Pure Storage, Inc.

Swapnil Chandrashekhar Nagle

Ronald S Karr

Naveen Neelakantam

Joshua Freilich

Grigori Inozemtsev

Arun Theebaprakasam

Virendra Prakashaiah

Neelesh Thakur

A method includes receiving a request to write a data block to a volume resident on a multi-tenant storage array, wherein the request is associated with a first tenant of the multi-tenant storage array, and determining whether the data block matches an existing data block on the multi-tenant storage array, wherein the existing block corresponds to a second tenant. In response to determining that the decrypted data block matches the existing data block: encrypting the existing data block with a shared volume encryption key; encrypting the shared volume encryption key with a first tenant encryption key and providing the shared volume encryption key encrypted with the first tenant encryption key to the first tenant; and encrypting the shared volume encryption key with a second tenant encryption key and providing the shared volume encryption key encrypted with the second tenant encryption key to the second tenant.

Preserving data deduplication in a multi-tenant storage system

Restoring a cloud-based storage system to a selected state, including: generating, over a period of time, one or more snapshot states of a cloud-based storage system, wherein each of the one or more snapshot states describes a respective configuration of the cloud-based storage system at a respective point in time within the period of time; providing, to a computing process, one or more selectable states corresponding to the one or more snapshot states of the cloud-based storage system; and transitioning, in response to a selection of a particular snapshot state from among the one or more snapshot states, the configuration of the cloud-based storage system from a current state to the particular snapshot state.

Restoring a cloud-based storage system to a selected state

Reverting between codified states in a cloud-based storage system, including: generating, in response to receiving a request to change a configuration of the cloud-based storage system to an updated state, a snapshot state of a current state of the cloud-based storage system; transitioning the configuration of the cloud-based storage system from the snapshot state to a next state toward the updated state; and reverting, in response to not configuring the cloud-based storage system in accordance with the updated state, configuration of the cloud-based storage system from the next state to the snapshot state.

Reverting between codified states in a cloud-based storage system

Deduplication-aware per-tenant encryption

Growing community of inventors

Sunnyvale, CA, United States of America

Swapnil Chandrashekhar Nagle