Systems and methods to protect against information disclosure
US-2024205287-A1 · Jun 20, 2024 · US
US2020274936A1 · US · A1
| Field | Value |
|---|---|
| Publication number | US-2020274936-A1 |
| Application number | US-202016872459-A |
| Country | US |
| Kind code | A1 |
| Filing date | May 12, 2020 |
| Priority date | Feb 17, 2009 |
| Publication date | Aug 27, 2020 |
| Grant date | — |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
Described herein are method and apparatus for servicing software components of nodes of a cluster storage system. During data-access sessions with clients, client IDs and file handles for accessing files are produced and stored to clients and stored (as session data) to each node. A serviced node is taken offline, whereby network connections to clients are disconnected. Each disconnected client is configured to retain its client ID and file handles and attempt reconnections. Session data of the serviced node is made available to a partner node (by transferring session data to the partner node). After clients have reconnected to the partner node, the clients may use the retained client IDs and file handles to continue a data-access session with the partner node since the partner node has access to the session data of the serviced node and thus will recognize and accept the retained client ID and file handles.
Opening claim text (preview).
We claim: 1 . A method comprising: receiving a maintenance request from an administrative system over a message interface to service a first node; identifying a second node capable of servicing access requests from a client device for a data container stored on shared storage accessible over a network to the first node and the second node; retrieving stored session data of a prior session where the data container was accessed by the client device through the first node using a stored user identifier and a stored data container handle; offlining and servicing the first node based upon the maintenance request; and routing a subsequent access request from the client device to the second node for validating the subsequent access request based upon the stored session data. 2 . The method of claim 1 , wherein the stored session data comprises a client identifier. 3 . The method of claim 1 , comprising: upgrading a network element on the first node based upon the maintenance request specifying that the network element is to be upgraded. 4 . The method of claim 1 , comprising: repairing a network element on the first node based upon the maintenance request specifying that the network element is to be repaired. 5 . The method of claim 1 , comprising: re-installing a network element on the first node based upon the maintenance request specifying that the network element is to be re-installed. 6 . The method of claim 1 , wherein the subsequent access request is denied based upon a user identifier and a data container handle within the subsequent access request not matching the stored user identifier and the stored data container handle within the stored session data. 7 . The method of claim 1 , wherein the subsequent access request is processed based upon a user identifier and a data container handle within the subsequent access request matching the stored user identifier and the stored data container handle within the stored session data. 8 . The method of claim 1 , comprising: implementing a grace time period for the stored session data, wherein the stored data container handle is deleted upon expiration of the grace time period. 9 . The method of claim 1 , comprising: migrating virtual interfaces of closed network ports of the first node to the second node. 10 . The method of claim 1 , comprising: in response to bringing the first node online after being serviced, transferring new information collected and stored by the second node to the first node. 11 . The method of claim 1 , comprising: servicing a network blade of the first node based upon the maintenance request specifying that the network blade is to be serviced. 12 . The method of claim 1 , comprising: servicing a data blade of the first node based upon the maintenance request specifying that the data blade is to be serviced. 13 . The method of claim 1 , comprising: repairing network and disk elements of the first node based upon the maintenance request specifying that the network and disk elements are to be serviced. 14 . The method of claim 1 , comprising: maintaining permission metadata specifying which users or user types have permission to access the data container. 15 . The method of claim 1 , comprising: maintaining lock metadata to specify what type of lock a user or user type can obtain when accessing the data container. 16 . A non-transitory machine readable medium comprising instructions for performing a method, which when executed by a machine, causes the machine to: receive a maintenance request from an administrative system over a message interface to service a first node; identify a second node capable of servicing access requests from a client device for a data container stored on shared storage accessible over a network to the first node and the second node; retrieve stored session data of a prior session where the data container was accessed by the client device through the first node using a stored user identifier and a stored data container handle; offline and service the first node based upon the maintenance request; and route a subsequent access request from the client device to the second node for validating the subsequent access request based upon the stored session data. 17 . The non-transitory machine readable medium of claim 16 , wherein the subsequent access request is denied based upon a user identifier and a data container handle within the subsequent access request not matching the stored user identifier and the stored data container handle within the stored session data. 18 . The non-transitory machine readable medium of claim 16 , wherein the subsequent access request is processed based upon a user identifier and a data container handle within the subsequent access request matching the stored user identifier and the stored data container handle within the stored session data. 19 . A computing device comprising: a memory instructions for performing a method; and a processor coupled to the memory, the processor configured to execute the instructions to cause the processor to: receive a maintenance request from an administrative system over a message interface to service a first node; identify a second node capable of servicing access requests from a client device for a data container stored on shared storage accessible over a network to the first node and the second node; retrieve stored session data of a prior session where the data container was accessed by the client device through the first node using a stored user identifier and a stored data container handle; offline and service the first node based upon the maintenance request; and route a subsequent access request from the client device to the second node for validating the subsequent access request based upon the stored session data. 20 . The computing device of claim 19 , wherein the subsequent access request is processed based upon a user identifier and a data container handle within the subsequent access request matching the stored user identifier and the stored data container handle within the stored session data.
for controlling access to devices or network resources · CPC title
Termination or inactivation of sessions, e.g. event-controlled end of session · CPC title
in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) · CPC title
Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding · CPC title
for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.