Emc IP Holding Company LLC

Stefan Voss

Sadagopan Balaraman

Eddie Pavkovic

Stephen Walsh

Allen Yen

Anthony Mullen

Andrew VanDamme

Described is a system that provides a mechanism to securely deliver software updates to components of an isolated recovery environment. More specifically, the system provides the ability to include (or inject) a software update as part of a secure data transmission from a production environment to an isolated recovery environment. The data transmission may use existing infrastructure for synchronizing recovery data between the production backup system and isolated recovery system thereby preventing a potential new access point (or vulnerability) to the isolated recovery environment that a cyber security threat may attempt to exploit.

Secure delivery of software updates to an isolated recovery environment

Described is a system that securely recovers critical backup and data protection infrastructure such as a backup application that manages data for a backup and recovery system. Such a capability may be provided by securely storing a copy of metadata associated with a production backup application into an isolated recovery environment. By storing the metadata on the isolated recovery environment, the metadata may be secure from potential security threats such as ransomware that may attack the production infrastructure itself. Accordingly, the secure copy of metadata may then be restored to a sandboxed environment with the isolated recovery environment and used to create a recovery instance of the backup application. The system may also perform various tests on the recovered instance of the backup application in response to particular security threats before being exposed to a production system for recovery purposes.

System for securely recovering backup and data protection infrastructure

Described is a system for secure management of recovery data for data protection assets such as backup data and a backup application of a production backup system. The system may provide the ability to synchronize and secure critical recovery data of an isolated recovery environment. Accordingly, the system may reduce the breadth of potential cyber security attack vectors and increase the likelihood of efficiently recovering critical data and/or applications. To provide such capabilities, the system may only activate a data connection between a production system and a recovery system when synchronizing recovery data. In addition, the system may apply a retention lock to maintain a set of immutable copies of the recovery data and may restore the recovery data to a sandboxed environment where it may be tested and verified before being deployed to the production system as part of a recovery process.

Growing community of inventors

Milton, MA, United States of America

Stefan Voss