Dell Products Inc.

Emc Corporation

Emc IP Holding Company LLC

Emp IP Holding Company LLC

Walter A O'Brien, Iii

Gaurav Chawla

William Price Dawkins

Mukund Purshottam Khatri

Elie Antoun Jreij

Jimmy Doyle Pike

Mark Steven Sanders

Ali Aiouaz

Robert Wayne Hormuth

Leland W Thompson

Yossef Saad

Dennis Thomas Duprey

Thomas Earl Linnell

Thomas N Dibb

Stephen J Todd

Xiangping Chen

Roy E Clark

David W Harvey

Doron Tal

David Haase

Steven D Sardella

Wai Chuen Yim

Paul Thomas McGrath

Sorin Faibish

Uday K Gupta

Andreas L Bauer

Peter C Bixby

Matthew H Long

Stephen A Fridella

George M Ericson

Walter T Dobberpuhl

Charles H Hopkins

James Ulery

Timothy D Sykes

Jennifer Lyn Milliken Nicoletti

Jean-Pierre Bono

Rivka Mayraz Matosevich

John S Harwood

Miles Aram De Forest

David Lionel Black

Jeffrey Alan Brown

William Emmett Lynn

Karl M Owen

Randall Shain

Robert W Beauchamp

Michael D Haynes

Steven A Morley

Michel F Fisher

Gilad Sade

Frank Widjaja Yu

Gregory M Allen

Xunce Zhou

Henry Austin Spang, Iv

Marcelo Silva Saraiva

Matthew J Borsini

Pawan Misra

Amnon Izhar

Andy Kubicki

A ransomware protection smart network interface controller (SmartNIC) is configured to create a secure snapshot of a boot device of an information handling system (IHS), create a secure alternate boot device on each boot of the IHS, and export the boot device and the secure alternate boot device to the IHS. The IHS is configured to set a boot order of the IHS, with the secure alternate boot device immediately after the boot device in the boot order. The ransomware protection SmartNIC may also be configured to create a read and writeable snapshot from the secure snapshot of the IHS boot device, and may delete, on each subsequent boot of the IHS, the read and writeable snapshot for the prior boot, and create a new read and writeable snapshot from a secure snapshot of the IHS boot device from the subsequent boot of the IHS.

Systems and methods for protecting information handling system boot using smart network interface controllers

A ransomware protection smart network interface controller (SmartNIC) is configured to implement data protection in a domain of the SmartNIC by taking a secure snapshot, a point in time image of a storage object, and retaining the point in time image of the storage object until a retention timer has expired, and implementing vault semantics and operational controls. The ransomware protection SmartNIC is also configured to implement ransomware detection in the domain of the SmartNIC by implementing inline ransomware attack detection and/or near-line ransomware attack detection, using periodic snapshots, by evaluating probability of a ransomware attack based, at least in part, on a delta change set in consecutive snapshots. The ransomware protection SmartNIC is further configured to implement ransomware protection policies in the domain of the SmartNIC by implementing policies of when the secure snapshots are taken.

Ransomware protection systems and methods leveraging smart network interface controllers

A method for facilitating a connection to a storage volume, that includes receiving, by a storage manager, an access request from compute node, where the access request includes a storage volume identifier associated with the storage volume, performing a lookup, in a target database, to identify a target entry that includes the storage volume identifier, making a first determination that the target database does not comprise the target entry, and based on the first determination, creating a first storage target cluster for the storage volume, and sending first connection instructions to the compute node, where the first connection instructions comprise a first storage target cluster identifier associated with the first storage target cluster.

Systems and methods for establishing scalable storage targets

An information handling system ransomware protection device has a ransomware protection engine that implements secure snapshot policies in a domain of a storage device by taking a secure snapshot of a data object, by creating a point in time image of a storage object and retaining the point in time image of the storage object until a retention timer has expired. The ransomware protection engine also implements snapshot virtualization in the domain of the storage device by mapping the secure snapshot, and may implement vault semantics and operational controls to data in the domain of the storage device as management functions of the secure snapshot. The ransomware protection device may be, or include, an application specific integrated circuit that includes the ransomware protection engine and is coupled to, or in, the storage device, or a memory controller of the storage device may include the ransomware protection engine.

Systems and methods for protecting information handling systems using a ransomware protection storage device

Techniques described herein relate to a method for performing computational offloads for composed information handling systems. The method includes obtaining, by a system control processor associated with a composed information handling system, a computational offload request associated with a dataset from an application executing on an at least one compute resource set; in response to obtaining the computational offload request: identifying a dataset location associated with the dataset in the composed information handling system; identifying resources of the composed information handling system capable of performing the computational offload request; selecting a resource of the resources to perform the computational offload; and initiating performance of the computational offload request on the selected resource.

Computational offloads for composed information handling systems

A self-healing Hard Disk Drive (HDD) system includes a chassis housing an HDD device self-healing subsystem coupled to an HDD data storage system that includes a plurality of HDD data storage resources. The HDD device self-healing subsystem prevents data from being stored on a first HDD data storage resource that is included in the plurality of HDD data storage resources included in the HDD data storage system. When the HDD device self-healing subsystem determines that data storage operations using a second HDD data storage resource that is included in the plurality of HDD data storage resources will be subsequently unavailable, it remaps logical addresses associated with the second HDD data storage resource to the first HDD data storage resource, and provides the data that was stored using the second HDD data storage resource on the first HDD data storage resource.

Self-healing hard disk drive system

A read-disturb-based read temperature information access system includes a read-disturb-based read temperature information management subsystem coupled to a plurality of storage devices that each include a read-disturb-based read temperature information Application Programming Interface (API). Each storage device generates and stores read-disturb-based read temperature information associated with that storage device, and when a read-disturb-based read temperature information command is received from the read-disturb-based read temperature information management subsystem that conforms to the read-disturb-based read temperature information API, the storage device receiving that read-disturb-based read temperature information command will execute it to perform at least one operation using the read-disturb-based read temperature information associated with and stored by that storage device.

Read-disturb-based read temperature information access system

A read-disturb-based logical storage read temperature identification system includes a global read temperature identification subsystem coupled to at least one storage device. Each at least one storage device identifies read disturb information associated with rows provided by the at least one physical block in that storage device from at least one physical block in that storage device, and maps the read disturb information associated with the rows provided by the at least one physical block in that storage device to one or more logical storage elements included in a logical-to-physical storage element mapping for that storage device to generate a local logical storage element read temperature map. Each at least one storage device may then provide its local logical storage element read temperature map to the global read temperature identification subsystem.

Read-disturb-based logical storage read temperature information identification system

A read-disturb-based read temperature identification system includes storage device(s) that each determine read disturb information for each block in that storage device, use that read disturb information to identify a subset of rows in at least one block in that storage device that have a higher read temperature than the other rows in the at least one block in that storage device and, based on that identification, generate and store a local logical storage element read temperature map that identifies a subset of logical storage elements associated with that storage device that have a higher read temperature than the other logical storage elements associated with that storage device. A global read temperature identification subsystem coupled to the storage device(s) may then retrieve at least a portion of the local logical storage element read temperature map(s) and use them to generate a global logical storage element read temperature map.

Read-disturb-based read temperature identification system

A communication system personality provisioning system includes a communication system included in a computing system and coupled to a management system. The communication system stores authentication information in a UEFI database of a UEFI system in the communication system. The communication system receives a first operating software image and application/service from the management system, authenticates the first operating software image and application/service via first secure initialization operations performed by the UEFI system using the authentication information and, in response, installs the first operating software image and application/service on the communication system. The communication system subsequently receives a second operating software image and application/service from the management system, authenticates the second operating software image and application/service via second secure initialization operations performed by the UEFI system using the authentication information and, in response, installs the second operating software image and application/service on the communication system.

Communication system personality provisioning system

A read disturb information isolation system includes a storage subsystem including a plurality of blocks that each include a plurality of rows, and a read disturb information isolation subsystem that is coupled to the storage system. For at least one of the plurality of blocks, the read disturb information isolation system retrieves data from at least a subset of rows in that block, identifies read disturb information for that data, performs at least one isolation operation on that read disturb information to generate isolated read disturb information, and provides that isolated read disturb information to a read temperature identification subsystem. The read temperature identification subsystem may then use the isolated read disturb information provided by the read disturb information isolation subsystem to generate a local logical storage element read temperature map.

Read disturb information isolation system

A read-disturb-based read temperature time-based attenuation system includes a storage device that is coupled to a global read temperature identification subsystem. The storage device determines current read disturb information for data stored in a block in the storage device during a current time period, processes the current read disturb information and previous read disturb information that was determined during at least one previous time period that was prior to the current time period in order to generate a read temperature for the data stored in the block, generates a local logical storage element read temperature map that includes the read temperature, and provides the local logical storage element map to the global read temperature identification subsystem.

Read-disturb-based read temperature time-based attenuation system

A read disturb information determination system includes a storage device coupled to a global read temperature identification system. The storage device reads, from a first row in a storage subsystem in the storage device, data stored in bits that were previously identified as being susceptible to read disturb effects, and error correction information associated with the data. The storage device uses the error correction information to identify a number of the bits that store portions of the data with errors and, based on the number of bits that store portions of the data with errors, determines read disturb information for the first row in the storage subsystem in the storage device. The storage device then uses the read disturb information to generate a read temperature for a second row in the storage subsystem in the storage device, and provides the read temperature to the global read temperature identification system.

Read disturb information determination system

A read-disturb-based read temperature determination system includes a storage device that is coupled to a read temperature adjustment subsystem. The storage device receives data from the read temperature adjustment subsystem, stores the data in a block in the storage device, identifies read disturb information for a row in the block at a plurality of different times, processes the read disturb information to generate a read temperature for the row, provides the read temperature in a local logical storage element read temperature map and, based on instructions from the read temperature adjustment subsystem, adjusts the read temperature provided in the local logical storage element read temperature map.

Read-disturb-based read temperature determination system

A system for providing computer implemented services using information handling systems includes persistent storage and a system control processor manager. The system control processor manager instantiates composed information handling systems using the information handling systems; monitors, using system control processors of the composed information handling systems, operation of the composed information handling systems to obtain operation information; makes a determination, based on the operation information, that the computing implemented services provided by the composed information handling systems are substandard; and in response to the determination: manages operation of the composed information handling systems to provide standards compliant computer implemented services by modifying a composition of at least one of the composed information handling systems using a system control processor of the system control processors.

System and method for managing resource allocations in composed systems

Growing community of inventors

Westborough, MA, United States of America

Walter A O'Brien, Iii