US 12,008,135 B2Granted

Controlling information privacy in a shared data storage management system

AssigneeCommvault Systems, Inc.

InventorsBhavyan Bharatkumar Mehta, Anand Vibhor, Mrityunjay Upadhyay, Shree Nandhini Santhakumar

Life of this patent

Estimating the term…

Loading patent…

Abstract

An illustrative data storage management system uses a control layer that controls information content presented to users and ensures information privacy between diverse tenants and/or resellers who share the system. The system populates a relationship database as transactions roll in (intake processing), and uses information in the relationship database later when processing responses (output processing). The relationship database comprises associations between e.g., a company ID and any number of entities that were created by or on behalf of the company or that are related to the company's service in the system. The control layer parses raw results that are responsive to requests for information and prevents others' information from being included in the responsive message(s). The techniques disclosed herein are not limited to shared systems managed by service providers, and may be implemented in fully owned and operated systems to add security and privacy among diverse users and/or departments.

Claims20

Dependent claims

A computer-implemented method comprising:

receiving a first transaction at a storage manager, which executes on a computing device comprising one or more hardware processors, wherein the storage manager manages storage operations in a data storage management system;
identifying a first company identifier of a first company that is associated with the first transaction;
based on a classification map that lists entities of the data storage management system, identifying a first entity of the data storage management system that is referenced in the first transaction;
generating one or more entries for a relationship database, wherein each of the one or more entries comprises the first entity referenced in the first transaction in association with the first company identifier;
adding the one or more entries to the relationship database;
receiving a request for information from a requester having a company identifier of the requester;
obtaining, from one or more components of the data storage management system, first information responsive to the request, wherein the first information references the first entity;
based on consulting the relationship database, determining that the first entity is associated with the first company identifier;
based on determining that the company identifier of the requester is different from the first company identifier associated with the first entity referenced in the first information responsive to the request, excluding an identifier of the first entity from a first response to the request provided to the requester.

6 more elements

A non-transitory computer-readable medium storing computer-executable instructions that, when executed by a first computing device comprising one or more hardware processors, cause the first computing device to:

identify a first company identifier of a first company that is associated with a first transaction received at the first computing device, wherein the first transaction is an entry to a file stored at the first computing device;
based on a classification map that lists entities of a data storage management system, identify a first entity that is referenced in the first transaction;
generate one or more entries for a relationship database, wherein each of the one or more entries comprises the first entity in association with the first company identifier;
add the one or more entries to the relationship database;
receive a request for information from a requester having a company identifier of the requester;
obtain first information from the file responsive to the request, wherein the first information references the first entity;
based on consulting the relationship database, determine that the first entity is associated with the first company identifier;
based on determining that the company identifier of the requester is different from the first company identifier associated with the first entity referenced in the first information responsive to the request, exclude an identifier of the first entity from a first response to the request provided to the requester.

5 more elements

Dependencies are inferred from the claim text.