Microsoft Technology Licensing, LLC

Other

Gaurav Sinha

Vijay G Bharadwaj

Carl Melvin Ellison

Charles Glenn Jeffries

Michael J Grass

Matthew Charles Setzer

Phani Chiruvolu

Jacob Kappeler Oshins

Octavian Tony Ureche

Niels Thomas Ferguson

Christopher Leland Eck

Yi Liu

Nils Dussart

Vinod Atal

Devdeep Singh

Techniques involving replication of storage are described. A representative technique includes apparatuses and methods for receiving replicated virtual storage of a replicated virtual machine, including at least a replicated base virtual disk that substantially corresponds to a primary base virtual disk to be replicated. Copies of differencing disks or other forms of virtual storage updates are received at a recovery site, each of the differencing disks being associated with the primary base virtual disk as descendents thereof. The received copies of the differencing disks are arranged relative to the replicated base virtual disk corresponding to the manner in which the differencing disks were arranged relative to the primary base virtual disk, thereby maintaining the data view of the replicated virtual machine in synchronization with the virtual machine at the primary site.

Managing replicated virtual storage at recovery sites

In one embodiment, a virtual machine replication system may test a replica data set while continuing to replicate a primary data set. A data storagemay store a replica data set for a replica virtual machineto back up a primary data set for a primary virtual machine. The data storagemay preserve a test point in timein the replica data set using a test differencing disk. A processormay execute a test virtual machinethat performs a test operation on the test point in timewhile the replica data set continues to replicate the primary data set.

Reliably testing virtual machine failover using differencing disks

A portable secure data file includes an encrypted data portion and a metadata portion. When a request associated with a current user of a device to access a portable secure data file is received, one or more records in the metadata portion are accessed to determine whether the current user is permitted to access the file data in the encrypted data portion. If a record indicates the user is permitted to access the file data, a content encryption key in that record is used to decrypt the encrypted data portion.

Portable secure data files

A key protector for a storage volume is created by generating an intermediate key and protecting, based at least in part on a public/private key pair, the intermediate key. A volume master key for encrypting and decrypting one or more volume encryption keys that are used to encrypt the storage volume can be encrypted in different manners, including being encrypted based at least in part on the intermediate key. A key protector for the storage volume is stored that includes both the encrypted volume master key and information indicating how to obtain the intermediate key. Subsequently, the key protector can be accessed and, based at least in part on a private key of the entity associated with the key protector, the intermediate key can be decrypted. The intermediate key can then be used to decrypt the volume master key.

Key protector for a storage volume using multiple keys

Growing community of inventors

Hyderabad Telangana, India

Gaurav Sinha