Dell Products Inc.

Emc IP Holding Company LLC

Dennis Trulli, Jr

Peter Callewaert

Brett A Quinn

Kenneth J Schopp

Paul A Linstead

Melissa Flynn

David Goncalves

Kevin Heasley

A secure physical vault is used in connection with cyber protection automation to ensure that initial configuration and all configuration changes to the cyber protection environment are only implemented by a host that is locally physically connected to the cyber vault. By requiring the host to be locally physically connected to the cyber vault, it is possible to prevent remote modifications to the cyber protection environment configuration, thus preventing a remote attack on the cyber protection afforded by the cyber protection environment. The Operating System of a storage system implementing the cyber vault may be flagged to prevent any syscall from being processed that is not received from a host that is locally physically connected to the cyber vault. Host controller software can also be used to ensure that the initial configuration and all configuration changes to the cyber protection environment configuration are only processed if locally received.

Cyber protection automation with secure physical vault

Storage volumes of a remote data forwarding group are mirrored on a leg of a data replication facility from a production site in a primary region of the data replication facility to a cyber vault using asynchronous remote data forwarding. A multi-site consistency application is used to bring and maintain the data of the storage volumes on the cyber vault into a consistent state. Once the storage volumes in the cyber vault have achieved a consistent state, a snapset including a snapshot of each of the storage volumes is created from the storage volumes contained in the cyber vault on a determined rhythm. The snapset is optionally linked to a set of target devices at the cyber vault. If the production site is not in the primary region, the absence of consistency of the data at the cyber vault halts creation of snapsets at the cyber vault.

Space-saving cyber protection automation

A consistency group is defined to include a set of required devices on a set of storage systems. Write patterns on each of the required devices are monitored and write patterns on each of the other devices on the set of storage systems is monitored. Pairs of devices are formed, in which each pair includes one required device and one other device. Write patterns of the pairs of devices are compared to determine respective percentage coordinated write probabilities for pairs of devices. Write patterns of the pairs of devices are also compared to determine ratios of write operations for pairs of devices. A coordinate write probability above a threshold, or a determined ratio of write operations that occurs sufficiently frequently, is interpreted as an indication that one of the other devices should be included in the consistency group. A learning process is trained and used to analyze the write patterns.

Method and apparatus for identifying a device missing from a consistency group

A consistency group is defined to include a set of required devices on a set of storage systems. High activity devices are determined, and write dependencies between each high activity device and each low activity devices are monitored. A set of high importance devices is determined to include the high activity devices and low activity devices with a high write dependency on at least one of the high activity devices. Comparative write patterns between the high importance devices and low importance devices are used to determine a set of candidate devices for removal from the consistency group. The high importance devices, rather than all devices of the consistency group, are also used to determine a set of devices that have inadvertently not been included in the consistency group.

Method and apparatus for identifying high importance devices of a consistency group

The system and methods disclosed herein relate to an improved hardware configuration for geographically dispersed data restart ('GDDR') systems. Specifically, the teachings herein allow users to reduce the number of operating systems required to run multiple GDDR systems simultaneously by employing multitenancy principles in the system design. The embodiments cover a system for operating multiple GDDR complexes wherein the individual control systems typically required to run each GDDR complex are combined into a single logical partition. We also disclose methods and computer executable products for operating multiple GDDR complexes wherein the individual control systems typically required to run each GDDR complex are combined into a single logical partition.

Geographically dispersed disaster restart multitenancy systems

The system, products, and methods disclosed herein relate to an improved configuration for geographically dispersed data restart ('GDDR') systems. Specifically, the teachings herein ensure a particular GDDR instance does not react to messages issued from address spaces outside of its affinity group. We use the term message 'affinity group' to mean the combination of a particular GDDR instance and its set of Mainframe Enablers started tasks. By ensuring that the particular GDDR instance does not react to messages intended for recipients outside of its affinity group, we improve computer functionality and efficiency by facilitating further partitioning of the logical partition. Once the logical partition is further partitioned into additional address spaces, it is possible to run Mainframe Enablers and/or additional GDDR instances independent of the particular GDDR instance of concern.

Growing community of inventors

Littleton, MA, United States of America

Dennis Trulli, Jr