Emc IP Holding Company LLC

Dell Products Inc.

Emc Corporation

Victor Salamon

Steven Richard Bromling

Roel Van Der Goot

David Lionel Black

Ying Xie

Ashish Arun Palekar

Paul Normand James Berube

Jeremy J Nickurak

Peter D Cutts

Bradford B Glade

Brian Lake

Paul A Shelley

Ronald C Unrau

Anshul Chadda

Alampalli Ravi Sankar Kishore

Thomas Polasek

John Mulvany-Robbins

Jesse A Huard

John Afaganis

Tsung Lin Yong

Paul Berube

Paul N Berube

John Robbins

Systems and methods for improved security by facial micro-expression sequence are described. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a processor; and a memory coupled to the processor, where the memory includes program instructions store thereon that, upon execution by the processor, cause the IHS to: obtain a video or a series of images of at least a portion of a face of a user of the IHS; determine a sequence of micro-expressions from the video or series of images; compare the determined sequence of micro-expressions to a stored sequence of micro-expressions; and authenticate the user based, at least in part, on the comparison indicating a match.

Systems and methods for improved security by facial micro-expression sequence

Methods, apparatus, and processor-readable storage media for managing initiator identities are provided herein. An example computer-implemented method includes monitoring one or more port identifiers used by respective ones of a plurality of host initiators for accessing one or more storage components of a storage system; detecting, based on the monitoring, anomalous behavior of at least a first one of the host initiators, wherein the detecting comprises identifying that the first host initiator is using at least one same port identifier as a second one of the host initiators to access a particular one of the storage components; and performing at least one automated action in response to the detecting.

Managing initiator identities

A technique for transferring data from a host to a data storage system includes monitoring performance metrics indicative of data compression and network transmission from the host to the storage system and dynamically selecting a compression process from among multiple options of compression processes to optimize end-to-end performance based on the monitored indicators.

Adaptively selecting compression process based on end-to-end performance

An information handling system (IHS) (e.g., a terminal, automated teller machine, etc.) initiates a password input session, creates a Random Transformation Algorithm (RTA) for the input session, instructs an IHS user to apply the RTA to entry of a key sequence of the password, accepts entry of the key sequence from the user via an IHS keyboard and/or keypad, and reverses transformation of the user entry of the key sequence in accordance with the RTA logically arriving at the password. The IHS may then (encrypt and) send the password to a server for authentication. The RTA may swap keyboard and/or keypad characters by position and/or value, shift keyboard and/or keypad character values up or down, geometrically move keyboard and/or keypad characters, and/or rotate keyboard and/or keypad characters about an axis. The instructions may be communicated to the user via a third party device, the keyboard, a display, or the like.

Security through randomized dynamic keyboard or keypad transformation

According to one embodiment, a computing cluster-wide shredding system includes a shredding device configured to shred multiple computing components of a computing cluster, such as a data center. The shredding device operates under control of a shredding controller. The shredding controller includes executable instructions that receives a trigger signal requesting that the computing cluster be shredded, and controls the shredding device to shred the computing cluster.

Computing cluster-wide shredding system and method of using the same

Methods, apparatus, and processor-readable storage media for coordinating storage system events are provided herein. An example method includes generating a representation of a set of components associated with a storage system comprising information corresponding to at least one data mirror in the set and at least one path associated with the set; obtaining a request from a given component in the set to perform an action that affects one or more of: at least one data mirror and at least one path; determining, based at least in part on the generated representation, whether the action will reduce a redundancy of the storage system to below a threshold level of redundancy specified for the storage system; and providing, to the given component, a response based at least in part on a result of the determining, wherein a performance of the action is controlled based at least in part on the response.

Redundancy-aware coordination of storage system events

Methods, apparatus, and processor-readable storage media for providing an automated services exchange are described herein. An example computer-implemented method includes obtaining provider requests from one or more service providers, wherein each of the provider requests comprises an indication of at least one type of service provided by the corresponding service provider and attributes associated with the at least one type of the service; processing the provider requests, wherein the processing for a respective one of the provider requests comprises generating a corresponding set of metrics associated with the at least one type of service and the attributes of the respective provider request; and matching a given one of the provider requests to at least one consumer request based at least in part on: the processing and constraints identified in the at least one consumer request with respect to at least a portion of the attributes of the given provider request.

Automated services exchange

Methods, system, and non-transitory processor-readable storage medium for distributed and multi-level server authentication are provided herein. An example method includes receiving, by a plurality of second servers, a plurality of authentication secret slices, where a first server transmits each of the plurality of authentication secret slices to a respective second server of the plurality of second servers, receiving, by the first server, an authentication confirmation from each of the plurality of second servers and confirming, by the first server to a client, that an authentication request has succeeded.

Distributed / multi-level server authentication

Methods and systems are provided for managing a cloud deployment of software applications. A plurality of virtual machines of the cloud deployment that are used to operate the software applications are defined. Network communications between the virtual machines are monitored to measure bandwidth utilization by the virtual machines. Resource utilization by each of the virtual machines, such as memory, storage and processor usage, are also monitored. Availability constraints for the software applications are determined. A resource utilization function is defined for the deployment of the software applications for operation on some or all of the virtual machines within the availability constraints. The resource utilization function is solved to determine an updated cloud deployment of the software applications on a selected portion of the virtual machines. The cloud deployment is reconfigured to utilize the selected portion of the virtual machines, thus collapsing the resources utilized by the cloud deployment.

Systems and methods for collapsing resources used in cloud deployments

Methods, apparatus, and processor-readable storage media for protecting data based on a context of data movement operations are provided herein. An example computer-implemented method includes identifying a context of a data movement operation based at least in part on a source and an indicated destination of data associated with the data movement operation; applying one or more data protection policies to the data movement operation based at least in part on the identified context, wherein a given data protection policy comprises one or more indications of one or more content scanners that are configured to detect data belonging to one or more regulated data classes; and in response to detecting data associated with the data movement operation that belongs to at least one of the regulated data classes, performing one or more automated remedial actions associated with the at least one regulated data class.

Protecting data based on context of data movement operation

Techniques are provided for authenticating communications between physical ports using knowledge of shared secrets. One method comprises receiving, by a first entity, a connection request to establish a communication between physical ports of the first entity and a second entity; providing a first pseudo-random value to the second entity; obtaining a shared secret for communications with the second entity; generating a first hash value based on the shared secret and the first pseudo-random value; obtaining a second hash value from the second entity based on the shared secret and the first second pseudo-random value; and authenticating the communication in response to the first entity validating the first hash value using the second hash value. An encryption key based on the shared secret can protect communications between the physical ports of the first and second entities.

Authenticating communications between physical ports using knowledge of shared secrets

Methods, apparatus, and processor-readable storage media for determining migrations between geographically distributed data centers are provided herein. An example computer-implemented method includes obtaining information associated with data centers that are geographically distributed relative to one another, wherein the information includes: information related to migration factors specific to the respective geographic location of each of the data centers and information related to a respective set of processes of each of the data centers; automatically generating a migration schedule based at least in part on the obtained information, wherein the migration schedule comprises one or more times for migrating at least one of the processes of a first one of the data centers to a second one of the data centers; and automatically triggering at least one migration of the at least one process between the data centers based at least in part on the migration schedule.

Determining migrations between geographically distributed data centers

Methods, apparatus, and processor-readable storage media for protecting data based on a context of data movement operations are provided herein. An example computer-implemented method includes obtaining a list of carriers in response to a request to transfer data, stored on a storage system associated with a first location, to a second location, wherein each of the carriers is configured to physically move at least one mobile storage unit; scheduling at least two of the carriers to perform the transfer; transferring at least a portion of the data as data chunks from the first location to the second location, wherein each of the scheduled carriers transfers different data chunks via the corresponding at least one mobile storage unit; and transferring, over a network, at least one of: control information corresponding to the transfer and at least another portion of the data associated with the request.

Secure data transfers using physical carriers

Methods, apparatus, and processor-readable storage media for tracking data mirror differences are provided herein. An example computer-implemented method includes obtaining a request to start tracking data differences between a plurality of data mirror volumes of a storage system, wherein the storage system is configured to apply at least a first data tracking technique that tracks the data differences using one or more bitmap records and a second data tracking technique that tracks the data differences using or more journal records; selecting at least one of the first data tracking technique and the second data tracking technique using one or more selection criteria; and tracking the data differences in accordance with the selected at least one data tracking technique.

Tracking data mirror differences

Data access threat detection and prevention modules are implemented proximate to data storage, e.g. in disk array controllers. The modules may be implemented in hardware or firmware. The modules monitor IOs from the disk array controllers to access managed drives. IOs exhibiting access parameters that deviate from a whitelist or match a blacklist are deemed to be suspicious. The whitelist may be created from monitoring normal, safe IOs and storing associated access patterns. In response to detection of suspicious activity the modules may halt or slow subsequent IOs, e.g. IOs to the same data, all data, an associated logical device, or the managed drive.

Growing community of inventors

Edmonton, Canada

Victor Salamon