Data migration using an orchestrator generated data migration transcript and security vouchers
AssigneeDell Products L.P.
InventorsOPHIR JEHOSHUA BUCHMAN, YEVGENI GEHTMAN, MAXIM BALIN
Life of this patent
Estimating the term…
Abstract
Methods and systems for migrating data between provider systems are disclosed. The migration may be performed using a migration orchestrator as-a-service (MOaaS) schema where instances of a migration orchestrator that is configured at a data source (e.g., a source provider system) are instantiated on systems of all other actors/personas involved with the data migration. The instances of the migration orchestrator may cooperatively fulfill the migration of the data using a shared data migration transcript. Security vouchers containing share secrets may also be used to enhance security during migrations.
Claims20
A method for migrating data between provider systems comprising:
- generating, by a first migration orchestrator, a security voucher comprising first cryptographic data;
- generating, by the first migration orchestrator, second cryptographic data usable to verify the first cryptographic data;
- deconstructing, by the first migration orchestrator, the second cryptographic data into at least two secret shards comprising a first secret shard and second secret shard;
- providing, by the first migration orchestrator, the security voucher to a source provider system from which customer data is to be migrated as part of a data migration to a destination provider system along with instructions for the source provider system to secure migration data to be transferred to destination providers as part of the data migration, the migration data comprising data identical to the first secret shard;
- and
- providing, by the first migration orchestrator, the second secret shard to the destination provider system with first instructions for the destination provider system to reconstruct the second cryptographic data using the second secret shard and the migration data and second instructions for the destination provider system to use a reconstructed one of the second cryptographic data to verify the migration data.
A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for migrating data between provider systems, the operations comprising:
- generating, by a first migration orchestrator, a security voucher comprising first cryptographic data;
- generating, by the first migration orchestrator, second cryptographic data usable to verify the first cryptographic data;
- deconstructing, by the first migration orchestrator, the second cryptographic data into at least two secret shards comprising a first secret shard and second secret shard;
- providing, by the first migration orchestrator, the security voucher to a source provider system from which customer data is to be migrated as part of a data migration to a destination provider system along with instructions for the source provider system to secure migration data to be transferred to destination providers as part of the data migration, the migration data comprising data identical to the first secret shard;
- and
- providing, by the first migration orchestrator, the second secret shard to the destination provider system with first instructions for the destination provider system to reconstruct the second cryptographic data using the second secret shard and the migration data and second instructions for the destination provider system to use a reconstructed one of the second cryptographic data to verify the migration data.
A data processing system, the data processing system comprising:
- a central processing unit (CPU);
- and
- a memory coupled to the CPU to store instructions, which when executed by the CPU, cause the CPU to perform operations for migrating data between provider systems, the operations comprising:
- generating, by a first migration orchestrator, a security voucher comprising first cryptographic data;
- generating, by the first migration orchestrator, second cryptographic data usable to verify the first cryptographic data;
- deconstructing, by the first migration orchestrator, the second cryptographic data into at least two secret shards comprising a first secret shard and second secret shard;
- providing, by the first migration orchestrator, the security voucher to a source provider system from which customer data is to be migrated as part of a data migration to a destination provider system along with instructions for the source provider system to secure migration data to be transferred to destination providers as part of the data migration, the migration data comprising data identical to the first secret shard;
- and
- providing, by the first migration orchestrator, the second secret shard to the destination provider system with first instructions for the destination provider system to reconstruct the second cryptographic data using the second secret shard and the migration data and second instructions for the destination provider system to use a reconstructed one of the second cryptographic data to verify the migration data.
Dependencies are inferred from the claim text.