Data auditing for object storage public clouds
AssigneeRed Hat, Inc.
InventorHuamin Chen
Life of this patent
Estimating the term…
Abstract
A method for data auditing for object storage public clouds includes a service broker receiving a request to store data in public object storage, where the request includes user information or a container image. The service broker, based on either the user information or the container image, determines that data auditing is necessary. The service broker creates a storage unit, in public object storage, and a storage proxy. The method further includes the storage proxy storing data, and a data auditor retrieving data from the storage proxy. The data auditor determines a data qualification for the data, and notifies the storage proxy of the data qualification.
Claims20
A method comprising:
- receiving, at a service broker, a request to store data in a public storage which includes at least one of (i) a block storage in which files are split into evenly sized blocks of data, and (ii) an object storage in which data is stored in objects in a flat structure, wherein the request includes at least one of user information and a container image;
- determining, by the service broker, that based on the at least one of user information and the container image that data auditing is necessary;
- creating, by the service broker, a storage unit in the object storage and a storage proxy;
- storing, in the storage proxy, the data;
- retrieving, by a data auditor, the data from the storage proxy;
- determining, by the data auditor, a data qualification;
- and
- notifying, by the data auditor, the storage proxy of the data qualification.
A system comprising:
- one or more processors;
- memory storing instructions configured to execute on the one or more processors;
- a storage unit;
- a storage proxy;
- a data auditor;
- and
- a service broker executing on the one or more processors, wherein the service broker is configured to:
- receive a request to store data in a public storage which includes at least one of (i) a block storage in which files are split into evenly sized blocks of data, and (ii) an object storage in which data is stored in objects in a flat structure, wherein the request includes at least one of user information and a container image,
- determine that data auditing is necessary based on the at least one of user information and the container image, and
- create the storage unit in the object storage and the storage proxy,
- wherein the storage proxy is configured to:
- store the data, and
- wherein the data auditor is configured to:
- retrieve the data from the storage proxy,
- determine a data qualification, and
- notify the storage proxy of the data qualification.
A non-transitory machine readable medium storing instruction, which when executed by one or more physical processors, is configured to:
- receive, at a service broker, a request to store data in a public storage which includes at least one of (i) a block storage in which files are split into evenly sized blocks of data, and (ii) an object storage in which data is stored in objects in a flat structure, wherein the request includes at least one of user information and a container image;
- determine, by the service broker, that based on the at least one of the user information and the container image that data auditing is necessary;
- create, by the service broker, a storage unit in the object storage and a storage proxy;
- store, in the storage proxy, the data;
- retrieve, by a data auditor, the data from the storage proxy;
- determine, by the data auditor, a data qualification;
- and
- notify, by the data auditor, the storage proxy of the data qualification.
Dependencies are inferred from the claim text.