Pure Storage, Inc.

Amazon Technologies, Inc.

Purvaja Narayanaswamy

Robert H Lee

Cary A Sandvig

John Colgrove

Pavel Sokolov

William Michael McCreedy

Mohammad Foyzur Rahman

Karsten Jancke

Vladimir Ponomarenko

Mandeep Arora

Yi Li

Bikash Roy Choudhury

Roy Child

Krishnaditya Kandregula

Sachet Saurabh

Vinay Singh

Ramy Nazier

Dmytro Lebedyev

Venkata Naga Raja Sri Harsha Kesapragada

Kostiantyn Dymov

Sharda Kishin Khubchandani

Weitao Wen

A federated permission management service provides clients with customized access to a data set using customized authorization metadata. The federated permission management service may define and apply permissions that are defined at a data lake that provides access to many different data sets from many different sources, as well as those permissions that may be defined at the source of the data set, which may be provided when performing a data sharing request. By allowing for permissions to be specified at the data lake in addition to permissions specified at a source of a data set, the permission management service can provide a fine-grained access control to specific objects of the data set, such as specific columns, specific rows, or specific cells of a database to be shared, even for those data sets in the data lake having different sources.

Data sharing with federated access permissions

An illustrative method includes an access control list (ACL) management system generating an ACL file containing an ACL that describes one or more access permissions in a file system, storing the ACL file within an ACL directory structure, the ACL file uniquely representing the ACL in the ACL directory structure, generating an ACL identifier for the ACL file, and mapping, using the ACL identifier, the ACL file to one or more data files in the file system to apply the ACL in the ACL file to the one or more data files.

Management of access control in a storage system

A storage system has filtered views of data. The storage system receives a read request for a filtered view of data in memory. The read request is associated with one or more permissions for viewing the data. The storage system identifies a subset of the data, based on the one or more permissions. The storage system provides the filtered view. The filtered view includes the subset of the data.

Utilizing data views to optimize secure data access in a storage system

A method of operating a storage system is provided. The method includes establishing a security context between a client and the storage system, the security context comprising a single ticket for multiple nodes within the storage system. The method includes distributing a first request to a first blade within the storage system and distributing a second request to a second blade within the storage system. The distributing the first request and the second request includes determining a node for handling the first request and the second request based on data within the single ticket.

Network authentication for a storage system

Growing community of inventors

San Jose, CA, United States of America

Purvaja Narayanaswamy