Secure, distributed raid storage systems and methods
AssigneeCenturyLink Intellectual Property LLC
InventorSteven A. SPITZER
Life of this patent
Estimating the term…
Abstract
Systems and methods for securely and remotely storing data in a remote, distributed redundant array of independent drives (RAID) is provided. RAID storage is accomplished through a series of mapped drives, non-routable Internet protocol (IP) addresses, and routable IP addresses. In addition, authorization to access a RAID controller, network address translation (NAT) system, and domain name system (DNS) system may all be separated, increasing security and allowing storage to be securely distributed among a variety of dispersed storage locations.
Claims20
A method, comprising:
- receiving, at a redundant array of independent drives (RAID) controller, a first set of data including at least first data and second data;
- determining, by the RAID controller, to store the first set of data in a plurality of data storage drives, including at least a first drive and a second drive;
- determining, by the RAID controller, a first non-routable IP address on a local area network (LAN) associated with the first drive and a second non-routable IP address on the LAN associated with the second drive;
- transmitting, by the RAID controller, the first data to the first non-routable IP address and the second data to the second non-routable IP address;
- receiving, by a network address translation (NAT) system, the first data addressed to the first non-routable IP address and the second data addressed to the second non-routable IP address;
- translating, by the NAT system, the first non-routable IP address into a first routable IP address for a first storage location and the second non-routable IP address into a second routable IP address for a second storage location;
- sending, by the NAT system, the first data to the first routable IP address and the second data to the second routable IP address via a wide area network (WAN);
- providing, by an access management system, permission to a first set of users to access the RAID controller;
- providing, by the access management system, permission to a second set of users to access the NAT system;
- and
- preventing, by the access management system, any user from being designated as a member of both of the first set of users and the second set of users.
(canceled)
A system, comprising:
- at least one processor;
- and
- memory, operatively connected to the at least one processor and storing instructions that, when executed by the at least one processor, cause the system to perform a method, the method comprising:
- receiving, at a redundant array of independent drives (RAID) controller, a first set of data including at least first data and second data;
- determining, by the RAID controller, to store the first set of data in a plurality of data storage drives, including at least a first drive and a second drive;
- determining, by the RAID controller, a first non-routable IP address on a local area network (LAN) associated with the first drive and a second non-routable IP address on the LAN associated with the second drive;
- transmitting, by the RAID controller, the first data to the first non-routable IP address and the second data to the second non-routable IP address;
- receiving, by a network address translation (NAT) system, the first data addressed to the first non-routable IP address and the second data addressed to the second non-routable IP address;
- translating, by the NAT system, the first non-routable IP address into a first routable IP address for a first storage location and the second non-routable IP address into a second routable IP address for a second storage location;
- sending, by the NAT system, the first data to the first routable IP address and the second data to the second routable IP address via a wide area network (WAN);
- providing, by an access management system, permission to a first set of users to access the RAID controller;
- providing, by the access management system, permission to a second set of users to access the NAT system;
- and
- preventing, by the access management system, any user from being designated as a member of both of the first set of users and the second set of users.
(canceled)
A system, comprising:
- at least one processor;
- memory, operatively connected to the at least one processor and storing instructions that, when executed by the at least one processor, cause the system to perform a method, the method comprising:
- receiving, at a redundant array of independent drives (RAID) controller, a first set of data including at least first data and second data;
- determining, by the RAID controller, to store the first set of data in a plurality of data storage drives, including at least a first drive and a second drive;
- determining, by the RAID controller, a first non-routable IP address on a local area network (LAN) associated with the first drive and a second non-routable IP address on the LAN associated with the second drive;
- transmitting, by the RAID controller, the first data to the first non-routable IP address and the second data to the second non-routable IP address;
- receiving, by a network address translation (NAT) system, the first data addressed to the first non-routable IP address and the second data addressed to the second non-routable IP address;
- translating, by the NAT system, the first non-routable IP address into a first routable IP address for a first storage location and the second non-routable IP address into a second routable IP address for a second storage location;
- sending, by the NAT system, the first data to the first routable IP address and the second data to the second routable IP address via a wide area network (WAN);
- providing, by an access management system, permission to a first set of users to access the RAID controller;
- providing, by the access management system, permission to a second set of users to access the NAT system;
- and
- preventing, by the access management system, any user from being designated as a member of both of the first set of users and the second set of users.
Dependencies are inferred from the claim text.