Back to results
US 12,117,966 B2Granted
System and method for proxying IO sessions to inject external processing
AssigneeEMC IP Holding Company LLC
InventorsJoel Christner, Amy N. Seibel, Nicole Reineke
Life of this patent
Estimating the term…
Abstract
One example method includes injecting processing into sessions including IO sessions. Events in a file system are intercepted and processed. During processing, policies may be applied to the events. Some of the policies are triggered such that external actions or processing is applied to the event. Once the actions have been performed, the event may be processed by the file system.
Claims15
A method, comprising:
- intercepting an event at a filter driver in a kernel space, wherein the event is associated with a resource of a computing system, wherein the event is associated with a session and wherein the session includes an entry for each event associated with the resource that occurred in the session;
- directing the event to a proxy engine operating in a user space;
- determining the session associated with the event is a session of interest by the proxy engine;
- generating a reconstructed session from entries in the session, which is stored in a session cache, wherein the reconstructed session includes the event;
- applying a policy to the reconstructed session to determine an action to be performed on the event using metadata and/or data stored in the session, wherein the metadata is related to the event;
- forwarding the reconstructed session to an external system, wherein the action is performed by the external system and wherein the action includes injecting an external processing into an IO (input/output) associated with the event based on the reconstructed session before the event is committed in the computing system, wherein the action is obscuring data, by the external system, associated with the event, wherein the data is unobscured when authorized at a later time;
- and
- returning the event to the filter driver to resume processing in the kernel space.
5 more elements
A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
- intercepting an event at a filter driver in a kernel space, wherein the event is associated with a resource of a computing system, wherein the event is associated with a session and wherein the session includes an entry for each event associated with the resource that occurred in the session;
- directing the event to a proxy engine operating in a user space;
- determining the session associated with the event is a session of interest by the proxy engine;
- generating a reconstructed session from entries in the session, which is stored in a session cache, wherein the reconstructed session includes the event;
- applying a policy to the reconstructed session to determine an action to be performed on the event using metadata and/or data stored in the session, wherein the metadata is related to the event;
- forwarding the reconstructed session to an external system, wherein the action is performed by the external system and wherein the action includes injecting an external processing into an IO (input/output) associated with the event based on the reconstructed session before the event is committed in the computing system, wherein the action is obscuring data, by the external system, associated with the event, wherein the data is unobscured when authorized at a later time;
- and
- returning the event to the filter driver to resume processing in the kernel space.
5 more elements
A method, comprising:
- intercepting an event at a filter driver in a kernel space, wherein the event is associated with a resource of a computing system, wherein the event is associated with a session and wherein the session includes an entry for each event associated with the resource that occurred in the session;
- directing the event to a proxy engine operating in a user space;
- determining the session associated with the event is a session of interest by the proxy engine;
- generating a reconstructed session from entries in the session, which is stored in a session cache, wherein the reconstructed session includes the event;
- applying a policy to the reconstructed session to determine an action to be performed on the event using metadata and/or data stored in the session, wherein the metadata is related to the event;
- forwarding the reconstructed session to an external system, wherein the action is performed by the external system and wherein the action includes injecting an external processing into an IO (input/output) associated with the event based on the reconstructed session before the event is committed in the computing system, wherein the action is authorization or manipulation, by the external system, associated with the event, wherein the data is unobscured when authorized at a later time;
- and
- returning the event to the filter driver to resume processing in the kernel space.
5 more elements
Dependencies are inferred from the claim text.