Emc IP Holding Company LLC

Emc Corporation

Mark A O'Connell

Stephen J Todd

Mikhail Danilov

Helen S Raizen

Michael Kilian

Stephen Glen Graham

Dominique Prunier

Miles Aram DeForest

Brad Bowlin

Jeffrey S Kimmel

Miles Aram De Forest

Robert Anthony Alfieri

Tom Teugels

Erez Webman

David Ohsie

Rossen P Dimitrov

John P Field

Ram Viswanathan

Matthew L Troutman

Lior Oded Bahat

Eron D Wright

Cui Lin

William K McGrath

Prashant J Dongale

Vijayaraghavan Srinivasaraghavan

Michael J McLeod

Paul T Burke

Chuanjun Wang

Andrea L Heyda

Erik Riedel

Guy A Simpson

At least one identity for a given entity is established in accordance with a decentralized identity management system maintained in accordance with a distributed ledger, wherein the identity of the given entity and a set of attributes relating to the identity are defined by a secure token file. The secure token file is referenced in the distributed ledger enabling two or more computing resource systems (e.g., storage systems) to at least one of authenticate and authorize the given entity in accordance with the secure token file.

Decentralized identities for access to multiple computing resource systems

A manifest for an automated system is generated, wherein the manifest comprises a record of a plurality of algorithms configured to be used in operation of the automated system. An operational audit branch is generated from the manifest in response to execution of one or more algorithms of the plurality of algorithms. The generation of the operational audit branch comprises recording one or more inputs used by the one or more algorithms, and recording one or more outputs generated by the one or more algorithms.

Tamper proof logging for automated processes

Some embodiments are directed to accessing a content unit stored in a storage environment that includes a plurality of storage clusters, wherein multiple versions of the content unit are stored on at least two different clusters in the storage environment. The storage environment and/or the requesting entity may identify the at least two storage clusters that store the content unit and select one of clusters as storing a valid version of the content unit.

Methods and apparatus for managing objects in a storage environment

In a network including a plurality of computing resources associated with an enterprise, an identity is established for each of the computing resources in accordance with a decentralized identity management system maintained in accordance with a distributed ledger. The plurality of computing resources is managed in association with the distributed ledger, wherein managing comprises the enterprise posting one or more commands on the distributed ledger to enable one or more of the plurality of computing resources to obtain the one or more commands. In one non-limiting example, the computing resources are part of a geographically distributed IT infrastructure associated with the enterprise.

Decentralized computing resource management using distributed ledger

One or more data storage systems are configured to automatically access a data registration service in response to receipt of a data request associated with a storage user of the one or more data storage systems and a profile of an identity associated with the storage user. The identity profile associated with the storage user comprises one or more policies for storage and access of data associated with the storage user.

Data registration-aware storage systems

In an extended cloud computing environment comprising a plurality of computing resources associated with an enterprise, a method maintains a distributed ledger integrated with a data sharing system, wherein a given node associated with the distributed ledger and a given node associated with the data sharing system are associated with a given one of the plurality of computing resources in the extended cloud computing environment. The method manages one or more data sets processed by the plurality of computing resources in association with the distributed ledger and the data sharing system, wherein managing comprises storing transactions associated with the one or more data sets on the distributed ledger to enable one or more of the plurality of computing resources to access the stored transactions.

Data management for extended multi-cloud environment

At least one identity for a given entity of a first enterprise is established in accordance with a decentralized identity management system maintained in accordance with a distributed ledger. The identity of the given entity of the first enterprise and a set of attributes relating to the identity are defined by at least one cryptographically signed token file. The cryptographically signed token file is referenced in the distributed ledger enabling a second enterprise to authenticate and/or authorize the given entity in accordance with at least one of the set of attributes.

Decentralized identities for cross-enterprise authentication and/or authorization

Systems and methods are disclosed for a streaming service generating an aggregation of data streams in response to a query from a client device for data streams matching the query. The aggregation of data streams matching the query is presented to the requesting client as a single virtual stream. The streaming service modifies the virtual stream in real-time by adding data streams matching the query that come online to the virtual stream, or deleting data streams from the virtual stream that go offline. The streaming service can partition the virtual stream if the data flow rate increases above a threshold, and reduce partitions if the data flow rate falls below a threshold. The client device can add or terminate consumer processes in response to changes in the data flow rate and partitioning.

Aggregating streams matching a query into a single virtual stream

The described technology is generally directed towards a hybrid copying garbage collector in a data storage system that processes low capacity real chunks and virtual chunks (which reference data on other storage systems) into real chunks with a relatively high data capacity utilization. Real and virtual chunks with low capacity utilization are detected and copied into a higher capacity utilization real chunk, after which the low capacity chunks are deleted and their space reclaimed. As a result, much of the virtual chunk data that is to be migrated into a real chunk in the data storage system is migrated during garbage collection instead of as a separate migration process. Only the virtual chunk data that is relatively high capacity needs to be processed into real chunks by a separate migration process.

Hybrid copying garbage collector

Example embodiments of the present invention provide a method, an apparatus, and a computer program product for authenticating a request from a first domain to access a resource in a second domain according to credentials in the first domain. The method includes receiving, from the first domain, an assertion in the second domain and generating, according to the assertion, a token configured to be redeemed by a client in the first domain to access the resource in the second domain. The token then may be provided to the first domain.

Method and apparatus for federated identity and authentication services

In one aspect, a method includes storing data in a distributed storage environment that includes data servers and configuring each data server to mark a respective bit map for each block of data changed. In another aspect, an apparatus includes electronic hardware circuitry configured to store data in a distributed storage environment that includes data servers and to configure each data server to mark a respective bit map for each block of data changed. In a further aspect, an article includes a non-transitory computer-readable medium that stores computer-executable instructions. The instructions cause a machine to store data in a distributed storage environment that includes data servers and configure each data server to mark a respective bit map for each block of data changed. In each of the aspects above each data server is configured to handle a respective portion of a logical unit.

Incremental backup in a distributed block storage environment

In one aspect, a method includes determining an allocation of nodes in a cluster to application containers using a node capacity and a policy, publishing the allocation to a coordinator, the coordinator configured to manage the nodes comprising a first node, reading the allocation from the coordinator and instructing a container manager in the first node to generate an application container in the first node conforming to the allocation.

Cluster aware container manager

Facilitating parallel migration and transformation of data storage in a replicated environment is provided herein. A method can comprise determining, by a system comprising a processor, that first data of a first storage device and second data of a second storage device are scheduled to be migrated to a third storage device and a fourth storage device in a replicated storage environment. The method can also comprise mapping, by the system, the third storage device to the first storage device, and the fourth storage device to the second storage device. Further, the method can comprise facilitating, by the system, a parallel migration/transformation of the first data to the third storage device and the second data to the fourth storage device.

Migration and transformation of data storage in a replicated environment

Batch mode object creation in an elastic cloud data storage environment is presented herein. A batch mode data chunk component is configured to: facilitate a creation of a batch of objects corresponding to an application; store first objects of the batch of objects in a group of data storage chunks; and based on a determination that a data storage chunk of the group of data storage chunks contains at least a defined amount of data, seal the data storage chunk to obtain a sealed data storage chunk; and a data protection component configured to: perform erasure encoding on the sealed data storage chunk, and replicate the sealed data storage chunk on a data recovery storage device.

Growing community of inventors

Westborough, MA, United States of America

Mark A O'Connell