International Business Machines Corporation

Akram Bitar

Aviad Zlotnick

Ronen Levy

Shachar Fienblit

Tamer Salman

Olympia Gluck

Amir Sasson

Oleg Blinder

Gail Andrea Spear

Ehud Aharoni

Omri Soceanu

Dov Murik

Nir Drucker

Gilad Sharaby

Irit Dolev

A computer-implemented method comprising: generating, from a key-seed associated with a user, a set of homomorphic encryption (HE) keys associated with an HE scheme; receiving, from a key management system (KMS) associated with said HE scheme, an encrypted version of said key-seed; storing said encrypted version of said key-seed, and said set of HE keys, in an untrusted storage location; and at a decryption stage, decrypting an encrypted computation result generated using said HE scheme, by: (i) recalling, from said untrusted storage location, said encrypted version of said key-seed, (ii) providing said encrypted version of said key-seed to said KMS, to obtain a decrypted version of said key-seed s associated with said user, (iii) generating, from said received decrypted version of said key-seed, a secret HE key associated with said HE scheme, and (iv) using said secret HE key to decrypt said encrypted computation result.

Homomorphic encryption key management

Methods, computing systems and computer program products implement embodiments of the present invention that include receiving a request to fabricate, for a database including multiple tables, a respective target number of data records for each of the tables, and receiving one or more intra-database rules for the multiple tables. Examples of the intra-database rules include cross-record rules and cross-table rules. Upon identifying one or more referential integrity constraints for the multiple tables, the respective target number of data records for each of the multiple tables are fabricated in response to the request. In embodiments of the present invention, the fabricated data records comply with the one or more referential integrity constraints and the one or more intra-database rules.

Database table data fabrication

Methods, computing systems and computer program products implement embodiments of the present invention that include defining multiple data fabrication rules, each of the data fabrication rules including a fabrication time and a data operation. a simulation of a software application is initiated, the simulation including a sequence of simulation times, and upon detecting, during the simulation, one or more first given fabrication rules having respective fabrication times matching one or more first simulation times, fabricated data is generated in response to performing the respective data operation of each of the detected one or more first given fabrication rules. Upon detecting, during the simulation, a second given fabrication rule whose fabrication time matches a second simulation time subsequent to the one or more first simulation times, the data operation of the second given fabrication rule is performed on a subset of the fabricated data.

Live data fabrication

A method for synchronizing data stored on primary and secondary storage volumes in a distributed data recovery system is provided. The method comprises associating N data recovery relationships between a primary volume and N secondary volumes by way of implementing N data structures respectively. Each data structure comprises a first indicator that indicates whether data stored on a first track of the primary volume has been updated, due to a first operation performed by a host application. One or more of the N data structures are stored in at least a first data storage medium with high speed data access rates.

Efficient data synchronization in a distributed data recovery system

A method for synchronizing data storage systems is provided. The method comprises designating a relationship between a first data storage system and a second data storage system, such that data stored in the first data storage system is copied to the second data storage system, in response to determining that the data stored in the first data storage system has been modified; receiving a first request to modify data stored in a first data block of a first storage volume in the first data storage system, wherein the data block is modified according to the first request; determining that the first data block has not been successfully synchronized when the modified data stored in the first data block is not copied to the second data storage system; and executing a process to retry synchronization of the first data block until synchronization of the first data block is successful, without suspending the relationship while the process is executed.

Synchronizing data storage systems in a data storage environment

Systems and methods for data swapping in a storage network are provided. The method comprises associating a flag with a first track on a first volume (TA) and a first track on a second volume (TB) to indicate that I/O access to TAis to be redirected to TB, and that I/O access to TBis to be redirected to TA; locking TAand TBto prohibit I/O access to TAand TB; copying data stored on TAand TBto cache; swapping data between TAand TB; unlocking TAand TBto allow I/O access to TAand TB; redirecting I/O access to TB, in response to receiving an I/O request to access TA, when TAis flagged, and redirecting I/O access to TA, in response to receiving an I/O request to access TB, when TBis flagged.

Data swapping in a storage system

A storage system and a method for copying data is provided. The method includes storing data at a first storage unit of a primary site, transferring the data from the first storage unit to a second storage unit of a remote site and updating shadow storage unit metadata to reflect the storing of the data at the first storage unit, and copying, in response to the updating of the shadow storage unit metadata, the data from an entity that differs from the shadow storage unit to a third storage unit.

System, method and computer program product for copying data

Device, system, and method of storage controller simulating data mirroring. For example, an apparatus for simulating data mirroring includes: a storage controller to control a primary storage unit that has data stored therein, wherein the storage controller is able to simulate a process of mirroring data stored in the primary storage unit in response to a mirroring simulation command.

Device, system, and method of storage controller simulating data mirroring

Device, system, and method of storage controller having simulated volumes. For example, an apparatus for data storage management includes: a storage controller to manage access to one or more physical volumes, the storage controller including a simulation module to simulate access to one or more simulated volumes.

Device, system, and method of storage controller having simulated volumes

A data storage resynchronization system is provided. The system includes a primary site having a primary server, primary storage unit, primary replication agent, and a primary storage controller. Data is written to primary pages on the primary storage unit upon receiving a command to do so from the primary server. A secondary site has a secondary server, secondary storage unit, secondary replication agent for receiving a command from the primary replication agent to write the data at the secondary site and secondary storage controller. Data is written to secondary pages on the secondary storage unit upon receiving a command to do so from the secondary replication agent when the secondary and primary pages correspond, and means for comparing corresponding pages and sending primary pages to the secondary replication agent for replacement of corresponding secondary pages at the secondary site where page-change indicators of the corresponding pages do not match.

Growing community of inventors

Kfar Peqiin, Israel

Akram Bitar