Secure search

Patent metadata

Field	Value
Publication number	US-9904602-B1
Application number	US-201414579949-A
Country	US
Kind code	B1
Filing date	Dec 22, 2014
Priority date	Dec 22, 2014
Publication date	Feb 27, 2018
Grant date	Feb 27, 2018

Abstract

Backup objects, native security descriptors that describe access rights to the backup objects, and object metadata are received from platforms where each backup object has corresponding object metadata. Each native security descriptor is transformed into a platform independent security descriptor. A partitioned structure is generated, including by associating each platform independent security descriptor with those object metadata that correspond to the plurality of backup objects for which that platform independent security descriptor describes access rights to.

First claim

What is claimed is:

1. A system, comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
receive, from a plurality of platforms, a plurality of backup objects, a plurality of native security descriptors that describe access rights to the plurality of backup objects, and a plurality of object metadata, wherein each backup object has a corresponding object metadata;
transform each native security descriptor into a platform independent security descriptor; and
generate a partitioned structure which includes a plurality of partitions, including by associating each platform independent security descriptor with those object metadata that correspond to the plurality of backup objects for which that platform independent security descriptor describes access rights to, wherein:
each partition in the partitioned structure includes: (1) a platform independent security descriptor that describes access rights to a plurality of backup objects, (2) object metadata that correspond to the plurality of backup objects for which the platform independent security descriptor describes access rights to, and (3) ownership information; and
the partitioned structure is used to determine which partitions in the partitioned structure a search user is permitted to access, including by:
sending a user credential from a backup catalog server to a user authentication server;
receiving, in response to sending the user credential, an identifier for the search user from the backup catalog server;
comparing the identifier for the search user against the ownership information in order to eliminate, without considering the platform independent security descriptors, any partitions in the partitioned structure which do not have ownership information which includes the identifier for the search user; and
comparing the user credential against those platform independent security descriptors from those partitions which remain after the elimination;

the partitioned structure is stored on a backup catalog server; and
the plurality of backup objects are stored on a backup catalog database.

2. The system of claim 1 , wherein:
at least one native security descriptor includes: a first permission triad that indicates the permissions of an owner, a second permission triad that indicates the permissions of a group, and a third permission triad that indicates the permissions of others; and
transforming includes creating a first access control entry associated with the first permission triad and a second access control entry associated with the second permission triad.

3. The system of claim 1 , wherein the memory is further configured to provide the processor with instructions which when executed cause the processor to generate, for each partition in the partitioned structure, the ownership information, including by:
including, in the ownership information for a given partition, a user identifier associated with a first permission triad associated with that partition; and
including, in the ownership information for the given partition, a group identifier associated with a second permission triad associated with that partition.

4. The system of claim 1 , wherein transforming includes taking into consideration permissions on one or more parent directories.

5. A system, comprising:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
receive, at a backup catalog server, a search query and a user credential which is associated with one or more identifiers;
determine which partitions in a partitioned structure a search user is permitted to access based at least in part on the user credential, wherein:
each partition in the partitioned structure includes: (1) a platform independent security descriptor that describes access rights to a plurality of backup objects, (2) object metadata that correspond to the plurality of backup objects for which the platform independent security descriptor describes access rights to, and (3) ownership information; and
determining which partitions in the partitioned structure the search user is permitted to access includes:
sending the user credential from the backup catalog server to a user authentication server;
receiving, in response to sending the user credential, an identifier for the search user from the backup catalog server;
comparing the identifier for the search user against the ownership information in order to eliminate, without considering the platform independent security descriptors, any partitions in the partitioned structure which do not have ownership information which includes the identifier for the search user; and
comparing the user credential against those platform independent security descriptors from those partitions which remain after the elimination;

for each partition which the search user is permitted to access, search object metadata in that partition for the search query; and
return the search results to the search user, wherein:
the partitioned structure is stored on a backup catalog server; and
the plurality of backup objects are stored on a backup catalog database.

6. The system of claim 5 , wherein eliminating includes using a Bloom filter.

7. The system of claim 5 , wherein determining which partitions in the partitioned structure the search user is permitted to access includes using a predetermined mapping.

8. The system of claim 5 , wherein the search query includes specified ownership information and the returned search results satisfy the specified ownership information.

9. The system of claim 5 , wherein returning the search results to the search user includes sorting the search results such that those search results which include write permission are listed before those search results without write permission.

10. The system of claim 5 , wherein the object metadata includes one or more references to one or more backup objects that can be used to restore those backup objects.

11. The system of claim 5 , wherein returning the search results to the search user includes sorting the search results based at least in part on the ownership information such that (1) those search results for which the search user is associated with an owner in the ownership information are listed before (2) those search results for which the search user is not associated with the owner in the ownership information and the search user is associated with a group in the ownership information.

12. A method, comprising:
receiving, from a plurality of platforms, a plurality of backup objects, a plurality of native security descriptors that describe access rights to the plurality of backup objects, and a plurality of object metadata, wherein each backup object has a corresponding object metadata;
transforming each native security descriptor into a platform independent security descriptor; and
using a processor to generate a partitioned structure which includes a plurality of partitions, including by associating each platform independent security descriptor with those object metadata that correspond to the plurality of backup objects for which that platform independent security descriptor describes access rights to, wherein:
each partition in the partitioned structure includes: (1) a platform independent security descriptor that describes access rights to a plurality of backup objects, (2) object metadata that correspond to the plurality of backup objects for which the platform independent security descriptor d

Assignees

• Emc Ip Holding Co Llc

Inventors

• Auchmoody Scott Clifford
• Hansen Erik S
• Norton Jeffrey R
• Li Junxu
• Malamut Mark David

Classifications

• G06F11/1448 Primary

  Management of the data involved in backup or backup restore · CPC title

• G06F17/30424

  Physics · mapped topic

• G06F21/6227

  where protection concerns the structure of data, e.g. records, types, queries · CPC title

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F16/245

  Query processing · CPC title