Emc IP Holding Company LLC

Dell Products Inc.

Qi Jin

Nagasimha G Haravu

Yi Fang

William C Whitney

Ching-Yun Chao

Dmitry Nikolayevich Tylik

Muzhar S Khokhar

Xuan Tang

Karl M Owen

Dominique Prunier

Girish Sheelvant

Jennifer M Minarik

Kevin S Labonte

Tianming Zhang

Michael Zeldich

Reut Kovetz

Kenneth Hu

Natalie Lee Chin Wong

Rajini Ramachandran Karthik

Ranjit Kollu

Alan White

Lee M McColgan

David Scott Thompson

Yidong Wang

Sathish Janamanchi

Ryan Roberge

William Whitney

Ashish Sharma

Jonathon Cwik

Shashank Holakkal

Puneeth Chowdary Kosaraju

Eric Randal Young

Methods and systems for managing operation of infrastructure are disclosed. The operation of the infrastructure may be managed by limiting activity that may be performed by the infrastructure. The activity may be limited by restricting tasks that may be added to queues of tasks that the infrastructure is authorized to perform. The content of the queues may be limited during workflow selection, task identified for workflows, and service registration for servicing the queues. The content may be limited using a combination of registration requirements, role based restrictions, and token requirements.

Methods and apparatus for enhancing security in the orchestration platform

Architectures and techniques are described that can provide decentralized, zero-trust authorization according to variable fine-grained policies For example, an authorization server can receive an authorization request from a requesting device. The authorization request can comprise a reference address to a resource, in which case resource data can be fetched, or comprise a signed entity indicative of the resource. In either case, resource data used to evaluate a policy can be obtained and, if an associated policy evaluation is authorized, the authorization request can be validated and an associated token can be provided to the requesting device, which can then be transmitted along with an API call to a service through which a resource is provided.

Decentralized authorization with Zero-Trust

A system can identify an attribute-based access control policy that comprises a pair comprising a permission policy and a condition policy that is associated with performing an operation on a computing resource. The system can identify that the attribute-based access control policy corresponds to a role policy that is associated with the account. The system can determine whether the account and the role policy satisfy the attribute-based access control policy with respect to the operation, wherein the determining comprises evaluating whether the computing resource and a required permission of the permission policy is declared in the role policy, and evaluating whether the account and the role policy satisfy the condition policy evaluates to true based on attributes of the account and attributes of the computing resource. The system can, in response to determining that the account satisfy the permission policy and the condition policy, perform the operation on the computing resource.

Attribute-based access control using scoped roles and conditioned permissions dynamic policies

Techniques for providing direct access to backup data can include: receiving a selection of a backup of a file system, wherein the backup is stored on a backup system connected to a data storage system; creating, in accordance with said selection of the backup, a remote copy of the backup, wherein the remote copy is stored on the backup system; generating a proxy file system for the remote copy on the backup system, wherein the proxy file system is mapped by the data storage system to the remote copy on the backup system; and providing a host with direct access to the remote copy using the proxy file system.

Techniques for providing direct host-based access to backup data using a proxy file system

A method, computer program product, and computing system for copying a storage protection configuration for one or more storage resources from a first storage array to at least a second storage array in a storage cluster. A communication failure between at least a pair of storage arrays may be detected, thus defining a surviving storage array and at least one failed storage array. The communication failure between the surviving storage array and the at least one failed storage array may be resolved. The storage protection configuration may be synchronized from the surviving storage array to the at least one failed storage array. The storage protection configuration for the one or more storage resources of each storage array of the at least a pair of storage arrays may be arbitrated.

System and method for stretching storage protection configurations in a storage cluster

A method, computer program product, and computing system for receiving a selection of a portion of data from a backup storage appliance communicatively coupled to a storage system. A copy of the selected portion of the data may be generated on the backup storage appliance, thus defining a data backup copy. One or more hosts may be provided with direct access to the data backup copy using the storage system.

System and method for providing direct host-based access to backup data

A method, computer program product, and computer system for submitting, by a computing device, at least one snapshot request of a plurality of snapshots requests into a snapshot queue. How many snapshots of a plurality of snapshots are referencing a given point in time copy may be tracked, wherein the given point in time copy may be mapped to at least a portion of the plurality of snapshots. A desired executing time for the at least one snapshot request in the snapshot queue may be determined. The at least one snapshot request may be dequeued.

System and method for scheduled snapshot pacing with deduplication

A technique for backing up snapshots in a multi-cloud environment includes accessing multiple cloud storage providers and obtaining therefrom respective sets of storage performance data. The technique further includes receiving storage requirements for snapshots of a data object and selecting, based on the requirements and the storage performance data, a designated cloud storage provider for receiving archived snapshots of the data object. The technique then transmits one or more snapshots of the data object to the designated cloud storage provider for archiving.

Dynamic snapshot backup in multi-cloud environment

A data protection technique involves, based on a first set of policies on a first storage array, generating a second set of policies on a second storage array to track the first set. The first array maintains a first storage object, and the second array maintains a second storage object as a replica of the first storage object. The technique further includes detecting assignment of the first set of policies to the first storage object and, in response to such detection, assigning the second set of policies to the second storage object. Application of a set of storage policies to a storage object may be delayed if the storage object is a replication destination. A policy group may identify multiple data protection rules or policies, which may include a snapshot rule and/or replication rule, and a user may be prevented from directly making a rule modification to a policy group. An orphan policy group cleanup operation may be performed to delete orphan policy groups.

Providing data protection to destination storage objects on remote arrays in response to assignment of data protection to corresponding source storage objects on local arrays

A hierarchy of multiple levels of storage resources and associated QOS (quality of service) limits and buckets of tokens may be specified. A different QOS limit may be applied to each individual storage resource. The buckets may denote current amounts of tokens available for consumption in connection with servicing I/O operations. Each bucket may denote a current amount of available tokens for a corresponding storage resource of included in the hierarchy. Processing may include receiving a first I/O operation directed to a first storage resource, and determining, in accordance with the buckets of available tokens, whether to service the first I/O operation.

Quality of service for storage system resources

A technique of automatically predicting data storage configuration events, such as purchase decisions, based upon individual data storage drive properties, client storage usage and behavior trends is described. The behavior trends may include customer actions, such as deleting snap shots or otherwise deleting data, typical ordering times and delays, and expected installation and acceptance testing times. The technique collects operational data and calculates statistical trends. The technique automatically notifies a data storage system manager of the calculated data when the operational data indicates that the data storage system will need reconfiguration and recommends data storage drive properties to acquire.

Purchase planning for data storage processing systems

Growing community of inventors

Sudbury, MA, United States of America

Qi Jin