International Business Machines Corporation

Infinidat Ltd.

Julian Satran

Leah Shalev

Zorik Machulsky

Ilan Shimony

Shmuel Ben-Yehuda

Benny Rochwerger

Thomas Basil Smith, Iii

Israel Gold

Renato John Recio

Giora Biran

Vadim Makhervaks

Yechiel Yochai

Efraim Zeidner

Ton Engbersen

Jan Leonard Camenisch

Gidon Gershinsky

Michael Waidner

Kalman Zvi Meth

Dafna Sheinwald

Michael Backes

Paul Edward McKenney

Edward Joseph Seminaro

James Xenidis

John Lewis Hufferd

David Hadas

Edi Shmueli

John Michael Marberg

Irit Loy

Michael Steven Siegel

Haim Kopylovitz

Alan Frederic Benner

Gregory Scott Still

Orran Yaakov Krieger

David Breitgand

Boaz Carmeli

Brent Alan Miller

Alain Charles Azagury

Ronen Itshak Kat

Antonius Paulus Engbersen

Itai Segall

Danny Dolev

George Goldberg

Kenneth M Nagin

Muli Ben-Yehuda

James Gregory Ranweiler

John Justin Duigenan

Sivan Tal

Miriam Allalouf

Peter Frank Corbett

Anthony Simon Bolmarcich

Haim Nelken

Doron Chen

Scott D Guthridge

Roger Kahn

Kalman Meht

Itamar Gilad

German Goft

The presently disclosed subject relates at least to a method and system for controlling access to a logical unit (LU) in a logical storage space, available to a given initiator, representing a corresponding physical storage space, said logical storage space being accessible via a storage control layer, said storage control layer being associated with a security manager. A first value is generated by the security manager, based on a secret key, and transmitted to host requesting permission to access the logical storage space, while the secret key is made available to a target associated with the logical storage space. The host sends to the control device an access related request, the request comprising a second value which was generated based on the first value. Responsive to the command the target calculates the first value, based on the secret key and the second value based on the first value. The second value is validated with the help of said secret key and the respective access is allowed in case the second value is validated.

Method of access control to stored information and system thereof

A request for obtaining a space allocation descriptor is received by a block control layer of a storage system. The space allocation descriptor is indicative of one or more logical blocks free for allocation within a range of logical addresses. The range of logical addresses is included within a logical address space related to an upper layer application which has issued the request. The space allocation descriptor is provided by using a data structure included in the block control layer and operative to map between the logical address space and allocated storage blocks within a physical storage space, managed by the block control layer.

System and methods for managing storage space allocation

A method for facilitating direct memory access in a computing system in response to a request to transfer data is provided. The method comprises selecting a thread for transferring the data, wherein the thread executes on a processing core within the computing system; providing the thread with the request, wherein the request comprises information for carrying out a data transfer; and transferring the data according to the request. The method may further comprise: coordinating the request with a memory management unit, such that virtual addresses may be used to transfer data; invalidating a cache line associated with the source address or flushing a cache line associated with the destination address, if requested. Multiple threads can be selected to transfer data based on their proximity to the destination address.

Enhanced direct memory access

A method for accessing a memory space allocated to a virtual machine, the method includes: receiving a request from the virtual machine to generate, for another virtual machine, a memory credential associated with a certain memory space allocated to the virtual machine; generating, in response to the request, a cryptographically signed credential; sending the cryptographically signed credential to the other virtual machine; receiving from the other virtual machine an access request to access at least one memory entry within the certain memory space; and accessing the at least one memory entry, if the access request complies with the memory credential.

System, method and computer program product for inviting other virtual machine to access a memory space allocated to a virtual machine

A method and a storage system for managing logical objects, wherein the storage system includes a plurality of control servers and the method includes: (i) defining a plurality of object pools and associating each logical object, hosted in the storage system, with one of the plurality of object pools; (ii) configuring each control server to have a primary responsibility over at least two of the object pools, such that each object pool is controlled by one primary control server, configured to handle requests directed to logical objects associated with the object pool; and (iii) in response to a failure of one of the plurality of control servers, configuring each operational server of the plurality of control servers to take over primary responsibility for at least one object pool, originally defined under the primary responsibility of the failed control server.

Object based storage system and method of operating thereof

According to the teaching disclosed herein there is provided at least a method, system and device for managing a cache memory of a storage system. The storage system is associated with at least one physical storage device and, responsive to a read request, comprising information indicative of a logical address of at least one requested data unit, to obtain a storage physical address associated with the logical address, search the cache memory for a data unit associated with the storage physical address and service the request from the cache in case the data unit is found in the cache memory.

Avoiding duplication of data units in a cache memory of a storage system

There are provided a mass storage system comprising a control layer operatively coupled to a physical storage space and operable to interface with one or more clients and to present to said clients a plurality of logical volumes. The method of operating the storage system comprises: dividing one or more logical volumes into a plurality of statistical segments with predefined size; assigning to each given statistical segment a corresponding activity level characterizing statistics of I/O activity with regard to data portions within the given statistical segment, said statistics collected over a plurality of cycles of fixed counting length; and managing one or more data storage processes in the storage system (e.g. a background defragmentation process, a background garbage collection process, a destage management process, etc.) using said activity level.

Mass data storage system and method of operating thereof

Systems and methods for policy-driven capacity management in a resource provisioning environment, the method comprising storing, in an operational database one or more virtual resource sets (VRSs) and elasticity ranges for components to be deployed in a resource provisioning environment, and probabilistic guarantees on the elasticity ranges defined in a service manifest provided by a service subscriber; collecting historical data about capacity usage in the resource provisioning environment and failure statistics from the operational database, in addition to prior service commitments due to previously contracted service level agreements (SLAs) stored in a SLA repository; calculating equivalent capacity for the resource provisioning environment based on a defined residual benefit goal, and other business goals instrumented by way of a policy engine; and placing requested virtual resources on physical resources, in response to determining that sufficient physical capacity is available to host the calculated equivalent capacity.

Policy-driven capacity management in resource provisioning environments

A computer-implemented system and method for protecting a memory are provided. The system includes a memory section with privileged and non-privileged sections, a host gateway (HG) to generate a capability credential, a device controller (DC) to append the credential to data transmitted to the memory, and at least one IO device enabled to do direct memory access (DMA) transactions with the memory.

Memory protection and security using credentials

A system, method and computer program product for synchronizing updates to shared mutable data in a clustered data processing system. A data element update operation is performed at each node of the cluster while preserving a pre-update view of the shared mutable data, or an associated operational mode, on behalf of readers that may be utilizing the pre-update view. A request is made for detection of a grace period, and grace period detection processing is performed for detecting when the cluster-wide grace period has occurred. When it does, a deferred action associated with the update operation it taken, such as removal of a pre-update view of the data element or termination of an associated mode of operation.

Cluster-wide read-copy update system and method

A method for managing communication between nodes in a virtual network is provided. A first computing system utilizes first information to forward first data to the second computing system in a physical network. If the first information is incorrect, the second computing system forwards an unlearning request to the first computing system, and the first computing system updates or deletes the first information. If the first information is not available, the first computing system forwards the first data to a group of computing systems in the physical network by way of an unknown network service. Upon receiving the first data, the second computing system or a third computing system in the physical network forwards a learning request to the first computing system, and the first computing system utilizes the learning request to generate the first information.

Managing communication between nodes in a virtual network

A storage system, a disk controller, a disk drive and a method of operating thereof. The method includes: configuring a disk drive in a manner enabling executing one or more read requests concurrently with executing one or more write requests addressed to the same data track of the disk drive; responsive to a received write request addressed to a certain track of the disk drive, identifying with the help of the control layer one or more read requests concurrent to received write request and addressed to the same track; if the received write request and the identified one or more read requests match a predefined criterion, generating and issuing, with the help of the control layer, a command to the disk drive for executing a single task corresponding to the concurrent read and write requests combined in accordance with a certain mask.

Concurrent access to a single disk track by combining reads and writes to a disk with a mask

A method and system are disclosed for storage optimization. Data parts and metadata within a source data unit are identified and the data parts are compared with data which is already stored in the physical storage space. In case identical data parts are found within the physical storage, the data parts from the source data unit are linked to the identified data, while the data parts can be discarded, thereby reducing the required storage capacity. The metadata parts can be separately stored in a designated storage area.

System and method of storage optimization

A computer implemented method is disclosed for obtaining file-level information from block level information of files stored on a storage medium. The method includes accessing the storage medium to obtain metadata available in block level on the storage medium and building an inverse block-to-file map of the files stored on the storage medium. The method also includes listening online to incoming block-level commands communicated from a host to the storage medium, parsing the incoming block-level commands, inferring file-level information from the parsed block level commands; and updating the inverse file-level map. Also disclosed are corresponding computer program product and processing system.

Obtaining file system view in block-level data storage systems

Method and system for memory protection and security using credentials

Growing community of inventors

Atlit, Israel

Julian Satran