Emc Corporation

Iron Mountain Incorporated

Actifio, Inc.

Other

Google Inc.

Autonomy Corporation Ltd

Steven M Blumenau

Yoav Raz

Stephen J Todd

Matthew J D'Errico

Erez Ofer

Michel F Fisher

Natan Vishlitzky

John T Fitzgerald

Matthew R Barnes

Philip E Tamer

John F Madden, Jr

Christopher J Hackett

Zoran Cakeljic

Paul M Bober

Mark C Lippitt

James M McGillis

Steven Cohen

Percy Tzelnic

James B Sullivan

Uresh K Vahalia

John Philip Bell, Ii

Donagh A Buckley

David C Butchart

Conor Fox

Mark A Kaufman

Christopher Murphy

Ola Mayer

Alex Dubrovsky

Dar S Efroni

Bill Ledingham

Matthew Derrico

Natan Vishlitzsky

Haim Kirshenberg

Systems and methods for managing access to computing services include an access manager that receives a request to modify a configuration of a computing service to a new configuration. The access manager stores a previous configuration of the computing service, updates the configuration of the computing service from the previous configuration to the new configuration based on information representing the new configuration, and starts a service request timer for the computing service. The access manager receives a subsequent request. When the subsequent request is a reconnect request, the access manager deletes the stored previous configuration. When the subsequent request is not a reconnect request or a new request the access manager returns an error when the service request timer has not expired, or sets the configuration of the computing service to the previous configuration of the computing service when the timer has expired.

Connectivity service using a bounce back approach

Systems and methods for managing access to computing services include an access manager that receives a request to modify a configuration of a computing service to a new configuration. The access manger stores a previous configuration of the computing service, updates the configuration of the computing service from the previous configuration to the new configuration based on information representing the new configuration, and starts a service request timer for the computing service. The access manager receives a subsequent request. When the subsequent request is a reconnect request, the access manager deletes the stored previous configuration. When the subsequent request is not a reconnect request or a new request the access manager returns an error when the service request timer has not expired, or sets the configuration of the computing service to the previous configuration of the computing service when the timer has expired.

Techniques include systems, computerized methods and computer readable media for creating a private network for one or more execution environments inside of an existing network using a data center container, such that the private network can provide one or more services that are independent of identical services of the existing network. A private network is created in an existing network. A data center container provides a service in the private network that is identical to an existing service provided by the existing network. A data center container manager manages execution of one or more execution environments in the data center container using the service in the private network, such that the one or more execution environments can execute in the private network using the service without interfering with the operation of the existing service in the existing network.

Data center network containers

Computerized systems and methods are provided for integrating copy data tokens with source code repositories. A first command associated with the version control system stores in the memory a copy of source code and a copy of the data token from the remote repository, comprising source data and mount data. A second command associated with the version control system is executed to create a version of the source code stored in the memory. Based on the execution of the second command a working copy of the copy data is created based on the data token for use with the version of the source code, comprising creating a copy of the copy data from the data source based on the source data, and mounting the working copy to the device based on the mount data, thereby automatically managing the copy data for the version control system.

Integrating copy data tokens with source code repositories

Computerized systems and methods are provided for data virtualization using copy data tokens. A data token is stored that defines attributes associated with copy data, including source data, transformation data, and access data for the copy data. The access data is indicative of a set of access settings for the copy data that define how an instance of the copy data is to be created for the user, and a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access. The data token is transmitted to a remote computer storing the copy data based on the source data in the data token. A copy of the copy data that was generated based on the preparation information and the access data is received.

Data virtualization using copy data tokens

A dynamic volume configuration technique is provided which allows storage space within storage devices in the data storage system to be dynamically associated and disassociated (i.e., added and removed) from the volumes on an as-needed basis, without requiring disruption of host activities with respect to the volumes. The persistent identifier of a volume allows all hosts and other data storage systems to 'see' the volume. This allows a volume in one data storage system to have associated storage space from another volume in another data storage system. Using these techniques, the invention allows software applications and operating systems on hosts that interface to the data storage system to perceive that a volume is always present on the data storage system, even if storage space understood to be associated with the volume from the host's perspective is allocated elsewhere or is non-existent.

Methods and apparatus for interfacing to a data storage system

A method of managing workflows related to storage services provided by a service provider to a customer (via a management system) is presented. The management system includes a Web server and a workflow process. The Web server presents to a customer a task screen (or set of task screens) for a customer-selected work order request type so that the customer can prepare and submit a work order request to the management system. After receiving the work order request, the Web server uses information contained in and associated with the request to create a database object that includes some or all of the following elements: customer identifier; work order identifier, date/time of request; request state (e.g., new, open or closed); type of request; parameters or arguments to the request; and any textual description provided by the customer. The Web server stores the object in a database. The workflow process locates the new request in the database, performs the task specified by the request and closes the work order request by updating the object with the appropriate state. The workflow process generates a billable event corresponding to the work order request and enters that billable event in an account record of the customer that submitted the request. The account record can then be used to generate billing information. If the workflow process cannot complete the task successfully, an administrator of the service provider may perform the task, close the work order request and enter the billable event in the customer account record.

Workflow database for scalable storage service

Systems and methods for managing digital assets in a distributed computing environment are described. Meta-data for the digital assets is stored separately from the digital assets. Meta-data for some of the digital assets is copied and stored at a central location. Meta-data for the digital assets is generated by clients of the system.

Systems and methods for preventing digital asset restoration

A service provider management system (SPMS) that connects to storage resources in a datacenter controlled by a service provider and a database that stores information about the datacenter and customers that receive the storage resources as a service. The SPMS enables the service provider to allocate storage resources to a customer and to assign ownership to billable devices, such as disks, volumes, ports, and so forth, as well as to generate billing information based on hardware configuration and customer usage. The SPSM is supported on a server architecture, which includes a Web server that exports a first interface to the service provider to enable the service provider to manage the data storage resources to which the SPMS is connected, and a second interface to the customer to enable the customer to manage the allocated data storage resources directly.

Mediation device for scalable storage service

Systems and methods for managing digital assets in a distributed computing environment are described. Meta-data for the digital assets is stored separately from the digital assets. Meta-data for some of the digital assets is copied and stored at a central location. Meta-data for the digital assets is generated by clients of the system. A method for determining a set of policy attributes to be applied to a digital assets includes: receiving, at a client, a first asset identification tag corresponding to a digital asset and comprising one or more policies associated with the digital asset; associating a second asset identification tag with the digital asset; identifying, by the client a predetermined flag in the first asset identification tag; and deactivating, by the client responsive to the identified tag and the association of the second asset identification tag, the one or more policies associated with the first asset identification tag.

Systems and methods for defining digital asset tag attributes

Systems and methods for managing digital assets in a distributed computing environment are described. Meta-data for the digital assets is stored separately from the digital assets. Meta-data for some of the digital assets is copied and stored at a central location. Meta-data for the digital assets is generated by clients of the system. A method of propagating a digital asset identification tag associated with a digital asset includes: receiving a command from a client of the distributed computing system to the central computing resource, the command comprising an indication that a change occurred to the asset identification tag of a digital asset and the changed digital asset identification tag; locating the digital asset identification tag at the central resource; updating the digital asset identification tag in response to the received command; and transmitting the updated tag to another client having a copy of the digital asset.

Systems and methods for cross-system digital asset tag propagation

This invention is a system and method for managing data in a secure manner in a data storage environment that is in communication with a network including an internet-based network. The system includes logic for securely managing internet client's access to data volumes stored on a data storage system, and may also include logic operating with a file server for providing dynamic access of data available to such clients in a secure fashion.

Method and system for securing network access to dynamically updateable data stored in a data storage system

Method and apparatus for managing access to a plurality of volumes of storage in a computer system including a host computer. The host computer includes an application layer that includes at least one application program. The application layer is presented with the plurality of volumes of storage that are visible to the application layer. The method of managing access to at least one of the plurality of volumes of storage includes assigning limited access privileges to the application program to access the plurality of volumes of storage. The limited access privileges are less than root access privileges and the at least one of the plurality of volumes of storage is mapped indirectly to one or more physical storage devices so that the at least one of the plurality of volumes of storage does not correspond directly to an actual physical storage device.

Method and apparatus for providing secure access to a computer system resource

Scanning a storage device for viruses includes determining physical portions of the storage device that have been modified since a previous virus scan and scanning at least parts of the physical portions for viruses. The physical portions may correspond to tracks of the storage device, sectors of the storage device, and/or to subportions of the storage device. Determining the physical portions of the storage device that have been modified may include creating a table that is indexed according to each of the portions and has entries indicating whether a corresponding one of the portions has been modified, the entries being cleared after a virus scan to indicate that no portions have been modified and setting a specific one of the entries in response to a corresponding one of the portions of the storage device being subject to a write operation. Creating the table may include copying an other table provided by the storage device and/or using an other table provided by the storage device.

Physical scanning of storage based apparatus for antivirus

Systems and methods for managing digital assets in a distributed computing environment are described. Meta-data for the digital assets is stored separately from the digital assets. Meta-data for some of the digital assets is copied and stored at a central location. Meta-data for the digital assets is generated by clients of the system. A method for providing secure restricted access to a digital asset includes: encrypting, by a first computing device, a digital asset; creating, by the first computing device, an executable file, the executable file comprising the encrypted digital asset, permission information associated with the digital asset, and executable code for decrypting and viewing the digital asset; creating, by the first computing device, a digital signature corresponding to the executable file; and transmitting, to a second computing device, the executable file and the digital signature. Corresponding systems and computer readable media with executable instructions are also described.

Growing community of inventors

Holliston, MA, United States of America

Steven M Blumenau