# US 10,877,750 B1 · Containerized storage microservice with direct connection to requesting application container > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,877,750 B1 - Document ID: US10877750B1 - Status: Granted - Kind: B1 - Application number: 16/717,897 - Filed: 2019-12-17 - Granted: 2020-12-29 - Earliest claimed: 2019-12-17 - Assignees: DataCore Software Corporation - Applicants: DataCore Software Corporation - Inventors: Nicholas C. Connolly; Robert Bassett; Roni J. Putra - Web page: https://patentgrep.com/patent/US10877750B1 ## CPC - G06F 9/226: {Microinstruction function, e.g. input/output microinstruction; diagnostic microinstruction; microinstruction format} - G06F 13/20: for access to input/output bus - G06F 21/44: Program or device authentication - H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB} - H04L 9/3236: {using cryptographic hash functions} - H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD} - G06F 2213/40: Bus coupling - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A containerized storage microservice is described. The containerized storage microservice, and its corresponding architecture, provide an environment wherein an application container accesses containerized storage services through a direct connection. This allows the operating system file system to be effectively bypassed in the provision of storage services. In one example, a library provides a basic file system and is arranged underneath the application container. The library essentially intercepts storage requests and emulates a thin file system. Instead of invoking the kernel of the operating system to process each storage request, the library allows the storage request to bypass the kernel and pass the storage request to the storage microservice. The containerized storage microservices are available in different types, and are configured so that they can be stacked to provide customized sets of storage services to different types of application containers. ## Claims ### Claim 1 A method for processing IO requests from an application container using a containerized storage microservice, the application container and the containerized storage microservice executing in a containerized computing environment that implements a host operating system having a file system, the method comprising: intercepting an IO request within the application container; and bypassing the file system of the host operating system by directly connecting the IO request to the containerized storage microservice within the containerized computing environment. ### Claim 2 (depends on 1) The method according to claim 1, wherein the IO request is directly connected to the containerized storage microservice through a file system module of a storage microservices stack that includes the containerized storage microservice. ### Claim 3 (depends on 2) The method according to claim 2, wherein the application container is configured to include a library that intercepts the IO request and connects to the file system module of the storage microservices stack. ### Claim 4 (depends on 1) The method according to claim 1, wherein directly connecting the IO request to the containerized storage microservice is through an encrypted connection within the containerized computing environment. ### Claim 5 (depends on 4) The method according to claim 4, wherein the containerized storage microservice performs an authenticated access corresponding to the IO request by maintaining an application identifier and cryptographic hash corresponding to the application container. ### Claim 6 A non-transitory computer readable medium storing program code for processing IO requests from an application container using a containerized storage microservice, the application container and the containerized storage microservice executing in a containerized computing environment that implements a host operating system having a file system, the program code being executable by a processor to perform operations comprising: intercepting an IO request within the application container; and bypassing the file system of the host operating system by directly connecting the IO request to the containerized storage microservice within the containerized computing environment. ### Claim 7 (depends on 6) The non-transitory computer readable medium according to claim 6, wherein the IO request is directly connected to the containerized storage microservice through a file system module of a storage microservices stack that includes the containerized storage microservice. ### Claim 8 (depends on 7) The non-transitory computer readable medium according to claim 7, wherein the application container is configured to include a library that intercepts the IO request and connects to the file system module of the storage microservices stack. ### Claim 9 (depends on 6) The non-transitory computer readable medium according to claim 6, wherein directly connecting the IO request to the containerized storage microservice is through an encrypted connection within the containerized computing environment. ### Claim 10 (depends on 9) The non-transitory computer readable medium according to claim 9, wherein the containerized storage microservice performs an authenticated access corresponding to the IO request by maintaining an application identifier and cryptographic hash corresponding to the application container. ### Claim 11 An apparatus for processing IO requests from an application container using a containerized storage microservice, the application container and the containerized storage microservice executing in a containerized computing environment that implements a host operating system having a file system, the apparatus comprising: a processor; and a memory, the memory storing program code executable by the processor to perform operations comprising: intercepting an IO request within the application container; and bypassing the file system of the host operating system by directly connecting the IO request to the containerized storage microservice within the containerized computing environment. ### Claim 12 (depends on 11) The apparatus according to claim 11, wherein the IO request is directly connected to the containerized storage microservice through a file system module of a storage microservices stack that includes the containerized storage microservice. ### Claim 13 (depends on 12) The apparatus according to claim 12, wherein the application container is configured to include a library that intercepts the IO request and connects to the file system module of the storage microservices stack. ### Claim 14 (depends on 11) The apparatus according to claim 11, wherein directly connecting the IO request to the containerized storage microservice is through an encrypted connection within the containerized computing environment. ### Claim 15 (depends on 14) The apparatus according to claim 14, wherein the containerized storage microservice performs an authenticated access corresponding to the IO request by maintaining an application identifier and cryptographic hash corresponding to the application container.