Controlling access to content units stored on an object addressable storage system
AssigneeEMC Corporation
InventorsJan F. Van Riel, Tom Teugels, Michael Kilian, Stephen J. Todd
Life of this patent
Estimating the term…
Abstract
Aspects of the invention relate to sharing content stored on an object addressable storage (OAS) system among a plurality of users of the OAS system and authenticating users to an OAS system. In some embodiments, a user may store content units on the OAS system and control access by other users to these content units. In some embodiments, when a user grants one or more other users access to a content unit stored on the OAS system, the OAS system may send a notification of grant of access to the other user(s).
Claims18
A host computer for accessing a plurality of user content units stored on at least one object addressable storage (OAS) system, wherein each of the plurality of user content units is accessible from the OAS system using an object identifier, wherein the object identifier for each of the plurality of user content units, from the perspective of an issuer of an access request to retrieve the at least one of the plurality of content units, does not control where the at least one of the plurality of content units is logically or physically stored on the OAS system, the at least one OAS system being logically divided into a plurality of storage pools, a first user of the at least one storage system being granted access privileges to one of the plurality of storage pools, the host computer comprising:
- an output;
- and
- at least one controller, coupled to the output, that:
- requests, via the output, the OAS system to create a sub-pool of the pool to which the first user is granted access privileges;
- and
- identifies to the OAS system at least one second user of the at least one storage system to whom the first user grants privileges to access content units stored in the sub-pool.
A method of controlling access to a plurality of user content units stored on at least one object addressable storage (OAS) system, wherein each of the plurality of user content units is accessible from the OAS system using an object identifier, wherein the object identifier for each of the plurality of content units, from the perspective of an issuer of an access request to retrieve the at least one of the plurality of content units, does not control where the at least one of the plurality of content units is logically or physically stored on the OAS system, the at least one OAS system being logically divided into a plurality of storage pools, a first user of the at least one storage system being granted access privileges to one of the plurality of storage pools, the method comprising acts, performed by the first user of the storage system, of:
- requesting the OAS system to create a sub-pool of the pool to which the first user is granted access privileges;
- and
- identifying to the OAS system at least one second user of the at least one storage system to whom the first user grants privileges to access content units stored in the sub-pool.
At least one tangible computer readable medium encoded with instructions that, when executed, perform a method of controlling access to a plurality of user content units stored on at least one object addressable storage (OAS) system, wherein each of the plurality of user content units is accessible from the OAS system using an object identifier, wherein the object identifier for each of the plurality of user content units, from the perspective of an issuer of an access request to retrieve the at least one of the plurality of content units, does not control where the at least one of the plurality of content units is logically or physically stored on the OAS system, the at least one OAS system being logically divided into a plurality of storage pools, a first user of the at least one storage system being granted access privileges to one of the plurality of storage pools, the method comprising acts, performed by the first user of the storage system, of:
- requesting the OAS system to create a sub-pool of the pool to which the first user is granted access privileges;
- and
- identifying to the OAS system at least one second user of the at least one storage system to whom the first user grants privileges to access content units stored in the sub-pool.
Dependencies are inferred from the claim text.