Hash protection within an object storage library

Patent metadata

Field	Value
Publication number	US-11544387-B2
Application number	US-201916249811-A
Country	US
Kind code	B2
Filing date	Jan 16, 2019
Priority date	Jan 16, 2019
Publication date	Jan 3, 2023
Grant date	Jan 3, 2023

Abstract

According to one embodiment, a computer-implemented method includes receiving an object to be stored within a storage library, computing a hash value, utilizing the object, determining a storage location within the storage library to store the hash value, and sending the hash value to the storage location and neighbor locations of the storage location within the storage library.

First claim

What is claimed is:

1. A computer-implemented method, comprising:
receiving an object to be stored within a storage library;
computing a hash value, utilizing the object;
determining a first storage location within the storage library to store the hash value, wherein the first storage location is determined based on the hash value; and
conditionally sending the hash value to the first storage location and also conditionally sending the hash value to a plurality of additional storage locations within the storage library that are determined based on the first storage location, including:
comparing the hash value against a plurality of additional hash values stored within the storage library;
in response to determining that the hash value matches one of the additional hash values, adding a name associated with the object to one or more object names associated with the matching additional hash value in response to determining that the name associated with the object does not match one of the one or more object names associated with the matching additional hash value; and
in response to determining that the hash value does not match one of the additional hash values, storing the object within a storage unit of the storage library, creating one or more redundant portions of the object, storing the one or more redundant portions of the object at multiple storage units within the storage library, and storing a name of the object in association with the hash value.

2. The computer-implemented method of claim 1 , wherein the storage library is implemented within a cloud computing environment.

3. The computer-implemented method of claim 1 , comprising adding the object to a redundant array of independent disks (RAID) buffer within the storage library.

4. The computer-implemented method of claim 1 , comprising adding the object to a write buffer within a virtual controller of the storage library.

5. The computer-implemented method of claim 1 , wherein computing the hash value includes applying one or more cryptographic hash functions to the object, the one or more cryptographic hash functions including an SHA-256 hash function.

6. The computer-implemented method of claim 1 , wherein the first storage location within the storage library determined to store the hash value is different from another storage location within the storage library determined to store the object.

7. The computer-implemented method of claim 1 , wherein in response to determining that the first storage location is currently unavailable, the hash value is temporarily stored in a fingerprint database on a virtual controller until first storage location becomes available.

8. The computer-implemented method of claim 1 , comprising discarding the object in response to determining that the hash value matches one of the additional hash values.

9. A computer program product comprising one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising instructions configured to cause one or more processors to perform a method comprising:
receiving, by the one or more processors, an object to be stored within a storage library;
computing, by the one or more processors, a hash value, utilizing the object;
determining, by the one or more processors, a first storage location within the storage library to store the hash value, wherein the first storage location is determined based on the hash value; and
conditionally sending, by the one or more processors, the hash value to the first storage location and also conditionally sending, by the one or more processors, the hash value to a plurality of additional storage locations within the storage library that are determined based on the first storage location, including:
comparing the hash value against a plurality of additional hash values stored within the storage library;
in response to determining that the hash value matches one of the additional hash values, adding a name associated with the object to one or more object names associated with the matching additional hash value in response to determining that the name associated with the object does not match one of the one or more object names associated with the matching additional hash value; and
in response to determining that the hash value does not match one of the additional hash values, storing the object within a storage unit of the storage library, creating one or more redundant portions of the object, storing the one or more redundant portions of the object at multiple storage units within the storage library, and storing a name of the object in association with the hash value.

10. The computer program product of claim 9 , wherein the storage library is implemented within a cloud computing environment.

11. The computer program product of claim 9 , wherein the storage library includes a plurality of storage units, wherein each of the plurality of storage units includes optical storage.

12. The computer program product of claim 9 , comprising adding, by the one or more processors, the object to a write buffer within a virtual controller of the storage library.

13. The computer program product of claim 9 , wherein computing the hash value includes applying one or more cryptographic hash functions to the object, the one or more cryptographic hash functions including an SHA-256 hash function.

14. A computer-implemented method, comprising:
receiving an object to be stored within a storage library;
computing a hash value, utilizing the object;
determining a first storage location within the storage library to store the hash value, wherein the first storage location is determined based on the hash value; and
conditionally sending the hash value to the first storage location and also conditionally sending the hash value to a plurality of additional storage locations within the storage library that are determined based on the first storage location, including:
comparing the hash value against a plurality of additional hash values stored within the storage library;
in response to determining that the hash value matches one of the additional hash values:
discarding the object,
adding a name associated with the discarded object to one or more object names associated with the matching additional hash value in response to determining that the name associated with the discarded object does not match one of the one or more object names associated with the matching additional hash value, and
discarding the name associated with the discarded object in response to determining that the name associated with the discarded object does match one of the one or more object names associated with the matching additional hash value; and

in response to determining that the hash value does not match one of the additional hash values:
storing the object within a storage unit of the storage library, utilizing erasure coding, including creating one or more redundant portions of the object, and storing the one or more redundant portions of the object at multiple storage units within the storage library, and
storing a name of the object in association with the hash value.

Assignees

• IBM

Inventors

• Gandhasri Rajamohan
• Hetzler Steven R
• Rees Robert M
• Hineman Wayne C
• Best John S
• Han Zhenxing

Classifications

• G06F21/645 Primary

  using a third party · CPC title

• G06F21/602 Primary

  Providing cryptographic facilities or services · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title