Access policy updates in a dispersed storage network
AssigneePure Storage, Inc.
InventorsGary W. Grube, Jason K. Resch
Life of this patent
Estimating the term…
Abstract
A method for execution in a dispersed storage network operates to determine one or more slice names of one or more slices and determine whether to establish a new access policy corresponding to the one or more slices. When the new access policy is to be established, the method determines a timestamp; determines a new access policy; and sends the new access policy and the timestamp to one or more storage units that store the one or more slices.
Claims20
A method for execution by a processing system of a distributed storage network (DSN) that includes a processor, the method comprises:
- receiving, from a first storage unit of the DSN, an access policy reconsideration message that includes one or more slice identifiers of one or more encoded data slices;
- determining the one or more slice identifiers based on the access policy reconsideration message, wherein one or more data segments of data are dispersed storage error encoded to produce one more sets of encoded data slices, wherein the one or more sets of encoded data slices includes the one or more encoded data slices;
- determining whether to establish a new access policy corresponding to the one or more encoded data slices in response to receiving the access policy reconsideration message;
- when the new access policy is to be established:
- determining a timestamp regarding the new access policy;
- determining the new access policy, wherein the new access policy includes an access policy pattern;
- and
- sending the new access policy and the timestamp to one or more storage units of the DSN that store the one or more encoded data slices, wherein the one or more storage units includes the first storage unit.
A processing system of a distributed storage network (DSN) comprises:
- at least one processor;
- a memory that stores operational instructions that, when executed by the at least one processor, cause the processing system to:
- receive, from a first storage unit of the DSN, an access policy reconsideration message that includes one or more slice identifiers of one or more encoded data slices;
- determine the one or more slice identifiers based on the access policy reconsideration message, wherein one or more data segments of data are dispersed storage error encoded to produce one more sets of encoded data slices, wherein the one or more sets of encoded data slices includes the one or more encoded data slices;
- determine whether to establish a new access policy corresponding to the one or more encoded data slices in response to receiving the access policy reconsideration message;
- when the new access policy is to be established:
- determine a timestamp regarding the new access policy;
- determine the new access policy, wherein the new access policy includes an access policy pattern;
- and
- send the new access policy and the timestamp to one or more storage units of the DSN that store the one or more encoded data slices, wherein the one or more storage units includes the first storage unit.
A non-transitory computer readable storage medium comprises:
- at least one memory section that stores operational instructions that, when executed by a processing system of a distributed storage network (DSN) that includes a processor and a memory, causes the processing system to:
- receive, from a first storage unit of the DSN, an access policy reconsideration message that includes one or more slice identifiers of one or more encoded data slices;
- determine the one or more slice identifiers based on the access policy reconsideration message;
- determine whether to establish a new access policy corresponding to the one or more encoded data slices in response to receiving the access policy reconsideration message;
- when the new access policy is to be established:
- determine a timestamp regarding the new access policy;
- determine the new access policy, wherein the new access policy includes an access policy pattern;
- and
- send the new access policy and the timestamp to one or more storage units of the DSN that store the one or more encoded data slices, wherein the one or more storage units includes the first storage unit.
Dependencies are inferred from the claim text.