Utilizing data views to optimize secure data access in a storage system
AssigneePure Storage, Inc.
InventorsRobert Lee, John Colgrove, Bikash Roy Choudhury, Mandeep Arora, Roy Child, Purvaja Narayanaswamy, Cary A. Sandvig
Life of this patent
Estimating the term…
Abstract
A storage system has filtered views of data. The storage system receives a read request for a filtered view of data in memory. The read request is associated with one or more permissions for viewing the data. The storage system identifies a subset of the data, based on the one or more permissions. The storage system provides the filtered view. The filtered view includes the subset of the data.
Claims17
A storage system comprising:
- a memory;
- and
- a processing device, configured to:
- receive a read request for a filtered view of data in the memory, the read request associated with at least one permission for viewing the data according to one of a user identifier (UID) and a group identifier (GID);
- identify an entity associated with the read request, wherein the at least one permission for viewing the data is based on the entity associated with the read request and a tag of the data associated with one of the UID or the GID;
- identify a subset of the data, based on the at least one permission, wherein identification of the subset of the data comprises application of a filter to metadata associated with the subset of data to generate the filtered view;
- provide the filtered view comprising the subset of the data;
- receive a modification to the subset of the data provided via the filtered view;
- and
- replicate the modification in the data stored in the memory.
A method comprising:
- receiving a read request for a filtered view of data in a memory, the read request associated with at least one permission for viewing the data;
- identifying an entity associated with the read request, wherein the at least one permission for viewing the data is based on an entity associated with the read request and a tag of the data associated with one of a user identifier (UID) or a group identifier (GID) of the read request;
- identifying a subset of the data, based on the at least one permission, wherein identifying the subset of the data comprises application of a filter to metadata associated with the subset of data to generate the filtered view;
- providing the filtered view comprising the subset of the data;
- receiving a modification to the subset of the data provided via the filtered view;
- and
- replicating the modification in the data stored in the memory.
A tangible, non-transient, computer readable media having instructions thereupon which, when performed by a processing device, cause the processing device to:
- receive a read request for a filtered view of data in a memory, the read request associated with at least one permission for viewing the data;
- identify an entity associated with the read request, wherein the at least one permission for viewing the data is based on the entity associated with the read request and a tag of the data associated with one of a user identifier (UID) or a group identifier (GID);
- identify a subset of the data, based on the at least one permission, wherein identifying the subset of the data comprises application of a filter to metadata associated with the subset of data to generate the filtered view;
- and
- provide the filtered view comprising the subset of the data;
- receive a modification to the subset of the data provided via the filtered view;
- and
- replicate the modification in the data stored in the memory.
Dependencies are inferred from the claim text.