Comm Vault Systems, Inc.

Tirthankar Chatterjee

Arun Prasad Amarendran

Yongtao Liu

Jun H Ahn

Yun Yuan

Rajiv Kottomtharayil

Prakash Varadharajan

Prosenjit Sinha

Bhavyan Bharatkumar Mehta

Manas Bhikchand Mutha

Ho-Chi Chen

Chitra Ramaswamy

Sandeep Naidu Pamidiparthi

Manoj Kumar Vijayan

Prasad Nara

Sangeetha Janakiraman

An illustrative cloud-based air-gapped data storage management (destination) system obtains authorized access to other (source) systems' backup copies, replicates those copies within the destination system, parses supplemental metadata included in the source backup copies, and integrates the replica copies into the destination system as though natively created there. Replica copies are integrated as backup copies without first restoring the source backup copies to a native data format. The source system lacks knowledge of or connectivity with the destination system, thus maintaining an 'air gap' between the systems. The destination system preferably operates in a cloud computing environment. The destination system uses supplemental metadata from the replica copies to re-create or mimic the source's computing environment and to restore backed up data from the replica copies. The destination system also operates as an autonomous analytics engine, applying value-added services to backed up data pulled from source system(s).

Cloud-based air-gapped data storage management system

A system for providing user access to electronic mail includes an email client and an email server. The email client receives and communicates a user interaction with an email message The email server that receives the communication, determines whether the email message stored in a live database or in a backup storage. Upon determination that the email message is stored in a backup storage, the email server performs a message exchange with a backup storage system to perform the user-requested action.

Techniques for serving archived electronic mail

An information management system according to certain aspects can implement application archiving. The system may archive one or more applications on computing devices to make more storage space available on these devices. The system can determine which applications on client computing device to archive based on various factors. Some examples of factors can include frequency of use, application type, amount of application data and/or storage, user and/or device location, etc. The data to be archived can include one or more executable file(s), metadata, actual data, etc. After an application is archived, the system can generate a placeholder for the application; a placeholder can include information for restoring the archived application.

Archiving applications in information management systems

A backup or storage management system is provided that can secure data within a primary storage environment that stores data in an unsecured format. The storage management system can automatically analyze data received for backup from the primary storage environment and determine whether the data includes information that has been identified as sensitive and/or information that is determined within a threshold degree of probability to be sensitive. The storage management system can then modify the storage of the data that includes sensitive information at the primary storage environment, thereby enabling the data to be secured within the unsecured, or partially secured, primary storage environment. Advantageously, in certain embodiments, by securing data with sensitive information within an unsecured storage environment, embodiments disclosed herein can reduce the occurrences of a data breach or data leak.

Data protection within an unsecured storage environment

A method and system for remotely executing commands at a client computing device. The method comprises receiving a selection of commands to transmit to a group of client computing devices via a webserver. The group of client computing devices, as well as the selected commands, are associated with a group identifier. The method validates access privileges of the administrator to transmit the selected commands to the group of client computing devices. Upon receipt of the selected commands, the webserver transmits the selected commands to at least one registered proxy server. The registered proxy server then determines one or more client identifiers associated with the group identifier. Each client identifier is assigned to a client computing device. Upon receipt of the selected commands, the registered proxy server transmits the selected commands to client computing devices in the group of client computing devices matching the determined client identifiers.

Remote commands framework to control clients

According to certain aspects, an information management system can include a client computing device residing in a primary storage subsystem configured to: identify a first application to archive to one or more secondary storage devices residing in a secondary storage subsystem, the first application being one of a plurality of applications installed on the client computing device; identify first data associated with the first application, the first data stored in the one or more primary storage devices associated with the client computing device; forward an executable instance of the first application and the first data to a first secondary storage computing device to copy the executable instance of the first application and the first data to the one or more secondary storage devices; and delete the first application from the one or more primary storage devices.

Data storage systems are disclosed for automatically generating encryption rules based on a set of training files that are known to include sensitive information. The system may use a number of heuristic algorithms to generate one or more encryption rules for determining whether a file includes sensitive information. Further, the system may apply the heuristic algorithms to the content of the files, as determined by using natural language processing algorithms, to generate the encryption rules. Moreover, systems are disclosed that are capable of automatically determining whether to encrypt a file based on the generated encryption rules. The content of the file may be determined using natural language processing algorithms and then the encryption rules may be applied to the content of the file to determine whether to encrypt the file.

Data storage systems and methods

According to certain aspects, an information management system can include a client computing device residing in a primary storage subsystem configured to: identify a first application to archive to one or more secondary storage devices residing in a secondary storage subsystem, the first application being one of a plurality of applications installed on the client computing device; identify first data associated with the first application, the first data stored in the one or more primary storage devices associated with the client computing device; forward an executable instance of the first application and the first data to a first secondary storage controller computer to copy the executable instance of the first application and the first data to the one or more secondary storage devices; and delete the first application from the one or more primary storage devices.

Token-based encryption determination process

Token-based encryption rule generation process

Deriving encryption rules based on file content

The automatic, tiered retention storage system according to certain aspects can automatically classify data items based on content, such as based on the inclusion of search terms in the data items, or based on metadata or other characteristics associated with the data. Based on the classification, the system can assign the data items to corresponding user-defined 'buckets.' In some embodiments, each bucket is associated with a particular tier in the storage system having a specific retention period.

Growing community of inventors

Tinton Falls, NJ, United States of America

Tirthankar Chatterjee