data file. The group of nodes can comprise a node having a respective identification of the respective identifications. The operations also can comprise, based on a determination that a checkpoint function associated with the shared lock has completed at a node of the group of nodes, removing the respective identification of the node from the ordered data structure. In an example, the shared lock can be a checkpoint application program interface. In another example, the group of nodes can be nodes arranged in a distributed computing hierarchy.

    GRAPH STATE DATA MANAGEMENT
    8.
    发明公开

    公开(公告)号:US20240289388A1

    公开(公告)日:2024-08-29

    申请号:US18572446

    申请日:2022-11-10

    摘要: Embodiments of this specification provide a graph state data management method and apparatus. The method includes: encoding, after acquiring batch graph state data from a graph computing engine, each piece of graph state data in the batch graph state data into kv data; sorting the kv data based on a key of the kv data to form kv list data, where in the kv list data, each key corresponds to one or more values; next, sequentially writing values of the kv list data into a data file in a file storage system, and recording a corresponding logical address of each key in the data file; and then, maintaining a memory index of the batch graph state data in a memory of a graph state management device, where the maintained memory index is used to reflect an index relationship between a key and a corresponding logical address.

    Data management system using attributed data slices

    公开(公告)号:US12072869B2

    公开(公告)日:2024-08-27

    申请号:US17317412

    申请日:2021-05-11

    摘要: Methods and systems for data management include representing, organizing, and accessing very large data sets. Embodiments describe supporting data sets of various size based on attributed data slices (ADSs) to enable reduced memory requirements, query decomposition and parallel execution, and constant execution times for concurrent queries. The ADSs can include data buckets comprising items that are grouped by an attribute key. Attribute groups can be further sorted (e.g., in ascending order) based on the attribute key. According to some embodiments, the essential structure of an ADS provides additional functionality while preserving the behavior expected of an ADS through the use of an Extension Block containing attribute location data.