International Business Machines Corporation

Globalfoundries Inc.

Gregory Tad Kishi

Joseph W Dain

Jonathan Wayne Peake

Kevin Lee Gibble

Mark Allan Norman

Osnat Shasha

Christopher Zaremba

Wayne Charles Carlson

Nilesh Prabhakar Bhosale

Laura Jean Ostasiewski

James Arthur Fisher

Cheryl Marie Friauf

Christopher Michael Sansone

Itzhack Goldberg

Glen Alan Jaquette

Theodore Timothy Harris, Jr

Raul Eduardo Saba

Sara Megan Coronado

Joseph M Swingler

Keith Anthony Bello

Duke Andy Lee

Scott A Brewer

Clifford A Pickover

Daniel James Winarski

Thomas W Bish

Kerri Renee Shotwell

Daniel I Tan

Sandeep R Patil

James Gordon McLean

Norie Iwasaki

Michael Philip McIntosh

Abhishek Jain

David Lee Patterson

Shay Haim Akirav

Koichi Masuda

Michael D Hocker

Lourie A Bryan

Matthew Joseph Anglin

Gil E Paz

Erika Dawson

Scott M Rockwell

Mark Albert Reid

William Henry Travis

Gary Anna

Dean Lee Hanson

Sven Oehme

Craig T Danielson

Renan J Ugalde Amezcua

Alistair Laesk Symon

Yuuji Kibuse

Hector E Mery

Shazad Naviwala

Scott Brewer

Drew Olson

David B Kumhyr

Lior Aronovich

Neil Sondhi

Robert Beverley Basham

John Thomas Olson

Kenneth Fairclough Day, Iii

Yariv Bachar

Douglas William Dewey

Craig Henry Becker

Frank David Gallo

Deepavali M Bhagwat

Lukas Rupprecht

David Wayne Glass

Thirumale N Niranjan

Kien Kim Huynh

David Alan Brettell

Benjamin L Andrews

Aare Onton

Constantine Arnold

Vickie Lynn Brewer

Thomas Holderness Daily

Igor I Ageyev

Mark Robert Bolin

Kimberly A Bortz

Josephn M Swingler

Salaheddin H Obeid

James Gordon Mc Lean

Theresa M Howard

Harish C Mathur

Josephina Anna

Jonathan W Peak

Ron Riffe

Provided are a computer program product, system, and method for determining an encryption technique for a modified data object to backup. Deep data inspection is performed on an object using a natural language processing module to determine facets for the object. The facets provide facet values for instances of sensitive information in the object. The facet values for the object are processed to determine a cumulative facet value. A determination is made of an encryption technique comprising one of a plurality of different encryption techniques to use on the object based on the cumulative facet value. The determined encryption technique is used to encrypt the object to transfer to a backup storage.

Determining facet values for sensitive information in a data object to determine an encryption technique to encrypt the data object for backup

A method and/or system of managing metadata are disclosed that include connecting a source data storage system (DSS) that stores both data and metadata to a metadata management platform (MMP); scanning metadata records onto the MMP from the DSS; storing metadata attributes for at least one of the group consisting of directories and buckets on the DSS in a look-up table on the MMP; and adding updated metadata attributes to the look-up table on the MMP for each subsequent scan of the DSS.

Custom metadata tag inheritance based on a filesystem directory tree or object storage bucket

A method includes scanning, by a device of a plurality of devices, a directory of a file system. The directory includes a plurality of subdirectories, and each device of the plurality of devices corresponds to a different queue of a plurality of queues. The method also includes inserting, by the device, a plurality of scanning tasks into a subset of the plurality of queues in a round robin fashion. The plurality of scanning tasks correspond to the plurality of subdirectories and responding to a scanning task of the plurality of scanning tasks includes scanning a subdirectory of the plurality of subdirectories.

Parallel file system scans with multiple shared queues

Systems and methods for management of event metadata. The methods may include maintaining a plurality of data storage systems in communication with an external metadata management system. The methods may also include operating the metadata management system to store tagged event metadata corresponding to the plurality of data storage systems. Event metadata corresponding to a data storage system includes information associated with at least one data operation event executed on data residing in that data storage system.

Methods and systems for event based tagging of metadata

Systems and methods for cognitive encryption of data are disclosed. The methods may include maintaining a plurality of data storage systems in communication with an external metadata management system, operating the metadata management system to store metadata corresponding to data residing on the plurality of data storage systems, identifying a candidate data set residing on at least one of the plurality of data storage systems on which at least one security action should be performed using information included in the metadata management system, and in response to identifying the candidate data set, identifying the at least one security action.

Methods and systems for encryption based on intelligent data classification

A dataset formatted in a first format is generated, wherein the dataset formatted in the first format includes at least a plurality of data elements that comprise data. A selection is made of machine learning framework, wherein the machine learning framework operates on datasets formatted in a second format that is different from the first format. The dataset is converted from the first format to the second format and links are generated from the converted dataset formatted in the second format to the plurality of data elements of the dataset formatted in the first format to avoid creating additional copies of the plurality of data elements.

Generation of a dataset in the format of a machine learning framework

A computer-implemented method according to an aspect includes training a cognitive network, utilizing metadata associated with historic data threats, inputting metadata associated with a current data threat into the trained cognitive network, identifying, by the trained cognitive network, one or more stored instances of data determined to be vulnerable to the current data threat, and adjusting one or more security aspects of the one or more stored instances of data determined to be vulnerable to the current data threat.

Protecting data based on a sensitivity level for the data

Provided are a computer program product, system, and method for merging multiple point-in-time copies into a merged point-in-time copy. A repository maintains a full copy of the source data and point-in-time copies at point-in-times of the source data. Each of the point-in-time copies have change information indicating changed data in the source data that changed between the point-in-time of the point-in-time copy and a subsequent point-in-time and changed point-in-time data comprising data in the source data as of the point-in-time of the point-in-time copy indicated in the change information as changed. At least two selected of the point-in-time copies in the repository are merged into a merged point-in-time copy by: forming merged change information in the merged point-in-time copy indicating changed data indicated in change information for the selected point-in-time copies; and forming merged changed data in the merged point-in-time copy from the changed data in the selected point-in-time copies.

Merging multiple point-in-time copies into a merged point-in-time copy

A method includes generating a table in a relational database, the table comprising an empty column reserved for a custom tag. The column has a default column name. The method also includes, in response to an instruction to create the custom tag, generating a column mapping that maps a name of the custom tag to the column name. The column mapping is stored outside the relational database and is used by a parser to translate between the name of the custom tag and the column name.

Custom tag definition and translation in a database

Provided are a computer program product, method, and system for determining data to redact in an object. Event messages for objects are received. Each event message includes at least one facet, each facet for an instance of data in an object resulting from deep data inspection of the object that is used to determine whether the instance of data should be redacted. The event messages are added to a message queue. Information is added to a database for each of the event messages include the at least one facet for an object in the event message. The database is queried to determine an object having a facet for an instance of data that indicates the instance of data is to be redacted. The instance of data is redacted in the determined object having the facet that indicates the instance of data is to be redacted data.

Processing event messages for data objects to determine data to redact from a database

Provided are a computer program product, method, and system for determining data to redact in an object. Event messages for objects are received. Each event message includes at least one facet, each facet for an instance of data in an object resulting from deep data inspection of the object that is used to determine whether the instance of data should be redacted. The event messages are added to a message queue. A determination is made of an event message in the message queue for an object having a facet for an instance of data that indicates the instance of data is to be redacted. Redaction is performed on the instance of data in the object in the determined event message having the facet indicating the instance of data is to be redacted data.

Processing event messages for data objects in a message queue to determine data to redact

A computer-implemented method according to an aspect includes determining a sensitivity level for an instance of data, comparing the sensitivity level to one or more policies, and conditionally performing a backup of the instance of data, based on the comparing.

A computer-implemented method according to one embodiment includes performing a query for finding files that meet at least one predefined criterion. The at least one predefined criterion includes a file size that is less than a predefined fraction of a predetermined threshold file size. Performing the query includes sequentially performing additional querying in response to finding a first file that meets the at least one predefined criterion. As files are found in the additional querying, for each sequence of additional querying, the method includes determining whether a total storage size of files found during performance of the query exceeds the predetermined threshold file size. In response to a determination that the total storage size of the files found during performance of the query exceeds the predetermined threshold file size, the files are consolidated into a consolidation file. The method further includes writing the consolidation file to a magnetic recording tape.

Migrating data files to magnetic tape according to a query having one or more predefined criterion and one or more query expansion profiles

Systems and methods for collection and management of metadata are disclosed. The methods include maintaining a plurality of data storage systems in communication with an external metadata management system, and operating the metadata management system to store metadata corresponding to data residing on the plurality of data storage systems as a plurality of entries. Each of the plurality of entries include one or more facets of data corresponding to metadata stored in that entry and extracted using text analysis of that metadata.

Methods and systems for natural language processing of metadata

Growing community of inventors

Oro Valley, AZ, United States of America

Gregory Tad Kishi