Emc IP Holding Company LLC

Dell Products Inc.

Other

Jagannathdas Rath

Kalyan Chakravarthy Gunda

Donna Barry Lewis

Srinivasan Viswanathan

Nitin Madan

Bhimsen Bhanjois

Senthil Ponnuswamy

Srisailendra Yallapragada

Santi Gopal Mondal

Rekha Sampath

Satish Inampudi

Fei Wang

Arun Vishnu Pk

Sraisailendra Yallapragada

Ravi Kumar Vasarla

Sophie Syau Fang Deng

Veera Venkata Prasad Jagarlamudi

One example method includes identifying a cloud object as a potential candidate for defragmentation, evaluating the cloud object to determine what portion of segments of the cloud object are expired, when the portion of expired segments meets or exceeds a threshold, segregating the expired segments and unexpired segments of the cloud object, creating a first new cloud object that includes only unexpired segments, creating a second new cloud object that includes only expired segments, and deleting the cloud object from storage.

Efficient cleanup/defragmentation mechanism for expired retention locked (compliance and governance) segments in deduped cloud objects

One example method includes receiving, at a cloud storage site, a write request that identifies an object to be written to the cloud storage site, storing the object at the cloud storage site, receiving, at the cloud storage site, a read request that identifies the object, performing, at the cloud storage site, an evaluation of the object to determine if the object is corrupted, and sending a message identifying an outcome of the evaluation. One or more of the operations at the cloud storage site may be performed by an Object Lambda function that has been configured by a dedupe application.

Efficient method for data invulnerability architecture (DIA) and data corruption detection for deduped cloud objects

One example method includes a data protection operation such as an attack prevention or remediation operation. Policies, such as user policies, role policies, and/or container policies, are created. Prior to attaching to a user or a container, checksums are generated. After the policies are attached to the user or container in the cloud, changes to the policies can be detected using the previously generated checksums and comparing to checksums generated from the cloud policies. Corrective actions are taken when the comparison fails.

Method to detect external attacks on cloud data from within application

A flexible retention lock system defines attributes for an automatic retention lock (ARL) period to lock a file, and a cooling (COP) period specifying a time period after which the file will be locked if no modifications are made. These attributes are assigned an ARL label ID and are attached to the file using the ARL label ID stored with file metadata upon creation of the file, with the ARL label stored in a label database for convenient lookup. The retention lock period for all files using a label can be instantly extended by changing the ARL period from an initial lock period to a longer lock period. A reference count counting files using the label is used to prevent deletion of the ARL label by requiring that only a count of zero allows for label deletion.

Flexible and instantaneous lock extension for auto retention locked (ARL) files using ARL labels

One example method includes receiving at a dedupe system, from a client, a request that comprises a set of fingerprints, where each fingerprint in the set corresponds to a particular data segment, filtering, at the dedupe system, the set of fingerprints into a set of unique fingerprints and a set of non-unique fingerprints, reading, at the dedupe system, from a container where copies of the non-unique fingerprints are stored, an additional set of non-unique fingerprints, sending, from the dedupe system to the client, a single response that comprises both the set of unique fingerprints and the additional set of non-unique fingerprints, and receiving from the client, at the dedupe system, data segments that respectively correspond to the unique fingerprints in the set of unique fingerprints, but no data segments corresponding to the non-unique fingerprints in the set of non-unique fingerprints are received by the dedupe system from the client.

Efficient method to optimize distributed segment processing mechanism in dedupe systems by leveraging the locality principle

Embodiments for retention locking a deduplicated file stored in cloud storage by defining object metadata for each object of the file, and comprising a lock count and a retention time based on an expiry date of the lock, with each object having segments, the object metadata further having a respective expiry date and lock count for each segment, where at least some segments are shared among two or more files. Also updating the lock count and retention time for all segments of the file being locked; and if the object is not already locked, locking the object using a retention lock defining a retention time and updating the object metadata with a new lock count and the retention time, otherwise incrementing the lock count and updating the retention time for the expiry date if expiry date of a previous lock is older than a current expiry date.

Extending retention lock protection from on-premises to the cloud

One example method includes, at a replication data source, initiating a replication process that includes transmitting a replication stream to a replication destination vault, and data in the replication stream is transmitted by way of a closed airgap between the replication data source and the replication destination vault, switching, by the replication data source, from a transmit mode to a receive mode, receiving, at the replication data source, a first checksum of a file, and the first checksum and file were created at the replication destination vault, receiving, at the replication data source, the file, calculating, at the replication data source, a second checksum of the file, and when the second checksum matches the first checksum, ending the replication process.

Method to efficiently transfer support and system logs from air-gapped vault systems to replication data sources by re-utilizing the existing replication streams

The disclosure provides a system, computer readable medium, and computer-implemented method for managing data access. The method includes obtaining a data access request from a requestor for client data redundantly stored in at least two storage providers that are unknown to the requestor; identifying a service level objective for servicing the data access request; ranking the at least two storage providers based on the service level objective to identify one of the at least two storage providers to service the data access request; and providing the requestor with access to a copy of the client data using the one of the at least two storage providers.

Method to provide SLA based access to cloud data in backup servers with multi cloud storage

Embodiments for providing file immutability for cloud storage data in a deduplicating filesystem and using a new filesystem that is spawned to receive redirected live data, after which the old filesystem is expired. Data objects are stored in the cloud by defining a protection duration from a first date to a fixed future date, and applying a retention lock to one or more data objects stored in cloud storage during the protection duration, the retention lock preventing unauthorized deletion, modification or movement of the data. A renew threshold date is defined within the protection duration, and a new filesystem is spawned on this date. All new data is redirected to the new filesystem and locked for the protection duration, and the first file system is destroyed.

File immutability using a deduplication file system in a public cloud using new filesystem redirection

A method, apparatus, and system manages an object in a storage provider that provides a plurality of storage classes of storage. The method may include receiving a request for transfer of the object comprising segments from a first storage class to a second storage class of the storage provider; storing metadata associated with the object; determining that each of the segments satisfies a data storage policy based on the access characteristics of each of the segments within the object, wherein the determining includes: determining that none of the segments are referenced by the new segment for a predetermined time period; determining that none of the segments are accessed for the predetermined time period from the last accessed time instance; and in response to determining that each of the segments satisfies the data storage policy, transferring the object from the first storage class to the second storage class of the storage provider.

Automatic movement of deduped data to archival tiers of cloud storage based on access patterns

A method, apparatus, and system for managing backup resource on a cloud for a plurality of backup servers is disclosed. A resource configuration for each cloud storage is received. The resource configuration includes allocated cloud resource amount and duration. Cloud operation utilization is calculated for each cloud storage. The cloud operation utilization is compared with the resource configuration to determine a total cloud operation utilization for each cloud storage. A plurality of rules is applied in view of the total cloud operation utilization to determine a plurality of cloud storage operational states. The cloud storage is configured to be in one of the plurality of cloud storage operational states based on the plurality of rules to limit an amount of data to be transmitted to and stored in the cloud storage within a predetermined period of time.

Method to implement and enforce a cost-based quota for cloud operations in backup servers based on allowed cloud budget

A method, system and computer-readable storage medium for transferring data segments from one computer system to a second computing system. Prior to transfer of the data segments, the first system calculates compressibility ratio of each segment and compares the compressibility ratio to a preset threshold. Based on the comparison, the first system assigns a compressibility hint to each segment. The first system transfers the segments to the second system, together with the corresponding compressibility hint. The second system stores each segment in a compressible region or in a non-compressible region based on the hint. Then the second system compresses the compressible region and stores the compressed region in a container, and stores the non-compressible region uncompressed in the container.

Growing community of inventors

Bengaluru, India

Jagannathdas Rath