Emc IP Holding Company LLC

Dell Products Inc.

Yossef Saad

Assaf Natanzon

William Price Dawkins

Mukund Purshottam Khatri

Gaurav Chawla

Mark Steven Sanders

Elie Antoun Jreij

Jimmy Doyle Pike

Walter A O'Brien, Iii

Robert Wayne Hormuth

Itay Glick

Jehuda Shemer

Ravi Vijayakumar Chitloor

Alex Solan

Mahesh Kamat

Michael Trachtman

Chegu Vinod

Radia Joy Perlman

Saar Cohen

Charles W Kaufman

Kfir Wolfson

Philip Derbeko

Amit Lieberman

David Zlotnick

Naveen Rastogi

Brian Lake

Yaniv Harel

Matan Gilat

Prasanna Malaiyandi

Cody Garvin

Harel Ram

A system for providing data protection services for data hosted by composed information handling systems includes a system includes a system control processor manager. The manager obtains a data protection architecture; identifies, based on the data protection architecture, first computing resources for a first pool that provides a first set of functionalities of the data protection services; identifies, based on the data protection architecture, second computing resources for a second pool that provides a second set of functionalities of the data protection services; assigns, based on hardware components of the first computing resources, a portion of the first set of functionalities to a first portion of the first computing resources; assigns, based on the hardware components of the first computing resources, a second portion of the first set of functionalities to a second portion of the first computing resources; and instantiates, based on the assignments, the data protection architecture.

System and method for dynamic data protection architecture

Described is a system for distributing data amongst storage components using data sensitivity (or security) classifications. The system may define categories for classifying data files and assign a sensitivity (or security) rating to each of the defined categories. The categories and/or associated sensitivity ratings may be determined using machine learning components that may leverage industry-specific information or data sensitivity information used by other clients. The system may then continuously reevaluate (or reclassify) data files to determine whether they are stored on a storage component that meets the necessary data sensitivity requirements. If the system determines particular data files are stored on a corresponding storage component that does not meet certain data sensitivity requirements, the system may perform an action to secure the particular data files.

Distributing data amongst storage components using data sensitivity classifications

Described is a system for intelligent and reversible data masking of computing environment information shared with an external system. The system may leverage a secure masking agent that acts as an intermediary between a computing system (or environment) and an analytics component. The masking agent may provide real-time reversible data masking that ensures that sensitive information is not exposed outside of a secure (e.g. on-premises) environment, while at the same time ensuring the analytics component receives sufficient contextual information to perform a detailed analysis with the shared information. For example, the system may identify and mask identifying information of a particular server or host, while still retaining certain contextual information such as a network topology.

Intelligent and reversible data masking of computing environment information shared with external systems

A request is received from a user at a client to access a file of a set of files backed up to a backup server. Upon verifying a password provided by the user, the client is issued another request for authentication. A first data structure is received responsive to the request. The first data structure is generated using identifiers corresponding to a set of files at the client of which at least some presumably have been backed up to the server. A second data structure is generated. The second data structure is generated using identifiers corresponding to the set of files backed up to the server. The first and second data structures are compared to assess a degree of similarity between the files at the client and the files backed up to the backup server. The user is denied access when the degree of similarity is below a threshold.

Mechanism for multi-factor authentication based on data

A system for providing computer implemented services using information handling systems includes persistent storage and a system control processor manager. The system control processor manager instantiates composed information handling systems using the information handling systems; monitors, using system control processors of the composed information handling systems, operation of the composed information handling systems to obtain operation information; makes a determination, based on the operation information, that the computing implemented services provided by the composed information handling systems are substandard; and in response to the determination: manages operation of the composed information handling systems to provide standards compliant computer implemented services by modifying a composition of at least one of the composed information handling systems using a system control processor of the system control processors.

System and method for managing resource allocations in composed systems

Described is a system (and method) that provides a mechanism for guarding against cyber-attacks including ransomware, malware, and various other types of malicious attacks. The mechanism includes providing an isolated storage recovery account within a cloud-based storage infrastructure. The isolated storage recovery account secures data even in instances where credentials for a subscriber to a cloud-based service or the cloud-based provider itself is compromised. In order to ensure that data is still protected even when access credentials may be compromised (e.g. by a disgruntled employee), the mechanism requires a joint coordination between both the provider and the subscriber. The joint coordination may be mandated by the use of a particular multiple encryption technique for credentials that are required to access the isolated storage recovery account.

Providing a secure isolated account for cloud-based storage services

A device for managing composition of composed information handling includes persistent storage and a computer processor that obtains a composition request for a composed information handling system; makes a determination that the composition request is an intent based request; in response to the determination: matches an application specified by the composition request to computing resource requirements for the application; identifies, based on the computing resource requirements, at least one compute resource set having resources meeting the computing resources requirement; identifies, based on the computing resource requirements, at least one hardware resource set having resources meeting the computing resource requirements; sets up management services for the at least one hardware resource set using at least one control resource set to obtain logical hardware resources; and presents the logical hardware resources to the at least one compute resource set as bare metal resources.

Method and system for composing systems using resource sets

A system control processor manager for performing workloads using composed information handling systems instantiated using information handling systems includes persistent storage and a workload manager. The workload manager obtains performance information for a workload of the workloads; makes a determination, based on the performance information, to suspend performance of the workload; in response to the determination: deallocates a first computing resource of a composed information handling system performing the workload to a reserved pool; and deallocates a second computing resource of the composed information handling system to a freely allocable pool.

Resuming workload execution in composed information handling system

A system control processor manager for servicing workloads using composed information handling systems instantiated using information handling systems includes persistent storage and a workload manager. The workload manager obtains a workload request for a workload of the workloads; predicts future resource needs for the workload during a future time period; makes a determination that a portion of free resources of the information handling systems are available to meet the future resource needs; reserves the portion of the free resources based on the determination to obtain reserved resources during the future time period; and composes a composed information handling system of the composed information handling systems using the reserved resources during the future time period to service the workload request.

System and method for allocating resources to perform workloads

First and second trees having entities identified by hexadecimal values are generated. First files are allocated across the first tree based on hashes of the first files and hexadecimal values of the first tree entities. First index values are calculated for first tree entities using hashes of the first files that have been allocated to entities branching into a lower level of the first tree. Second files are allocated across the second tree based on hashes of the second files and hexadecimal values of the second tree entities. Second index values are calculated for the second tree entities using hashes of the second files that have been allocated to entities branching into a lower level of the second tree. A determination is made of a number of entities between the first and second trees having matching index values to measure similarity between the first and second trees.

Generating hexadecimal trees to compare file sets

A system for managing composed information handling systems to provide data protection services for data generated by applications hosted by the composed information handling systems, includes a processor that executes applications and a system control processor manager that obtains a composition request for a composed information handling system, identifies a compute resource set having compute resources specified by the composition request, identifies a hardware resource set having hardware resources specified by the composition request, sets up storage management services for managing reads and writes of data the hardware resource set using a control resource set, which performs deduplication on data generated by the applications, to obtain logical hardware resources, and presents the logical hardware resources using the control resource set to the compute resource set as bare metal resources to instantiate a composed information handling system to service the composition request.

System and method for distributed deduplication in a composed system

An information handling system for instantiating a composed information handling includes hardware computing resources. The hardware computing resources includes a compute resource set that includes computing resources including a processor and a memory, and a hardware resource set including resources distinct from the compute resource set. The information also includes a hardware system control processor adapted to present a portion of the hardware resource set to a compute resource set of the composed information handling system as bare metal resources.

System and method for unified infrastructure architecture

A method for managing composed information handling systems includes obtaining a composition request for a composed information handling system, making a first determination that a first information handling system is not capable of servicing the composition request local, and based on the first determination: allocating, an available resource on the first information handling system to the composed information handling system, sending a resource allocation request to a system control processor manager for access to an additional resource, obtain, in response to the allocation request, a notification for access to a second information handling system of the information handling systems that provides the available resource, setting up management services for available resource and the additional resource to obtain logical hardware resources, and presenting the logical hardware resources to at least one compute resource set as bare metal resources.

Composable information handling systems in an open network using access control managers

A system for providing computer implemented services using information handling systems includes a composed information handling system that provides, at least in part, the computer implemented services and a system control processor manager. The system control processor manager instantiates a utilization monitor in a system control processor of the composed information handling system; and monitors, using the utilization monitor, a use rate of computing resources of the composed information handling system by a client.

Monitoring resource utilization via intercepting bare metal communications between resources

A system for managing composed information handling systems to manage access to data by applications hosted by the composed information handling systems includes a system control processor that instantiates a composed information handling system using a compute resource set that hosts applications and a hardware resource set that stores a portion of the data, associates, using authorization information, storage areas of the at least one hardware resource set with the applications to obtain storage area associations, obtains a data access request from the compute resource set for the portion of the data which is stored in a storage area of the storage areas, makes a determination, based on the storage area associations and an initiator of the data access request, that the initiator of the data access request is not authorized to access the portion of the data, and refuses to service the data access request.

Growing community of inventors

Ganei Tikva, Israel

Yossef Saad