Systems and methods to protect against information disclosure
US-2024205287-A1 · Jun 20, 2024 · US
US2016100016A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2016100016-A1 |
| Application number | US-201514970178-A |
| Country | US |
| Kind code | A1 |
| Filing date | Dec 15, 2015 |
| Priority date | Feb 17, 2009 |
| Publication date | Apr 7, 2016 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Described herein are method and apparatus for servicing software components of nodes of a cluster storage system. During data-access sessions with clients, client IDs and file handles for accessing files are produced and stored to clients and stored (as session data) to each node. A serviced node is taken offline, whereby network connections to clients are disconnected. Each disconnected client is configured to retain its client ID and file handles and attempt reconnections. Session data of the serviced node is made available to a partner node (by transferring session data to the partner node). After clients have reconnected to the partner node, the clients may use the retained client IDs and file handles to continue a data-access session with the partner node since the partner node has access to the session data of the serviced node and thus will recognize and accept the retained client ID and file handles.
Opening claim text (preview).
1 - 24 . (canceled) 25 . A cluster storage system comprising: logic, at least a portion of which is implemented in hardware, to manage a shared storage, the logic to comprise: a serviced storage device component to receive a first access request for a first data container stored on the shared storage, the first access request to include a first user identifier (ID), validate the first access request to verify that the first user ID has permission to access the first data container, and store session data with a first data container handle and the first user ID; and a partner storage device component to receive a second access request for the first data container stored on the shared storage, the second access request to include a second data container handle and a second user ID, retrieve the stored session data with the first data container handle and the first user ID, and validate the second access request when the second data container handle matches the first data container handle and the second user ID matches the first user ID. 26 . The cluster storage system of claim 25 , comprising a servicing module to initiate servicing of the serviced storage device component, the servicing to include upgrading, re-installing, performing maintenance, or repairing the serviced storage device component. 27 . The cluster storage system of claim 25 comprising a servicing module to provide the partner storage device component access to the session data stored by the service storage device component when the serviced storage device component is unable to receive access requests. 28 . The cluster storage system of claim 25 , comprising a servicing module to make the serviced storage device component unable to receive access requests by causing a network disconnection between the serviced storage device component and at least one client. 29 . The cluster storage system of claim 25 , wherein the first data handle comprises a physical address for the first data container. 30 . The cluster storage system of claim 25 , the serviced storage device component to generate the first data container handle in response to validation that the first user ID has permission to access the first data container. 31 . The cluster storage system of claim 25 wherein the serviced storage device component performs the first access request on the first data container. 32 . The cluster storage system of claim 25 , wherein the partner storage device component performs the second access request of the first data container. 33 . A computer-implemented method, comprising: receiving, at a serviced storage device component, a first access request for a first data container stored on a shared storage, the first access request to include a first user identifier (ID); validating the first access request to verify that the first user ID has permission to access the first data container; storing session data with a first data container handle and the first user ID; receiving, at a partner storage device component, a second access request for the first data container stored on the shared storage, the second access request to include a second data container handle and a second user ID; retrieving the stored session data with the first data container handle and the first user ID; and validating the second access request when the second data container handle matches the first data container handle and the second user ID matches the first user ID. 34 . The computer-implemented method of claim 33 , comprising initiating servicing of the serviced storage device component, the servicing to include upgrading, re-installing, performing maintenance, or repairing the service storage device component. 35 . The computer-implemented method of claim 33 , comprising providing the partner storage device component access to the session data when the serviced storage device component is unable to receive access requests. 36 . The computer-implemented method of claim 33 , comprising making the serviced storage device component unable to receive access requests by causing a network disconnection between the serviced storage device component and at least one client. 37 . The computer-implemented method of claim 33 , wherein the first data handle comprises a physical address for the first data container. 38 . The computer-implemented method of claim 33 , comprising generating the first data container handle in response to validation that the first user ID has permission to access the first data container. 39 . One or more computer-readable media to store instruction that when executed by a processor circuit causes the processor circuit to: receive, at a serviced storage device component, a first access request for a first data container stored on a shared storage, the first access request to include a first user identifier (ID); validate the first access request to verify that the first user ID has permission to access the first data container; store session data with a first data container handle and the first user ID; receive, at a partner storage device component, a second access request for the first data container stored on the shared storage, the second access request to include a second data container handle and a second user ID; retrieve the stored session data with the first data container handle and the first user ID; and validate the second access request when the second data container handle matches the first data container handle and the second user ID matches the first user ID. 40 . The one or more computer-readable media of claim 39 , with instruction to initiate servicing of the serviced storage device component, the servicing to include upgrading, re-installing, performing maintenance, or repairing the service storage device component. 41 . The one or more computer-readable media of claim 39 , with instruction to provide the partner storage device component access to the session data when the serviced storage device component is unable to receive access requests. 42 . The one or more computer-readable media of claim 39 , with instruction to make the serviced storage device component unable to receive access requests by causing a network disconnection between the serviced storage device component and at least one client. 43 . The one or more computer-readable media of claim 39 , with instruction to perform the first access request on the first data container. 44 . The one or more computer-readable media of claim 39 , with instruction to perform the second access request on the first data container.
Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding · CPC title
Termination or inactivation of sessions, e.g. event-controlled end of session · CPC title
for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title
for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title
for controlling access to devices or network resources · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.