System and Method for Creating Conditional Immutable Objects in a Storage Device
AssigneeDell Products L.P.
InventorsFarzad Khosrowpour, Marco A. Peereboom
Life of this patent
Estimating the term…
Abstract
A data storage system includes a storage device and a data handler that receives an object, creates metadata for the object that includes a key and an authorization, stores the object on the storage device, receives a request for the object, determines if the request includes the key, and, if the request has authorization information, permits access to the object. The data handler receives another request for the object, determines if the request includes the key, and, if the request does not have the authorization information, denies access to the object.
Claims20
A data storage system comprising:
- a storage device;
- and
- a data handler coupled to the storage device and operable to:
- receive a first access request for a data object stored on the storage device, the data object including object data and metadata, the metadata including a key, a first authorization field, and a second authorization field;
- determine that the first access request includes the key;
- determine that the first access request includes information associated with the first authorization field in response to determining that the first access request includes the key;
- permit an execution of a first operation on the data object in response to determining that the first access request includes information associated with the first authorization field;
- receive a second access request for the data object;
- determine that the second access request includes the key;
- determine that the second access request includes information associated with the second authorization field in response to determining that the second access request includes the key;
- and
- deny the execution of the first operation on the data object in response to determining that the second access request includes information associated with the second authorization field.
A method comprising:
- receiving, at a data handler coupled to a storage device, a first access request for a data object stored on the storage device, the data object including object data and metadata, the metadata including a key, a first authorization field, and a second authorization field;
- determining that the first access request includes the key;
- determining that the first access request includes information associated with the first authorization field in response to determining that the first access request includes the key;
- permitting an execution of a first operation on the data object in response to determining that the first access request includes information associated with the first authorization field
- receiving a second access request for the data object;
- determining that the second access request includes the key;
- determining that the second access request includes information associated with the second authorization field in response to determining that the second access request includes the key;
- and
- denying the execution of the first operation on the data object in response to determining that the second access request includes information associated with the second authorization field.
Machine-executable code for an information handling system, wherein the machine-executable code is embedded within a non-transitory medium and includes instructions for carrying out a method, the method comprising:
- receiving, at a data handler coupled to a storage device, a first access request for a data object stored on the storage device, the data object including object data and metadata, the metadata including a key, a first authorization field, and a second authorization field;
- determining that the first access request includes the key;
- determining that the first access request includes information associated with the first authorization field in response to determining that the request includes the key;
- permitting an execution of a first operation on the object in response to determining that the first access request includes information associated with the first authorization field;
- receiving a second access request for the data object;
- determining that the second access request includes the key;
- determining that the second access request includes information associated with the second authorization field in response to determining that the second access request includes the key;
- and
- denying the execution of the first operation on the data object in response to determining that the second access request includes information associated with the second authorization field.
Dependencies are inferred from the claim text.