Vmware, Inc.

Haoran Zheng

Wenguang Wang

Tao Xie

Eric Shannon Knauft

Jin Zhang

Pascal Renauld

Xin Liang Li

Wei Fang

Feng Tian

Yuanzhi Wang

Weijin Wang

Bryan Fink

Yun Zhou

Yangyang Zhang

Yizheng Chen

Anil Chintalapati

Jing Liu

Distributed storage system and method for transmitting storage-related messages between host computers in a distributed storage system uses a handshake operation of a first-type communication connection between a source data transport daemon of a source host computer and a target data transport daemon of a target host computer to derive a symmetric key at each of the source and target data transport daemons. The two symmetric keys are sent to a source data transport manager of the source host computer and to a target data transport manager of the target host computer. The source and target data transport managers then use the same symmetric keys to encrypt and decrypt storage-related messages that are transmitted from the source data transport manager to the target data transport manager through multiple second-type communication connections between the source and target data transport managers.

Distributed storage system and method of reusing symmetric keys for encrypted message transmissions

A distributed system, such as a distributed storage system in a virtualized computing environment and having storage nodes arranged in a cluster, is provided by management server with a transition period between non-encryption and encryption modes of operation. The transition period enables all of the nodes to complete a transition from the non-encryption mode of operation to the encryption mode of operation, without loss of data-in-transit (DIT). An auto-remediation feature is provided by the management server to the cluster, so as to fix inconsistent state(s) of one or more nodes in the cluster.

Workflow for enabling data-in-transit in a distributed system

A distributed storage system, such as a distributed storage system in a virtualized computing environment, stores data in storage nodes as immutable key-value entries. A coordinator storage node creates a key-value entry and attempts to store the key-value entry in the coordinator storage node and in neighbor storage nodes. If the storage of the key-value entry in the in the coordinator storage node and in the neighbor storage node is successful, the coordinator storage node pushes the key-value entry to other storage nodes in the distributed storage system for storage as replicas.

Storage of key-value entries in a distributed storage system

Systems and methods for managing Software-as-a-Service (SaaS) provided by a virtual machine are described. The system may include a management application, and may receive a feature package from the virtual machine. The feature package may be associated with a function supported by the virtual machine. The system may integrate the feature package into the management application, and transmit a first command to the virtual machine for executing the function at the virtual machine. The first command may be generated by the management application based on the feature package.

Systems and methods for customizing and programming a cloud-based management server

A tenant's clear text data in a multi-tenant storage system can be encrypted using the tenant's cryptographic key to produce encrypted yet compressible data ('cryptographic data'). The cryptographic data can be encrypted using a system cryptographic key that is managed by the multi-tenant storage system and then stored. Use of the system cryptographic key allows for subsequent maintenance activities such as deduplication and compression to be performed on data stored in the multi-tenant storage system without having to access any of the tenants' cryptographic keys.

Multi-tenant encryption on distributed storage having deduplication and compression capability

A computer and method for managing a shared key in a cluster of computers utilizes a node key to decrypt an encrypted shared key to obtain the shared key. A computer in the cluster can receive the node key from another computer in the cluster by transmitting an encrypted node key that has been encrypted using a master key to the other computer in the cluster, which is then decrypted using the master key at the other computer. The received node key can then be used by the requesting computer to decrypt the encrypted shared key to obtain the shared key.

System and methods of managing shared keys in a computer cluster with high availability

A multi-tenant storage system can store clear text data and associated clear text checksum received from a storage tenant using their associated cryptographic key ('cryptokey'). When the clear text data is compressible, cryptographic data ('cryptodata') is generated from a concatenation of the clear text checksum and compressed clear text data using the cryptokey. A cryptographic checksum (&#x201c;cryptochecksum&#x201d;) is generated from the cryptodata. When the clear text data is uncompressible, cryptographic data (&#x201c;cryptodata&#x201d;) is generated by encrypting the clear text data using the cryptokey with an extra verification step to make sure the clear text checksum can be rebuilt during the read request. A cryptographic checksum (&#x201c;cryptochecksum&#x201d;) is generated from the cryptodata. The cryptodata and associated cryptochecksum are stored in the multi-tenant storage system, so that repairs to damaged cryptodata can be made using the associated cryptochecksum.

Growing community of inventors

San Jose, CA, United States of America

Haoran Zheng