Hewlett-packard Development Company, L.P.

Digital Equipment Corporation

Andrew C Goldstein

Charles W Kaufman

Butler W Lampson

Morrie Gasser

David William Thiel

Richard Fitzhugh Wrenn

Martin Abadi

Leonard S Szubowicz

Robert A Brooks

John J Andruszkiewicz

James J Friedrichs

In accordance with at least some embodiments of the invention, a system comprises a plurality of computers coupled together and to an array of redundant storage devices that is accessible to the plurality of computers. Each of the plurality of computers comprises a local memory that stores at least one bitmap. The least one bitmap logs regions of the redundant array that have been modified.

Local bitmaps for an array of redundant storage devices

A backup apparatus and method suitable for protecting the data volume in a computer system function by acquiring a base state snapshot and a sequential series of data volume snapshots, the apparatus concurrently generating succedent and precedent lists of snapshot differences which are used to create succedent and precedent backups respectively. The data volume is restored by overwriting the base state data with data blocks identified in one or more succedent backups. File recovery is accomplished by overwriting data from a current snapshot with one or more precedent backups.

Physical incremental backup using snapshots

An access control list for determining the access rights of principals in a distributed system to a system resource is disclosed wherein the access rights of a specified principal are based on the access rights delegated to that principal.

Compound principals in access control lists

A method for delegating authorization from one entity in a distributed computing system to another for a computing session is disclosed wherein a session public/private encryption key pair is utilized for each computing session. The private encryption key is erased to terminate the computing session.

Method for delegating authorization from one entity to another through

A method for denying a first group access to a system resource wherein a second group is selected such that the first group is a subgroup of the second group. Access is granted only to those members of the second group who do not derive their membership in the second group through their membership in the first group.

Growing community of inventors

Hudson, MA, United States of America

Andrew C Goldstein