Back to results
US 12,771,686 B2Granted
Permissions for backup-related operations
AssigneeHewlett Packard Enterprise Development LP
InventorsSyama Sundararao Nadiminti, Annmary Justine Koomthanam, Keshetti Mahesh
Life of this patent
Estimating the term…
Abstract
Example techniques for granting permissions for performing an operation related to a backup copy are described. The backup copy corresponds to first device data and the first device data is stored in a first device. In an example, in response to receiving a request to perform the operation related to the backup copy, telemetry data received from the first device is analyzed. Based on the analysis, it is determined that security of the first device is uncompromised. Based on the determination, a permission to perform the operation related to the backup copy is granted.
Claims15
A system comprising:
- a processor;
- and
- a non-transitory storage medium comprising instructions executable on the processor to:
- receive, at the system from a first device over a network, a permission request to permit an operation related to a backup copy, the backup copy corresponding to first device data that is stored in the first device, and the backup copy to be stored in a second device that is separate from the first device;
- analyze, in response to the permission request, telemetry data received from the first device within a first time period relative to a time of receipt of the permission request, wherein the telemetry data comprises one or more of a number of login attempts, a number of file encryptions, a number of file modifications, a number of file deletions, workload information of hardware components of the first device, a backup policy, a read count of the first device data, or a write count of the first device data;
- determine whether security of the first device is compromised based on the analysis;
- based on a determination that the security of the first device is uncompromised, permit the operation related to the backup copy by sending a token from the system to the first device over the network;
- receive, at the system from the second device, the token that was sent from the first device to the second device as part of a performance request from the first device to perform the operation related to the backup copy, wherein the token from the second device is sent from the second device to the system based on a determination at the second device that the performance request from the first device is consistent with the token;
- validate, at the system, the token received from the second device;
- and
- based on validating the token, send, from the system, a response indicating that the token is authentic to permit performance by the second device of the operation related to the backup copy.
8 more elements
A method comprising:
- receiving, by a system comprising a hardware processor, a permission request from a first device over a network for permission to perform an operation related to a backup copy, the backup copy corresponding to first device data that is stored in the first device, and the backup copy to be stored in a second device that is separate from the first device;
- analyzing, by the system in response to the permission request, telemetry data received from the first device within a first time period relative to a time of receipt of the permission request, wherein the telemetry data comprises one or more of a number of login attempts, a number of file encryptions, a number of file modifications, a number of file deletions, workload information of hardware components of the first device, a backup policy, a read count of the first device data, or a write count of the first device data;
- determining, by the system, whether security of the first device is compromised based on the analysis;
- based on a determination that the security of the first device is uncompromised, permitting the operation related to the backup copy by sending a token from the system to the first device over the network;
- receiving, at the system from the second device, the token that was sent from the first device to the second device as part of a performance request from the first device to perform the operation related to the backup copy, wherein the token from the second device is sent from the second device to the system based on a determination at the second device that the performance request from the first device is consistent with the token;
- validating, by the system, the token received from the second device;
- and
- based on validating the token, sending, from the system, a response to the second device indicating that the token is authentic to permit performance by the second device of the operation related to the backup copy.
5 more elements
A non-transitory computer-readable medium comprising instructions, the instructions being executable by a system to:
- receive, at the system from a first device over a network, a permission request to permit an operation related to a backup copy, the backup copy corresponding to first device data that is stored in the first device, and the backup copy to be stored in a second device that is separate from the first device;
- analyze, in response to the permission request, telemetry data received from the first device within a first time period relative to a time of receipt of the permission request, wherein the telemetry data comprises one or more of a number of login attempts, a number of file encryptions, a number of file modifications, a number of file deletions workload information of hardware components of the first device, a backup policy, a read count of the first device data, or a write count of the first device data;
- determine whether security of the first device is compromised based on the analysis;
- based on a determination that the security of the first device is uncompromised, permit the operation related to the backup copy by sending a token from the system to the first device;
- receive, at the system from the second device, the token that was sent from the first device to the second device as part of a performance request from the first device to perform the operation related to the backup copy, wherein the token from the second device is sent from the second device to the system based on a determination at the second device that the operation specified by the performance request is consistent with the token;
- validate, at the system, the token received from the second device;
- and
- based on validating the token, send, from the system, a response indicating that the token is authentic to permit performance by the second device of the operation related to the backup copy.
5 more elements
Dependencies are inferred from the claim text.