[go: up one dir, main page]

WO2010057196A3 - Disponibilité de stockage sécurisé par séparation cryptographique - Google Patents

Disponibilité de stockage sécurisé par séparation cryptographique Download PDF

Info

Publication number
WO2010057196A3
WO2010057196A3 PCT/US2009/064820 US2009064820W WO2010057196A3 WO 2010057196 A3 WO2010057196 A3 WO 2010057196A3 US 2009064820 W US2009064820 W US 2009064820W WO 2010057196 A3 WO2010057196 A3 WO 2010057196A3
Authority
WO
WIPO (PCT)
Prior art keywords
secure
storage
secure storage
storage network
volume
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2009/064820
Other languages
English (en)
Other versions
WO2010057196A2 (fr
Inventor
David Dodgson
Joseph Neill
Ralph R. Farina
Edward Chin
Albert French
Scott Summers
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Unisys Corp
Original Assignee
Unisys Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US12/272,012 external-priority patent/US20100125730A1/en
Priority claimed from US12/336,559 external-priority patent/US20100153703A1/en
Priority claimed from US12/336,558 external-priority patent/US20100153740A1/en
Priority claimed from US12/336,564 external-priority patent/US8392682B2/en
Priority claimed from US12/336,562 external-priority patent/US20100154053A1/en
Priority claimed from US12/336,568 external-priority patent/US20100150341A1/en
Priority claimed from US12/342,610 external-priority patent/US20100161981A1/en
Priority claimed from US12/342,500 external-priority patent/US8386798B2/en
Priority claimed from US12/342,547 external-priority patent/US20100162004A1/en
Priority claimed from US12/342,438 external-priority patent/US8135980B2/en
Priority claimed from US12/342,379 external-priority patent/US20100162001A1/en
Priority claimed from US12/342,636 external-priority patent/US20100162005A1/en
Priority claimed from US12/342,575 external-priority patent/US20100161964A1/en
Priority claimed from US12/342,464 external-priority patent/US20100162032A1/en
Priority claimed from US12/342,414 external-priority patent/US20100162002A1/en
Priority claimed from US12/342,523 external-priority patent/US20100162003A1/en
Application filed by Unisys Corp filed Critical Unisys Corp
Priority to EP09802050A priority Critical patent/EP2359249A2/fr
Priority to AU2009313672A priority patent/AU2009313672A1/en
Publication of WO2010057196A2 publication Critical patent/WO2010057196A2/fr
Anticipated expiration legal-status Critical
Publication of WO2010057196A3 publication Critical patent/WO2010057196A3/fr
Priority to AU2016210718A priority patent/AU2016210718B2/en
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/602—Providing cryptographic facilities or services
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
    • G06F3/0601—Interfaces specially adapted for storage systems
    • G06F3/0602—Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
    • G06F3/062—Securing storage systems
    • G06F3/0623—Securing storage systems in relation to content
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/104—Grouping of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Software Systems (AREA)
  • Health & Medical Sciences (AREA)
  • Databases & Information Systems (AREA)
  • Human Computer Interaction (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Storage Device Security (AREA)

Abstract

L'invention concerne un appareil de stockage sécurisé, ainsi que des procédés de stockage et de lecture de données dans un réseau de stockage sécurisé. Dans un aspect de l'invention, un procédé consiste à attribuer un volume à un appareil de stockage sécurisé primaire situé dans un réseau de stockage de données sécurisé, ce réseau de stockage de données sécurisé comprenant une pluralité de trajets de données sécurisés entre l'appareil de stockage sécurisé primaire et un dispositif client et une pluralité de trajets de données sécurisés entre l'appareil de stockage sécurisé et une pluralité de systèmes de stockage, le volume correspondant au stockage physique au niveau de chacun des systèmes de stockage parmi la pluralité de ces systèmes de stockage. Dans un autre aspect de l'invention, le volume présenté sous forme d'un disque virtuel au dispositif client est mappé avec le stockage physique au niveau de chacun des systèmes de stockage parmi une pluralité de ceux-ci. Le procédé consiste aussi à détecter un problème de connectivité sur au moins un des trajets de données sécurisés. Le procédé consiste aussi à évaluer s'il convient de réattribuer le volume à un appareil de stockage sécurisé différent compte tenu du problème de connectivité. Le procédé consiste aussi, après détection de la panne du dispositif de stockage sécurisé primaire, à réattribuer le volume à un second appareil de stockage sécurisé parmi la pluralité des appareils de stockage sécurisés,transformant ainsi ce second appareil de stockage sécurisé en nouvel appareil de stockage sécurisé primaire.
PCT/US2009/064820 2008-11-17 2009-11-17 Disponibilité de stockage sécurisé par séparation cryptographique Ceased WO2010057196A2 (fr)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP09802050A EP2359249A2 (fr) 2008-11-17 2009-11-17 Disponibilité de stockage sécurisé par séparation cryptographique
AU2009313672A AU2009313672A1 (en) 2008-11-17 2009-11-17 Secure storage availability using cryptographic splitting
AU2016210718A AU2016210718B2 (en) 2008-11-17 2016-08-04 Secure storage availability using cryptographic splitting

Applications Claiming Priority (32)

Application Number Priority Date Filing Date Title
US12/272,012 US20100125730A1 (en) 2008-11-17 2008-11-17 Block-level data storage security system
US12/272,012 2008-11-17
US12/336,568 US20100150341A1 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/336,562 2008-12-17
US12/336,562 US20100154053A1 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/336,564 US8392682B2 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/336,559 2008-12-17
US12/336,564 2008-12-17
US12/336,568 2008-12-17
US12/336,558 2008-12-17
US12/336,558 US20100153740A1 (en) 2008-12-17 2008-12-17 Data recovery using error strip identifiers
US12/336,559 US20100153703A1 (en) 2008-12-17 2008-12-17 Storage security using cryptographic splitting
US12/342,636 2008-12-23
US12/342,523 2008-12-23
US12/342,379 2008-12-23
US12/342,610 US20100161981A1 (en) 2008-12-23 2008-12-23 Storage communities of interest using cryptographic splitting
US12/342,464 US20100162032A1 (en) 2008-12-23 2008-12-23 Storage availability using cryptographic splitting
US12/342,414 US20100162002A1 (en) 2008-12-23 2008-12-23 Virtual tape backup arrangement using cryptographically split storage
US12/342,523 US20100162003A1 (en) 2008-12-23 2008-12-23 Retrieval of cryptographically-split data blocks from fastest-responding storage devices
US12/342,547 2008-12-23
US12/342,610 2008-12-23
US12/342,575 US20100161964A1 (en) 2008-12-23 2008-12-23 Storage communities of interest using cryptographic splitting
US12/342,438 2008-12-23
US12/342,636 US20100162005A1 (en) 2008-12-23 2008-12-23 Storage communities of interest using cryptographic splitting
US12/342,379 US20100162001A1 (en) 2008-12-23 2008-12-23 Secure network attached storage device using cryptographic settings
US12/342,500 US8386798B2 (en) 2008-12-23 2008-12-23 Block-level data storage using an outstanding write list
US12/342,414 2008-12-23
US12/342,464 2008-12-23
US12/342,575 2008-12-23
US12/342,500 2008-12-23
US12/342,438 US8135980B2 (en) 2008-12-23 2008-12-23 Storage availability using cryptographic splitting
US12/342,547 US20100162004A1 (en) 2008-12-23 2008-12-23 Storage of cryptographically-split data blocks at geographically-separated locations

Publications (2)

Publication Number Publication Date
WO2010057196A2 WO2010057196A2 (fr) 2010-05-20
WO2010057196A3 true WO2010057196A3 (fr) 2011-12-29

Family

ID=42124888

Family Applications (3)

Application Number Title Priority Date Filing Date
PCT/US2009/064824 Ceased WO2010057199A2 (fr) 2008-11-17 2009-11-17 Stockage et localisation de blocs de données séparés de manière cryptographique sur de multiples dispositifs de stockage
PCT/US2009/064765 Ceased WO2010057173A2 (fr) 2008-11-17 2009-11-17 Communautés d’intérêt en mémoire utilisant un partage cryptographique
PCT/US2009/064820 Ceased WO2010057196A2 (fr) 2008-11-17 2009-11-17 Disponibilité de stockage sécurisé par séparation cryptographique

Family Applications Before (2)

Application Number Title Priority Date Filing Date
PCT/US2009/064824 Ceased WO2010057199A2 (fr) 2008-11-17 2009-11-17 Stockage et localisation de blocs de données séparés de manière cryptographique sur de multiples dispositifs de stockage
PCT/US2009/064765 Ceased WO2010057173A2 (fr) 2008-11-17 2009-11-17 Communautés d’intérêt en mémoire utilisant un partage cryptographique

Country Status (3)

Country Link
EP (3) EP2359298A2 (fr)
AU (7) AU2009313675A1 (fr)
WO (3) WO2010057199A2 (fr)

Families Citing this family (23)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8725688B2 (en) 2008-09-05 2014-05-13 Commvault Systems, Inc. Image level copy or restore, such as image level restore without knowledge of data object metadata
GB2496111A (en) * 2011-10-28 2013-05-08 Intergence Systems Ltd Tracing the real-world storage location of critical data items to form part of physical network map
US9633216B2 (en) 2012-12-27 2017-04-25 Commvault Systems, Inc. Application of information management policies based on operation with a geographic entity
US9459968B2 (en) 2013-03-11 2016-10-04 Commvault Systems, Inc. Single index to query multiple backup formats
US10169121B2 (en) 2014-02-27 2019-01-01 Commvault Systems, Inc. Work flow management for an information management system
US9648100B2 (en) 2014-03-05 2017-05-09 Commvault Systems, Inc. Cross-system storage management for transferring data across autonomous information management systems
US9740574B2 (en) 2014-05-09 2017-08-22 Commvault Systems, Inc. Load balancing across multiple data paths
US11249858B2 (en) 2014-08-06 2022-02-15 Commvault Systems, Inc. Point-in-time backups of a production application made accessible over fibre channel and/or ISCSI as data sources to a remote application by representing the backups as pseudo-disks operating apart from the production application and its host
US9852026B2 (en) 2014-08-06 2017-12-26 Commvault Systems, Inc. Efficient application recovery in an information management system based on a pseudo-storage-device driver
US9766825B2 (en) 2015-07-22 2017-09-19 Commvault Systems, Inc. Browse and restore for block-level backups
US10296368B2 (en) 2016-03-09 2019-05-21 Commvault Systems, Inc. Hypervisor-independent block-level live browse for access to backed up virtual machine (VM) data and hypervisor-free file-level recovery (block-level pseudo-mount)
US10838821B2 (en) 2017-02-08 2020-11-17 Commvault Systems, Inc. Migrating content and metadata from a backup system
US10740193B2 (en) 2017-02-27 2020-08-11 Commvault Systems, Inc. Hypervisor-independent reference copies of virtual machine payload data based on block-level pseudo-mount
US10891069B2 (en) 2017-03-27 2021-01-12 Commvault Systems, Inc. Creating local copies of data stored in online data repositories
US10776329B2 (en) 2017-03-28 2020-09-15 Commvault Systems, Inc. Migration of a database management system to cloud storage
US11074140B2 (en) 2017-03-29 2021-07-27 Commvault Systems, Inc. Live browsing of granular mailbox data
US10664352B2 (en) 2017-06-14 2020-05-26 Commvault Systems, Inc. Live browsing of backed up data residing on cloned disks
GB2567146B (en) * 2017-09-28 2022-04-13 Red Flint Llp Method and system for secure storage of digital data
US10795927B2 (en) 2018-02-05 2020-10-06 Commvault Systems, Inc. On-demand metadata extraction of clinical image data
US10789387B2 (en) 2018-03-13 2020-09-29 Commvault Systems, Inc. Graphical representation of an information management system
US11308034B2 (en) 2019-06-27 2022-04-19 Commvault Systems, Inc. Continuously run log backup with minimal configuration and resource usage from the source machine
CN114946157B (zh) * 2019-12-31 2025-08-05 纳格拉影像有限公司 用于控制对分段数据的访问的技术
US20240388583A1 (en) * 2023-05-18 2024-11-21 Pure Storage, Inc. Service Mesh-Based Control of Access to a Storage Application

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030188153A1 (en) * 2002-04-02 2003-10-02 Demoff Jeff S. System and method for mirroring data using a server
US20040024962A1 (en) * 2002-08-05 2004-02-05 Paresh Chatterjee Method and apparatus for teaming storage controllers
US20070079083A1 (en) * 2005-09-30 2007-04-05 Gladwin S Christopher Metadata management system for an information dispersed storage system

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6167531A (en) * 1998-06-18 2000-12-26 Unisys Corporation Methods and apparatus for transferring mirrored disk sets during system fail-over
US7391865B2 (en) * 1999-09-20 2008-06-24 Security First Corporation Secure data parser method and system
US7512673B2 (en) * 2001-01-11 2009-03-31 Attune Systems, Inc. Rule based aggregation of files and transactions in a switched file system
JP4601969B2 (ja) * 2004-01-27 2010-12-22 株式会社日立製作所 ファイル入出力制御装置
US7203871B2 (en) * 2004-06-03 2007-04-10 Cisco Technology, Inc. Arrangement in a network node for secure storage and retrieval of encoded data distributed among multiple network nodes
CN101199187A (zh) * 2004-07-23 2008-06-11 茨特里克斯系统公司 用于网络节点之间通信最优化的系统和方法
US7284020B2 (en) * 2004-09-01 2007-10-16 Hitachi, Ltd. System and method for data recovery in a storage system
US20070067644A1 (en) * 2005-08-26 2007-03-22 International Business Machines Corporation Memory control unit implementing a rotating-key encryption algorithm
US8880799B2 (en) * 2005-09-30 2014-11-04 Cleversafe, Inc. Rebuilding data on a dispersed storage network
WO2008054406A2 (fr) * 2005-11-18 2008-05-08 Orsini Rick L Procédé et système analyseur syntaxique de données sécurisées
EP2154822A2 (fr) * 2006-12-08 2010-02-17 Unisys Corporation Sécurisation de données de multidiffusion

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030188153A1 (en) * 2002-04-02 2003-10-02 Demoff Jeff S. System and method for mirroring data using a server
US20040024962A1 (en) * 2002-08-05 2004-02-05 Paresh Chatterjee Method and apparatus for teaming storage controllers
US20070079083A1 (en) * 2005-09-30 2007-04-05 Gladwin S Christopher Metadata management system for an information dispersed storage system

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP2359249A2 *

Also Published As

Publication number Publication date
AU2016210718B2 (en) 2018-10-25
AU2016210718A1 (en) 2016-09-15
EP2359295A2 (fr) 2011-08-24
AU2018236850B2 (en) 2020-07-09
AU2016210716A1 (en) 2016-09-08
AU2009313675A1 (en) 2011-07-07
AU2020200461B2 (en) 2021-10-07
EP2359249A2 (fr) 2011-08-24
AU2020200461A1 (en) 2020-02-13
WO2010057199A3 (fr) 2011-03-17
EP2359298A2 (fr) 2011-08-24
WO2010057196A2 (fr) 2010-05-20
AU2009313728A1 (en) 2011-07-07
AU2018236850A1 (en) 2018-10-18
AU2009313672A1 (en) 2011-07-07
WO2010057173A3 (fr) 2010-10-07
WO2010057199A2 (fr) 2010-05-20
WO2010057173A2 (fr) 2010-05-20

Similar Documents

Publication Publication Date Title
WO2010057196A3 (fr) Disponibilité de stockage sécurisé par séparation cryptographique
WO2013081983A3 (fr) Migration d'un contenu authentifié vers un consommateur de contenu
WO2010019370A3 (fr) Protocole pour une association dispositif à station
AR093722A1 (es) Metodo, dispositivo informatico y dispositivo de memoria para habilitar la accesibilidad a registros de pizarra
GB201003186D0 (en) Determining prescence status of end user associated with multiple access terminals
WO2012173835A3 (fr) Modification côté client de résultats de recherche d'après des données de réseau social
WO2010057151A3 (fr) Système de sécurité de stockage de données par blocs
WO2011100600A3 (fr) Procédés, systèmes et supports lisibles par ordinateur pour assurer un routage à priorité au niveau d'un noeud diameter
WO2014004810A3 (fr) Gestion de corbeille arrivée
WO2012122204A3 (fr) Recommandation dynamique dans un système de réseau géo-social
AU2016219688A1 (en) Matching techniques for cross-platform monitoring and information
WO2012051224A3 (fr) Procédés et systèmes pour acquérir, traiter, gérer et/ou évaluer des contenus multimédia de personnes observées réalisant une tâche
WO2011112523A3 (fr) Appareil et procédés de stockage de données
WO2012096503A3 (fr) Dispositif de stockage pour déterminer d'une manière adaptative une technique de traitement relativement à une requête d'hôte sur la base de données de partition, et procédé de fonctionnement pour le dispositif de stockage
WO2008030603A3 (fr) Gestion d'inventaire personnel et réseau d'échange d'articles
WO2011046840A3 (fr) Systèmes et procédés de production automatique d'un bloc de signature
WO2013130630A3 (fr) Listage d'objets de données à l'aide d'un index de stockage dispersé hiérarchique
WO2013002833A3 (fr) Liaison de contenu cryptographique à l'aide de caractéristiques de dispositif uniques avec heuristique de serveur
WO2009105594A3 (fr) Procédé et système de mise en oeuvre d’ensemble de stockage virtuel dans un environnement virtuel
IN2015DN00097A (fr)
WO2012096972A3 (fr) Système d'informations de véhicule comportant une interface utilisateur personnalisable
WO2009143322A3 (fr) Procédés et systèmes pour une ouverture de session unique avec des niveaux d'authentification dynamiques
WO2012167115A3 (fr) Réputation numérique utilisée dans un système de traitement de transactions
WO2009148430A3 (fr) Système et procédé destinés à collecter des informations liées à la situation du marché par l'intermédiaire d'un environnement de réseautage basé sur le web
WO2012162279A3 (fr) Superposition de données sociales

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 09802050

Country of ref document: EP

Kind code of ref document: A2

WWE Wipo information: entry into national phase

Ref document number: 2009802050

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2009313672

Country of ref document: AU

WWE Wipo information: entry into national phase

Ref document number: 4609/DELNP/2011

Country of ref document: IN

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2009313672

Country of ref document: AU

Date of ref document: 20091117

Kind code of ref document: A