Emc IP Holding Company LLC

Emc Corporation

Ping Zhang

Xuan Tang

Gregory William Lazar

Ying Xie

Ken Kim

Yi Fang

Utkarsh Vipul

Lorenzo Bailey

Yong Wang

Charles W Kaufman

Sriram Krishnan

Munish T Desai

Neil F Schutzman

Naizhong Chiu

Muhamad Djunaedi

Charlie Kaufman

Xiongfei Chen

A technique rekeys information to maintain data security. The technique involves identifying a first storage drive as a source device available to a proactive copy service. The technique further involves identifying a set of second storage drives as a set of spare devices available to the proactive copy service. The technique further involves invoking the proactive copy service which, in response to being invoked, transfers information from the first storage drive to the set of second storage drives. The information is encrypted by a first key when residing on the first storage drive and is encrypted by a set of second keys when residing on the set of second storage drives, the first key being different from each second key.

Rekeying information on storage devices using a proactive copy service

Techniques for synchronizing configuration information in a clustered storage environment. The techniques allow a system administrator or other user to make additions and/or updates to configuration information in one or more configuration files, which are automatically propagated for storage in multiple data storage appliances within a storage domain. By allowing a user to make changes to configuration files associated with a primary appliance within the storage domain, and automatically propagating the configuration files in a background process from the primary appliance to multiple secondary appliances within the storage domain, the user can more readily assure consistency of the configuration information, not only among the primary and secondary appliances within the storage domain, but also among previously unavailable or unreachable data storage appliance(s) that may be recovered and brought back on line within the storage domain.

Systems and methods of synchronizing configuration information in a clustered storage environment

In response to determining that an encryption operation request includes no indication of a cryptographic key, an encryption service module performs an encryption operation using a current cryptographic key retrieved by the encryption service module, and creates and stores an encrypted data object that includes the resulting ciphertext and a key identifier that uniquely identifies the cryptographic key and the associated cryptographic algorithm used to perform the encryption. A subsequent decryption operation request to the encryption service module that indicates the encrypted data object is processed by retrieving the cryptographic key and identifying the associated cryptographic using the key identifier contained in the encrypted data object. The encrypted data object may also include an initialization vector used to generate the ciphertext contained in the encrypted data object, as well as an integrity check value generated across the ciphertext and initialization vector.

Data encrypting system with encryption service module and supporting infrastructure for transparently providing encryption services to encryption service consumer processes across encryption service state changes

Described are techniques for simulating a data storage configuration. First data is generated that describes a simulated data storage configuration. A database is populated using the first data. First information is retrieved from the database in connection with processing a request from a client. The first information includes at least a portion of the first data.

Simulating data storage system configuration data

A method is used in managing system polling. Polling parameters that are based on a set of criteria are determined for receiving updated information for a managed object in a data storage system. Based on the polling parameters, the managed object is polled. Based on the set of criteria, polling parameters are dynamically changed. Based on the results of polling, polling is disabled for the managed object.

Managing system polling

Alert generation is managed. A frequency with which a performance metric satisfies a first condition is determined. It is determined whether the frequency satisfies a second condition. An alert is generated based on the determinations.

Managing alert generation

Growing community of inventors

Shrewsbury, MA, United States of America

Ping Zhang