Processing backup data based on file system authentication

Patent metadata

Field	Value
Publication number	US-9977912-B1
Application number	US-201514859559-A
Country	US
Kind code	B1
Filing date	Sep 21, 2015
Priority date	Sep 21, 2015
Publication date	May 22, 2018
Grant date	May 22, 2018

Abstract

Processing backup data based on file system authentication is described. A system request authentication information from an application in response to a receipt of a request from the application to process backup data. The system receives encrypted authentication information associated with an authentication system corresponding to a file system. The system requests a permission level from the authentication system based on the encrypted authentication information. The system receives the permission level from the authentication system. The system determines whether the permission level permits the request from the application to process the backup data. The system processes the backup data for the application in response to a determination that the permission level permits the request from the application to process the backup data.

First claim

What is claimed is:

1. A system comprising:
a processor-based application stored on a non-transitory computer-readable medium, which when executed on a computer, causes one or more processors to:
receive a request from an application to access backup data;
send an encrypted request for authentication information to the application in response to receiving the request from the application to access backup data;
receive encrypted authentication information associated with an authentication system corresponding to a file system;
decrypt the encrypted authentication information;
transmit a request for a permission level to the authentication system, the request including the decrypted authentication information;
receive the permission level from the authentication system in response to transmitting the request for the permission level;
determine whether the received permission level permits the request from the application to process the backup data; and
allow access to the backup data to the application in response to a determination that the permission level permits the request from the application to process the backup data.

2. The system of claim 1 , wherein receiving the encrypted authentication information associated with the authentication system comprises receiving a domain name associated with the authentication system.

3. The system of claim 1 , wherein the encrypted authentication information comprises an encrypted password associated with the authentication system.

4. The system of claim 1 , wherein the authentication system is associated with at least one of lightweight directory access protocol directory services and active directory rights management services.

5. The system of claim 1 , wherein requesting the permission level from the authentication system based on the encrypted authentication information comprises decrypting the encrypted authentication information and submitting the decrypted authentication information to the authentication system.

6. The system of claim 1 , wherein the processor-based application further causes the processor to deny the request from the application to access the backup data in response to a determination that the permission level does not permit the request from the application to process the backup data.

7. A computer-implemented method comprising:
receiving a request from an application to access backup data;
sending an encrypted request for authentication information to the application in response to receiving the request from the application to access backup data;
receiving encrypted authentication information associated with an authentication system corresponding to a file system;
decrypting the encrypted authentication information;
transmitting a request for a permission level to the authentication system, the request including the decrypted authentication information;
receiving the permission level from the authentication system in response to transmitting the request for the permission level;
determining whether the received permission level permits the request from the application to process the backup data; and
allow access to the backup data to the application in response to a determination that the permission level permits the request from the application to process the backup data.

8. The method of claim 7 , wherein receiving the encrypted authentication information associated with the authentication system comprises receiving a domain name associated with the authentication system.

9. The method of claim 7 , wherein the encrypted authentication information comprises an encrypted password associated with the authentication system.

10. The method of claim 7 , wherein the authentication system is associated with at least one of lightweight directory access protocol directory services and active directory rights management services.

11. The method of claim 7 , wherein requesting the permission level from the authentication system based on the encrypted authentication information comprises decrypting the encrypted authentication information and submitting the decrypted authentication information to the authentication system.

12. The method of claim 7 , wherein the method further comprises the request from the application to access the backup data in response to a determination that the permission level does not permit the request from the application to process the backup data.

13. A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein, that when executed by one or more processors, causes the processors to perform the steps of:
receiving a request from an application to access backup data;
sending an encrypted request authentication information to the application in response to receiving the request from the application to access backup data;
receiving encrypted authentication information associated with an authentication system corresponding to a file system;
decrypting the encrypted authentication information;
transmitting a request for a permission level to the authentication system, the request including the decrypted authentication information;
receiving the permission level from the authentication system in response to transmitting the request for the permission level;
determining whether the received permission level permits the request from the application to process the backup data; and
allow access to the backup data to the application in response to a determination that the permission level permits the request from the application to process the backup data.

14. The computer program product of claim 13 , wherein receiving the encrypted authentication information associated with the authentication system comprises receiving a domain name associated with the authentication system, and wherein the encrypted authentication information comprises an encrypted password associated with the authentication system.

15. The computer program product of claim 13 , wherein the authentication system is associated with at least one of lightweight directory access protocol directory services and active directory rights management services.

16. The computer program product of claim 13 , wherein requesting the permission level from the authentication system based on the encrypted authentication information comprises decrypting the encrypted authentication information and submitting the decrypted authentication information to the authentication system.

17. The computer program product of claim 13 , wherein the program code includes further instructions to deny the request from the application to access the backup data in response to a determination that the permission level does not permit the request from the application to process the backup data.

Assignees

• Emc Corp
• Emc Ip Holding Co Llc

Inventors

• Kandamuthan Nirmala
• Iyer Jaykumar G
• Biradar Revansiddappa G
• Singh Brajesh

Classifications

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F11/1464

  for networked environments · CPC title