Remote Analysis of Potentially Corrupt Data Written to a Storage System

Patent metadata

Field	Value
Publication number	US-2021382992-A1
Application number	US-202117409130-A
Country	US
Kind code	A1
Filing date	Aug 23, 2021
Priority date	Nov 22, 2019
Publication date	Dec 9, 2021
Grant date	—

Abstract

An illustrative method includes a storage system detecting an anomaly associated with data written to the storage system; providing, based on the detecting of the anomaly, the data to a data analysis system remote from the storage system, the data analysis system configured to perform a corruption analysis of the data; and performing, based on the corruption analysis of the data, an operation with respect to the data.

First claim

What is claimed is:

1 . A method comprising:
detecting, by a storage system, an anomaly associated with data written to the storage system; providing, by the storage system based on the detecting of the anomaly, the data to a data analysis system remote from the storage system, the data analysis system configured to perform a corruption analysis of the data; and performing, by the storage system based on the corruption analysis of the data, an operation with respect to the data.

2 . The method of claim 1 , wherein the detecting the anomaly comprises determining that the data has a format that is unrecognizable by the storage system.

3 . The method of claim 1 , wherein the detecting the anomaly comprises:
identifying a format of the data; and determining that a content of the data does not match what would be expected to be received by the storage system for the identified format.

4 . The method of claim 1 , wherein the detecting the anomaly comprises determining that the data has an entropy above a threshold.

5 . The method of claim 1 , wherein the detecting the anomaly comprises determining that the data is encrypted.

6 . The method of claim 1 , wherein the providing the data to the data analysis system comprises directing the data analysis system to access the data on the storage system.

7 . The method of claim 1 , wherein the providing the data to the data analysis system comprises transmitting a copy of at least a portion of the data to the data analysis system.

8 . The method of claim 1 , further comprising generating, by the storage system based on the detecting of the anomaly, a recovery dataset for data maintained by the storage system.

9 . The method of claim 1 , further comprising preventing, by the storage system based on the detecting of the anomaly, a prior version of the data from being deleted or modified.

10 . The method of claim 1 , further comprising quarantining, by the storage system, the data until the corruption analysis is performed.

11 . The method of claim 1 , wherein:
the corruption analysis indicates that the data is not corrupt; and the performing the operation comprises one or more of releasing the data from quarantine or deleting a recovery dataset associated with data maintained by the storage system.

12 . The method of claim 1 , wherein:
the corruption analysis indicates that the data is corrupt; and the performing the operation comprises one or more of quarantining the data, using a recovery dataset to perform a data recovery process for data maintained by the storage system, preventing a host that provided a request to write the data to the storage system from accessing the storage system, or disabling the storage system.

13 . The method of claim 1 , further comprising:
receiving, by the storage system from the data analysis system, corruption analysis data representative of a result of the corruption analysis; wherein the performing of the operation with respect to the data is based on the corruption analysis data.

14 . The method of claim 1 , wherein the data analysis system is communicatively coupled to the storage system by way of a network.

15 . A method comprising:
receiving, by a data analysis system remote from a storage system, a request from the storage system to perform a corruption analysis with respect to data written to the storage system; performing, by the data analysis system based on the request, the corruption analysis with respect to the data; and transmitting, by the data analysis system to the storage system, corruption analysis data representative of a result of the corruption analysis.

16 . The method of claim 15 , further comprising:
receiving, by the data analysis system, an additional request from an additional storage system to perform an additional corruption analysis with respect to additional data written to the additional storage system; performing, by the data analysis system based on the additional request, the additional corruption analysis with respect to the additional data; transmitting, by the data analysis system to the additional storage system, additional corruption analysis data representative of a result of the additional corruption analysis.

17 . The method of claim 1 , wherein the data analysis system is communicatively coupled to the storage system by way of a network.

18 . A storage system comprising:
a memory storing instructions; and a processor communicatively coupled to the memory and configured to execute the instructions to:
detect an anomaly associated with data written to the storage system;
provide, based on the detecting of the anomaly, the data to a data analysis system remote from the storage system, the data analysis system configured to perform a corruption analysis of the data; and
perform, based on the corruption analysis of the data, an operation with respect to the data.

19 . The storage system of claim 18 , wherein:
the corruption analysis indicates that the data is not corrupt; and the performing the operation comprises one or more of releasing the data from quarantine or deleting a recovery dataset associated with data maintained by the storage system.

20 . The storage system of claim 18 , wherein:
the corruption analysis indicates that the data is corrupt; and the performing the operation comprises one or more of quarantining the data, using a recovery dataset to perform a data recovery process for data maintained by the storage system, preventing a host that provided a request to write the data to the storage system from accessing the storage system, or disabling the storage system.

Assignees

• Pure Storage Inc

Inventors

• Massiglia Paul R
• Karr Ronald
• Colgrove John

Classifications

• G06F11/0727

  in a storage system, e.g. in a DASD or network based storage system (drivers for digital recording or reproducing units G06F3/06; circuits for error detection or correction within digital recording or reproducing units G11B20/18; for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS], H04L67/1097) · CPC title

• G06F11/076

  by exceeding a count or rate limit, e.g. word- or bit count limit · CPC title

• G06F11/079

  Root cause analysis, i.e. error or fault diagnosis (in a hardware test environment G06F11/22; in a software test environment G06F11/36) · CPC title

• G06F11/108

  Parity data distribution in semiconductor storages, e.g. in SSD · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title