# US 12,118,390 B2 · System and method for secure recovery of application group in container deployment environments > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,118,390 B2 - Document ID: US12118390B2 - Status: Granted - Kind: B2 - Application number: 17/741,727 - Filed: 2022-05-11 - Published: 2023-04-27 - Granted: 2024-10-15 - Earliest claimed: 2021-10-26 - Assignees: Druva Inc. - Applicants: Druva Inc. - Inventors: Srikiran Gottipati; Preethi Srinivasan; Stephen Manley; Nishith Chitaliya - Web page: https://patentgrep.com/patent/US12118390B2 ## CPC - G06F 8/60: Software deployment - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 9/5005: {to service a request} - G06F 11/1461: {Backup scheduling policy} - G06F 11/1464: {for networked environments} - G06F 11/1469: {Backup restoration techniques} - G06F 2009/45562: {Creating, deleting, cloning virtual machine instances} - G06F 2201/84: Using snapshots, i.e. a logical point-in-time copy of the data - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system for secure recovery of an application group in a container deployment environment is presented. The system includes a backup controller configured to access an application group token and generate a corresponding backup token. The system further includes a backup module configured to initiate a backup based on the backup token and create a corresponding recovery point on a backup server. The system further includes a recovery access token module configured to access a recovery access token for a determined recovery point. The system further includes a recovery controller configured to generate a recovery token corresponding to the determined recovery point based on the recovery access token, and a recovery module configured to initiate a recovery of the application group from the backup server in a destination cluster based on the recovery token. A related method is also presented. ## Claims ### Claim 1 A system for secure recovery of an application group in a container deployment environment, the system comprising: a backup controller configured to access an application group token corresponding to the application group and generate a corresponding backup token when a backup of the application group is initiated; a backup module configured to initiate a backup based on the backup token and create a corresponding recovery point on a backup server; a recovery access token module configured to access a recovery access token for a determined recovery point when a recovery of the application group is initiated; a recovery controller configured to generate a recovery token corresponding to the determined recovery point based on the recovery access token; a recovery module configured to initiate a recovery of the application group from the backup server in a destination cluster based on the recovery token; wherein the recovery access token comprises information corresponding to the determined recovery point and one or more of a destination cluster ID, a cloud ID, or a region ID; and wherein the recovery controller is further configured to verify the recovery access token by matching a cluster ID in the recovery access token with a destination cluster token before generating the recovery token. ### Claim 2 (depends on 1) The system of claim 1, wherein the recovery access token module is configured to access the recovery access token based on: the application group token if the application group exists at the time of requesting the recovery access token, or a source cluster token for a cluster on which the application group was registered at the time of backup if the application group does not exist at the time of requesting the recovery access token. ### Claim 3 (depends on 2) The system of claim 2, further comprising a user access management module configured to match a userinfo of a user requesting the recovery access token with a userinfo corresponding to the application group before the recovery access token is generated, if the application group does not exist at the time of requesting the recovery access token. ### Claim 4 (depends on 1) The system of claim 1, wherein the recovery access token module is further configured to access one or more recovery points from the backup server corresponding to the application group, and allow a user to select a recovery point from the one or more recovery points as the determined recovery point. ### Claim 5 (depends on 1) The system of claim 1, wherein the recovery controller is configured to generate the recovery token based on the cloud ID and the region ID if the cluster ID field is empty in the recovery access token, and the recovery module is configured to initiate the recovery of the application group in any cluster corresponding to the cloud ID and the region ID. ### Claim 6 (depends on 1) The system of claim 1, further comprising: a cluster controller configured to register a cluster based on a registration token and generate a corresponding cluster token; and an application group controller configured to register the application group in the cluster based on the cluster token and generate the application group token. ### Claim 7 (depends on 1) The system of claim 1, wherein the system is configured to allow an application group user, a cluster admin, or a backup server admin to initiate the secure recovery of the application group in the container deployment environment. ### Claim 8 (depends on 1) The system of claim 1, wherein the container deployment environment is a Kubernetes environment. ### Claim 9 A method for secure recovery of an application group in a container deployment environment, the method comprising: accessing an application group token corresponding to the application group and generating a corresponding backup token when a backup of the application group is initiated; initiating a backup based on the backup token and creating a corresponding recovery point on a backup server; accessing a recovery access token for a determined recovery point when a recovery of the application group is initiated; generating a recovery token corresponding to the determined recovery point based on the recovery access token; initiating a recovery of the application group from the backup server in the destination cluster based on the recovery token; wherein the recovery access token comprises information corresponding to the determined recovery point and one or more of a destination cluster ID, a cloud ID, or a region ID; and further comprising verifying the recovery access token by matching a cluster ID in the recovery access token with a destination cluster token before generating the recovery token. ### Claim 10 (depends on 9) The method of claim 9, wherein accessing the recovery access token is based on: the application group token if the application group exists at the time of requesting the recovery access token, or a source cluster token for a cluster on which the application group was registered at the time of backup if the application group does not exist at the time of requesting the recovery access token. ### Claim 11 (depends on 10) The method of claim 10, further comprising matching a userinfo of a user requesting the recovery access token with a userinfo corresponding to the application group before the recovery access token is generated, if the application group does not exist at the time of requesting the recovery access token. ### Claim 12 (depends on 9) The method of claim 9, further comprising accessing one or more recovery points from the backup server corresponding to the application group, and allowing a user to a select a recovery point from the one or more recovery points as the determined recovery point. ### Claim 13 (depends on 9) The method of claim 9, wherein the method comprises generating the recovery token based on the cloud ID and the region ID if the cluster ID field is empty in the recovery access token, and initiating the recovery of the application group in any cluster corresponding to the cloud ID and the region ID. ### Claim 14 (depends on 9) The method of claim 9, further comprising: registering a cluster based on a registration token and generating a corresponding cluster token; and registering the application group in the cluster based on the cluster token and generating the application group token. ### Claim 15 (depends on 9) The method of claim 9, wherein the method allows an application group user, a cluster admin, or a backup server admin to initiate the secure recovery of the application group in the container deployment environment. ### Claim 16 (depends on 9) The method of claim 9, wherein the container deployment environment is a Kubernetes environment. ### Claim 17 A system for secure recovery of an application group in a container deployment environment, the system comprising: a backup controller configured to access an application group token corresponding to the application group and generate a corresponding backup token when a backup of the application group is initiated; a backup module configured to initiate a backup based on the backup token and create a corresponding recovery point on a backup server; a recovery access token module configured to access a recovery access token for a determined recovery point when a recovery of the application group is initiated; a recovery controller configured to generate a recovery token corresponding to the determined recovery point based on the recovery access token; a recovery module configured to initiate a recovery of the application group from the backup server in a destination cluster based on the recovery token; wherein the recovery access token comprises information corresponding to the determined recovery point and one or more of a destination cluster ID, a cloud ID, or a region ID; and wherein the recovery controller is configured to generate the recovery token based on the cloud ID and the region ID if the cluster ID field is empty in the recovery access token, and the recovery module is configured to initiate the recovery of the application group in any cluster corresponding to the cloud ID and the region ID. ### Claim 18 (depends on 17) The system of claim 17, wherein the recovery access token module is configured to access the recovery access token based on: the application group token if the application group exists at the time of requesting the recovery access token, or a source cluster token for a cluster on which the application group was registered at the time of backup if the application group does not exist at the time of requesting the recovery access token. ### Claim 19 (depends on 18) The system of claim 18, further comprising a user access management module configured to match a userinfo of a user requesting the recovery access token with a userinfo corresponding to the application group before the recovery access token is generated, if the application group does not exist at the time of requesting the recovery access token. ### Claim 20 (depends on 17) The system of claim 17, wherein the recovery access token module is further configured to access one or more recovery points from the backup server corresponding to the application group, and allow a user to select a recovery point from the one or more recovery points as the determined recovery point.