Emc IP Holding Company LLC

Kasten, Inc.

Maginatics LLC

Dropbox, Inc.

Other

Emc Corporation

Thomas Manville

Julio Lopez

Rajiv Desai

Vaibhav Kamra

Nathan Rosenblum

Deepika Dixit

Onkar Bhat

Alex Vorbau

Digant Kasundra

Mark Severson

Niraj Tolia

Shrinand Javadekar

Jeff Chienyu Wang

Jonathan Shih

Pavan Navarathna Devaraj

Aaron H Alpar

Eric William Hamilton

Disclosed herein are system, method, and computer program product embodiments for multi-cluster access. In some embodiments, the server receives a first request to bind one or more cluster roles associated with a user to each of one or more secondary computing clusters. The server binds the user's credentials with the one or more cluster roles corresponding to each of one or more secondary computing clusters. Furthermore, the server receives a second request for providing the user access to the primary computing cluster. Moreover, the server receives a third request from the user interface intended for at least one secondary computing cluster. The server forwards the third request to the at least one secondary computing cluster while impersonating at least one cluster role of the one or more cluster roles corresponding to the at least one secondary computing cluster.

Multi-cluster access

Disclosed herein are system, method, and computer program product embodiments for role-based access control in multi-tenancy environments using cloud-native objects. An embodiment operates by executing an application in a cluster. The embodiment creates roles corresponding to a user or group of users. The embodiment defines a set of permissions for the roles. The embodiment binds the roles to native objects in a cloud orchestrator based on the set of permissions for the roles. The embodiment receives a first request from a user to log in. The embodiment transmits a request to authenticate the user. The embodiment receives a list of a set of permissions for the user. The embodiment causes a display of system assets on a user interface of a client device based on the list of the set of permissions for the user.

Role-based access control using cloud-native objects in multi-tenant environments

Disclosed herein are system, method, and computer program product embodiments for transforming backups of applications. An embodiment operates by extracting a resource snapshot into memory. The resource snapshot is formatted in a first configuration. An embodiment performs a transformation on the resource snapshot, thereby transforming the resource snapshot from the first configuration to a second configuration for an environment into which the resource snapshot is being restored. The transformation is made up of a set of operations. One of the operations includes a regular expression. Once the transformation is complete, the resource snapshot is restored to the environment based on the second configuration.

Cloud-native cross-environment restoration

Embodiments described herein are directed to backing up and recovering cloud-native applications. In some embodiments, the data engine maps a first set of data volumes to a data repository dedicated to store a backup of the data associated with the application. Furthermore, the data engine transmits, using a dynamically generated process, the data stored in the identified first set of data volumes to the data repository for backup based on the mapping. The data engine may also initiate a recovery of the application. The data engine may use a new dynamically generated process to identify and transmit a respective data set to a corresponding data volume for storage. Moreover, the data engine may use the new process to restore the components of the application using each respective identified data set.

Backing-up application data from cloud-native applications

Disclosed herein are system, method, and computer program product embodiments for multi-cluster boot-strapping. In some embodiments, a server residing on a primary computing cluster receives a first request to establish a temporary connection between the primary computing cluster and a secondary computing cluster. The server establishes the temporary connection between the primary computing cluster and the secondary computing cluster using the first set of credentials. Furthermore, the server receives a second request to establish a persistent connection between the primary computing cluster and the secondary computing cluster. The server establishes the persistent connection by transmitting a third request comprising the configuration settings to the secondary computing cluster thereby causing the secondary computing cluster to generate a second set of credentials corresponding to the primary computing cluster. The server receives and stores the second set of credentials.

Multi-cluster boot-strapping

Disclosed herein are system, method, and computer program product embodiments for multi-cluster distribution. In some embodiments, a server on a primary computing cluster receives an update to an object stored on the primary computing cluster and to be implemented by a secondary computing cluster. Furthermore, the server receives a request to distribute the object to the secondary computing cluster. The server further retrieves the object based on an object identifier or an identifier of the secondary computing cluster. Moreover, the server identifies the secondary computing cluster based on the object identifier or the identifier of the secondary computing cluster. The server then distributes the object to the secondary computing cluster via a persistent connection.

Multi-cluster distribution

Disclosed herein are system, method, and computer program product embodiments for encryption key management. An embodiment operates by executing an initial non-backup instance of an application and generates a primary key using a cryptographic algorithm. The embodiment requests a customer to create a passphrase configured to encrypt and decrypt the primary key. The embodiment generates a derived key using a cryptographic algorithm and the customer passphrase as input. The embodiment then encrypts the primary key using the generated derived key and stores the encrypted primary key in a catalog.

Encryption key management

Techniques to reduce database fragmentation are disclosed. In various embodiments, an indication is received to store an attribute value for an entity that has a row or other entry in a first database table, wherein the first database table does not have a column for the attribute. It is determined that the value corresponds to a mapped value that is associated with not having an entry in a separate, second database table configured to store the attribute. Entries are made in the second database table only for values of the attribute other than the mapped value. Application level software code is configured to associate absence of a row in the second database table with the mapped value for the attribute.

Reducing database fragmentation

One or more embodiments of a video editing system enable one or more users to conveniently edit a digital video. In particular, an online content management system can provide a low resolution version of a digital video to a client device. A user can interact with the low resolution digital video and generate user edits to apply to the digital video. The online content management system can further apply any number of users edits to low and high resolution versions of the digital video at a server device. The video editing system enables users to more conveniently apply iterative edits to digital videos. Additionally, the video editing system enables multiple users to cooperatively edit a digital video from multiple client devices.

Synchronizing edits to digital content items

A system and method for enabling users to operate multiple blockchain (or distributed ledger) nodes efficiently, at a much lower cost, etc. For example, when one blockchain starts to take up resources, the system can automatically adjust by looking at the application container layer to see if it is possible to shift resources. It can also shift resources at the server layer to adjust for computation and memory resources to, for example, increase efficiency. It may also share storage for nodes that share the same blockchain to, for example, increase efficiency. The system can also identify tokens that are more efficient to stake, and to shift tokens from one blockchain to another for staking reward efficiencies, etc. It may also deploy one node to another geographic region to increase decentralization, as well as adjust rewards and commissions to provide incentives to boost decentralization as well.

Method and system for heterogeneous blockchain service management

A combined object associated with a data chunk included in a request file is determined. An encryption key associated with the combined object and a corresponding chunk hash value associated with the data chunk are used to determine a corresponding chunk key associated with the data chunk. At least a locator to be used to retrieve the combined object and the corresponding chunk key associated with the data chunk are provided to a requesting system.

Secure cloud-based storage of data shared across file system objects and clients

Techniques to provide a de-duplicating distributed file system using a cloud-based object store are disclosed. In various embodiments, a request to store a file comprising a plurality of chunks of file data is received. A determination to store at least a subset of the plurality of chunks is made. The request is responded to at least in part by providing an indication to store two or more chunks comprising the at least a subset of the plurality of chunks comprising the file as a single stored object that includes the combined chunk data of said two or more chunks.

De-duplicating distributed file system using cloud-based object store

Epoch-based management of file system data is disclosed. In various embodiments, for each of a plurality of snapshots, data that associates with the snapshot a corresponding last chunk identifier assigned as of a time at which the snapshot is or was created is stored a in a first data structure. For each of a plurality of chunks of file system data no longer referenced by any live file system object, an epoch identifier associated with an epoch in which the chunk became no longer referenced by any live file system object is stored in a second data structure. A chunk identifier and associated epoch comprising an entry in the second data structure are compared with one or more entries in the first data structure to determine whether a chunk associated with the chunk identifier is associated with a snapshot that continues to be retained.

Epoch based snapshot summary

Techniques to provide secure cloud-based storage of data shared across file system objects and clients are disclosed. In various embodiments, a primary encryption key is determined for an object associated with a plurality of component chunks of file system data. The primary encryption key is used to generate for each of said component chunks a corresponding chunk key, based at least in part on the primary encryption key and data comprising or otherwise associated with the chunk. The respective chunk keys are provided to a file system client configured to create and store the object at least in part by encrypting each chunk included in the plurality of component chunks using the chunk key provided for that chunk to generated encrypted chunk data, and combining the encrypted chunk data to create and store the object.

Growing community of inventors

Mountain View, CA, United States of America

Thomas Manville