Clumio, Inc.

Comm Vault Systems, Inc.

Woonho Jung

Xia Hua

Rajeev Kumar

Lawrence Jaemyung Chang

Abdul Jabbar Abdul Rasheed

Douglas Qian

John Stewart

Rolland Miller

Karan Dhabalia

Hung Hing Anthony Pang

Deepak Chawla

Richa Sehgal

Deepan Balajhi Saravanan

Michal Stanislaw Ostrowski

Kanwaljeet Sachdev

Aniruddh Poornabodha Bharadwaj

Raghav Anand

Chandan Sajjan Agarwal

Nicholas Gerald Zehender

Maadhav Kaushal Shah

Disclosed techniques relate to security of backup data. In some embodiments, a method includes receiving, by data protection service running on a cloud computing system, a first encrypted copy of a backup of a first data store that is associated with a first account of an organization, where the first encrypted copy is encrypted using a first custodian cryptographic key that is shared between the organization and the data protection service that is different than a first production cryptographic key that is private and used by the organization to encrypt a non-backup version of the first data store. The method may include generating a second encrypted copy of the backup, including by encrypting the backup using a storage cryptographic key. The method may include storing the second encrypted copy of the backup in a second data store that is associated with the data protection service.

Data protection service using isolated, encrypted backup data

Techniques are disclosed relating to providing protection groups and rapid determination of expired objects and associated storage resources in a cloud-based backup storage context. In various embodiments, the disclosed techniques include generating, by a computing system, incremental backup data for a backup based on protection group information, including a set of cloud-based key-value data store buckets, filter information, and policy information. Disclosed techniques also include rapid determination of expired objects and associated storage resources. Disclosed techniques may advantageously provide a centralized view across buckets, accounts, and regions and allow users to target specific subsets of their data stores for backup, which may improve performance and reduce backup storage costs, relative to traditional techniques.

Protection groups for backing up cloud-based key-value stores

Techniques are disclosed relating to providing data views from a time-series data lake to a data warehousing system. In various embodiments, the disclosed techniques include providing, by a cloud-based service, a data lake service that maintains a time-series data lake storing a time-series representation of data from a plurality of data sources associated with a first organization. In some embodiments, the cloud-based service may receive additional backup data, including a first backup image of a first data source, associated with the first organization as part of a backup operation. The cloud-based service may then store a logical backup of the first data source in the data lake and, in response to a query from a data warehousing system, the cloud-based service may retrieve a particular view of the backup data from the data lake and provide it to the data warehousing system.

Providing data views from a time-series data lake to a data warehousing system

Techniques are disclosed relating to the storage of backup data using a time-series data lake. For example, in various embodiments, the disclosed techniques include providing a cloud-based data lake service that maintains data for a plurality of organizations and where, for a first organization, the cloud-based data lake service maintains a time-series data lake that stores a time-series representation of data associated with the first organization. In various embodiments, the data lake service may receive backup data from a plurality of data sources associated with the first organization, generate metadata associated with the backup data, and store the backup data, along with the corresponding metadata, in the time-series data lake.

Storage of backup data using a time-series data lake

Techniques are disclosed relating to the modification of data in a time-series data lake. For example, in various embodiments, the disclosed techniques include a cloud-based service that maintains a time-series data lake that includes, for an organization, a time-series representation of data from one or more of the organization's data sources. The cloud-based service may receive a request to modify data associated with a particular user of the organization. As a non-limiting example, this request may correspond to a 'Right to Be Forgotten' request from the particular user. This request may include one or more search parameters and an indication of one or more modifications to be performed. Based on the request, the cloud-based service may parse the time-series data lake to identify a subset of data that matches the one or more search parameters and perform the requested modifications on the subset of data in the time-series data lake.

Modification of data in a time-series data lake

Growing community of inventors

Cupertino, CA, United States of America

Woonho Jung