Dell Products Inc.

Shoham Levy

Arieh Don

Dan Aharoni

Amos Zamir

Drew P Tonnesen

Michal Sara Davidson

Haim Shalelashvili

Mirit Sadon

Alexander Shteingart

Alexander Zvansky

Techniques are provided for inter-domain access using an identity provider. One method comprises receiving, by a first domain, a request from a device of a second domain, different than the first domain, that requires the first domain to perform an operation on the second domain; providing, by the first domain, in response to the received request, (i) an access identifier, (ii) a destination identifier of the first domain and (iii) a redirection instruction, wherein the redirection instruction redirects the device to an identity provider associated with the second domain to validate the device, and wherein the second domain, in response to the device being validated, generates an access token; receiving, by the first domain, from the second domain, using the destination identifier of the first domain, the access token and the access identifier; and performing, by the first domain, the operation on the second domain using the access token.

Inter-domain access using identity provider

Methods and systems for managing storage of data are disclosed. To manage data storage, one or more access management frameworks may be used. One of the access management frameworks may be a storage array side framework that limits access to data based on user reservations. The user reservations may indicate the data subject to access limitation, the entity that requested the user reservation, and the extent of the access limitation. The user reservations may be used by the storage array to process receive input-output.

System and method for managing use of storage in distributed systems

Techniques are provided for detection and mitigation of malfunctioning components in a cluster computing environment. One method comprises obtaining, by a virtual infrastructure monitor, from a cluster monitor, an indication of a malfunctioning component in a cluster computing environment; selecting a virtual infrastructure server type for a replacement virtual infrastructure server based on a type of the malfunctioning component; creating a replacement virtual infrastructure server based on the selected virtual infrastructure server type and properties of a virtual infrastructure server associated with the malfunctioning component; applying settings to the replacement virtual infrastructure server according to rules for the replacement virtual infrastructure server; deploying a replacement component on the replacement virtual infrastructure server; and providing a notification to the cluster monitor of the replacement component and credentials of the replacement component. The cluster monitor may add the replacement component to the cluster computing environment responsive to the notification.

Detection and mitigation of malfunctioning components in a cluster computing environment

Techniques are provided for creating secure IO (input/output) user connections between IO users and storage volumes. One method comprises establishing an IO user connection between a processor-based IO user and at least a portion of a storage volume on a storage array; obtaining IO user context information associated with the IO user connection, wherein the IO user context information comprises one or more keys for signature verification; and transmitting one or more IO operations over the IO user connection, wherein a signature associated with a given IO operation is evaluated to verify that the signature is a valid signature of one or more of the processor-based IO user and the storage array. The obtained IO user context information may further comprise an identifier of a signature generation function that generates the signature associated with the given IO operation and a connection identity string identifying the IO user connection.

Signature-based IO user connections between IO users and storage volumes

Techniques are provided for performing user operations by a first system on a second system using user impersonation. One method comprises receiving, by a first system, a log in of a user to the first system and an operation to be performed by a second system; sending an impersonation request, by the first system to the second system, to obtain an impersonated user access token of the given user for the second system; receiving, by the first system from the second system, in response to the impersonation request, the impersonated user access token of the given user; and providing, by the first system to the second system, the operation with the impersonated user access token of the given user, wherein the second system performs the operation based at least in part on a result of an access validation of the impersonated user access token of the given user.

Growing community of inventors

Ra'anana, Israel

Shoham Levy