US 2019/0377886 A1Published application

Object Storage System with Secure Object Replication

AssigneeWestern Digital Technologies, Inc.

InventorSouvik Roy

Life of this patent

Estimating the term…

Loading patent…

Abstract

Example distributed object storage systems and methods provide secure object replication. Data objects are encrypted for reading and decrypted for writing to prevent unwanted data access by a replication user credential that does not need access to the user data. During an object storage operation for reading and writing an identified data object, read operations are encrypted to create an encrypted data object corresponding to the identified data object. The encrypted data object may be moved between a first storage node and a second storage node. The encrypted data object is decrypted during write operations to write the identified data object to the second storage node. A user credential in the object storage operation may identify a replication user credential for selectively encrypting and decrypting the identified data object.

Claims20

Dependent claims

A storage system, comprising:

at least one processor;
at least one memory coupled to the at least one processor;
a plurality of storage nodes configured to receive data objects;
a controller node stored in the at least one memory and executable by the at least one processor to communicate with the plurality of storage nodes for reading and writing data objects;
an authenticator stored in the at least one memory and executable by the at least one processor to identify a user credential for reading an identified data object requested in an object storage operation, the user credential having a user type, the user type selected from an owner user type and a replication user type;
and
an encrypt engine stored in the at least one memory and selectively executable by the at least one processor based on the user type to encrypt the identified data object while reading the identified data object from at least one of the plurality of storage nodes responsive to the user type being the replication user type, wherein the controller node is further executable to read the identified data object to execute the object storage operation.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/006,816Filed 12 Jun 2018
Published: 12 Dec 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification8 codes

G06F 11/2094
Where persistent mass storage functionality or persistent mass storage control functionality is redundant: redundant storage or storage space
G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 16/27
Of structured data, e.g. relational data: replication, distribution or synchronisation of data between databases or within a distributed database…
G06F 21/606
Protecting data: by securing the transmission between two devices or processes

Family

US 11,256,815 B2Related patent
US 2019/0377886 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key