# US 12,182,423 B2 · Systems, methods and computer readable media for software defined storage security protection > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,182,423 B2 - Document ID: US12182423B2 - Status: Granted - Kind: B2 - Application number: 18/160,116 - Filed: 2023-01-26 - Published: 2023-06-01 - Granted: 2024-12-31 - Earliest claimed: 2020-01-30 - Assignees: AT&T Intellectual Property I, L.P. - Applicants: AT&T Intellectual Property I, L.P. - Inventors: Joseph Soryal; Naila Jaoude - Web page: https://patentgrep.com/patent/US12182423B2 ## CPC - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06F 3/0622: {in relation to access} - G06F 3/0637: {Permissions} - G06F 3/0653: {Monitoring storage devices or systems} - G06F 3/0673: {Single storage device} - G06F 21/31: User authentication - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system is provided with a software controller; a storage platform capable of storing stored blocks of data and having a central processing unit; a controller monitoring and isolation tool embedded in the software controller; and a storage monitoring and isolation tool embedded in the storage platform that is capable of locking down a memory partition on the storage platform. The system also includes a memory for storing computer instructions and a host computer coupled with the memory, wherein the host computer, responsive to executing the computer instructions, performs certain operations. The operations include extracting orchestration configurations through the controller monitoring and isolation tool and relaying the orchestration configurations to the storage monitoring and isolation tool. The operations include correlating using the controller monitoring and isolation tool and the storage monitoring and isolation tool actual locations for incoming data for a customer, and monitoring performance of the storage platform with the storage monitoring and isolation tool. The operations also include tying the stored blocks of data to a physical memory on which the stored blocks of data reside; and providing a passcode to the customer though the controller monitoring and isolation tool that has to be presented to the controller monitoring and isolation tool and the storage monitoring and isolation tool to store data. ## Claims ### Claim 1 A method comprising: spinning up, by a software-defined controller including a processor, a storage platform via a first communication channel between the software-defined controller and the storage platform; extracting, by the software-defined controller, orchestration configurations via a controller monitoring and isolation tool embedded in the software-defined controller; relaying, by the software-defined controller, the orchestration configurations to a storage monitoring and isolation tool embedded in the storage platform, wherein the relaying is via a second communication channel between the controller monitoring and isolation tool and the storage monitoring and isolation tool, wherein the second communication channel is separate from the first communication channel, wherein the storage platform is capable of storing stored blocks of data and having a central processing unit, and wherein the storage monitoring and isolation tool is capable of locking down a memory partition on the storage platform; and providing, by the software-defined controller, a passcode to a user through the controller monitoring and isolation tool that has to be presented to the controller monitoring and isolation tool and the storage monitoring and isolation tool to store data. ### Claim 2 (depends on 1) The method of claim 1, further comprising correlating, by the software-defined controller, actual locations for incoming data for a user via the controller monitoring and isolation tool and the storage monitoring and isolation tool. ### Claim 3 (depends on 1) The method of claim 1, wherein the stored blocks of data are tied to a physical memory on which the stored blocks of data reside. ### Claim 4 (depends on 1) The method of claim 1, wherein performance of the storage platform is monitored via the storage monitoring and isolation tool by monitoring data multiplication, monitoring interactions between the stored blocks of data the central processing unit, or any combination thereof. ### Claim 5 (depends on 1) The method of claim 1, wherein the second communication channel between the controller monitoring and isolation tool and the storage monitoring and isolation tool requires second credentials different from the passcode. ### Claim 6 (depends on 1) The method of claim 1, wherein the orchestration configurations are relayed separately to the storage monitoring and isolation tool. ### Claim 7 (depends on 1) The method of claim 1, wherein the locking down of the memory partition comprises a physical lock down when memory cards are used. ### Claim 8 (depends on 1) The method of claim 1, wherein the locking down of the memory partition comprises a logical lock down. ### Claim 9 A system comprising: a software controller; a storage platform capable of storing stored blocks of data and having a central processing unit; a controller monitoring and isolation tool embedded in the software controller; a storage monitoring and isolation tool embedded in the storage platform that is capable of locking down a memory partition on the storage platform; a memory for storing computer instructions; a host computer coupled with the memory, wherein the host computer, responsive to executing the computer instructions, performs operations comprising: spinning up the storage platform via a first communication channel between the software controller and the storage platform; extracting orchestration configurations through the controller monitoring and isolation tool; relaying the orchestration configurations to the storage monitoring and isolation tool via a second communication channel between the controller monitoring and isolation tool and the storage monitoring and isolation tool, wherein the second communication channel is separate from the first communication channel; tying the stored blocks of data to a physical memory on which the stored blocks of data reside; and providing a passcode to a user though the controller monitoring and isolation tool that has to be presented to the controller monitoring and isolation tool and the storage monitoring and isolation tool to store data. ### Claim 10 (depends on 9) The system of claim 9, wherein the operations further comprise correlating actual locations for incoming data for a user via the controller monitoring and isolation tool and the storage monitoring and isolation tool. ### Claim 11 (depends on 9) The system of claim 9, wherein the operations further comprise monitoring performance of the storage platform via the storage monitoring and isolation tool. ### Claim 12 (depends on 9) The system of claim 9, wherein the second communication channel between the controller monitoring and isolation tool and the storage monitoring and isolation tool requires second credentials different from the passcode. ### Claim 13 (depends on 9) The system of claim 9, wherein the orchestration configurations are relayed separately to the storage monitoring and isolation tool. ### Claim 14 (depends on 9) The system of claim 9, wherein performance of the storage platform is monitored via monitoring data multiplication, monitoring interactions between the stored blocks of data the central processing unit, or any combination thereof. ### Claim 15 (depends on 9) The system of claim 9, wherein the locking down of the memory partition comprises a physical lock down when memory cards are used. ### Claim 16 (depends on 9) The system of claim 9, wherein the locking down of the memory partition comprises a logical lock down. ### Claim 17 A non-transitory, tangible computer-readable medium having computer-executable instructions stored thereon which, when executed by a computer, cause the computer to perform operations comprising: spinning up a storage platform via a first communication channel between a software-defined controller and the storage platform; extracting, orchestration configurations via a controller monitoring and isolation tool embedded in the software-defined controller; and relaying the orchestration configurations to a storage monitoring and isolation tool embedded in the storage platform, wherein the relaying is via a second communication channel between the controller monitoring and isolation tool and the storage monitoring and isolation tool, wherein the second communication channel is separate from the first communication channel, and wherein the storage platform is capable of storing stored blocks of data and having a central processing unit. ### Claim 18 (depends on 17) The non-transitory, tangible computer-readable medium of claim 17, wherein the operations further comprise providing, by the software-defined controller, a passcode to a user through the controller monitoring and isolation tool that has to be presented to the controller monitoring and isolation tool and the storage monitoring and isolation tool to store data. ### Claim 19 (depends on 17) The non-transitory, tangible computer-readable medium of claim 17, wherein the operations further comprise correlating actual locations for incoming data for a user via the controller monitoring and isolation tool and the storage monitoring and isolation tool. ### Claim 20 (depends on 17) The non-transitory, tangible computer-readable medium of claim 17, wherein the storage monitoring and isolation tool is capable of locking down a memory partition on the storage platform.