专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US07225118B2 Global data placement 有权
标题翻译：全球数据放置
公开(公告)号：US07225118B2
公开(公告)日：2007-05-29
申请号：US10284098
申请日：2002-10-31
申请人： Qian Wang , Arif Merchant , Nina Mishra , Mahesh Kallahalla , Ram Swaminathan
发明人： Qian Wang , Arif Merchant , Nina Mishra , Mahesh Kallahalla , Ram Swaminathan
IPC分类号： G06F9/45
CPC分类号： G06Q10/10 , H04L67/1002 , H04L67/1008 , H04L67/1095 , H04L69/329
摘要： A method of global data placement. The method includes assigning one or more workloads to one or more compute servers such that each workload flows to one compute server, assigning the data chunks that the workloads accesses to one or more storage servers, and determining how the workloads access the data.
摘要翻译：全球数据放置方法。该方法包括将一个或多个工作负载分配给一个或多个计算服务器，使得每个工作负载流向一个计算服务器，将工作负载访问的数据块分配给一个或多个存储服务器，以及确定工作负载如何访问数据。

2. 发明授权

US07043621B2 Sharding method and apparatus using directed graphs 失效
标题翻译：使用有向图的分片方法和装置
公开(公告)号：US07043621B2
公开(公告)日：2006-05-09
申请号：US10439977
申请日：2003-05-15
申请人： Arif Merchant , Mahesh Kallahalla , Ram Swaminathan
发明人： Arif Merchant , Mahesh Kallahalla , Ram Swaminathan
IPC分类号： G06F12/00
CPC分类号： G06F3/0608 , G06F3/061 , G06F3/0629 , G06F3/0665 , G06F3/0683 , Y10S707/99953 , Y10S707/99956
摘要： A method and apparatus is used to divide a storage volume into shards. The division is made using a directed graph having a vertex for each block in the storage volume and directed-edges between pairs of vertices representing a shard of blocks, associating a weight with each directed edge that represents the dissimilarity for the shard of blocks between the corresponding pair of vertices, selecting a maximum number of shards (K) for dividing the storage volume, identifying a minimum aggregate weight associated with a current vertex for a combination of no more than K shards, performing the identification of the minimum aggregate weight for vertices in the directed graph, and picking the smallest aggregated weight associated with the last vertex to determine a sharding that spans the storage volume and provides a minimal dissimilarity among no more than K shards of blocks.
摘要翻译：使用方法和装置将存储卷分成碎片。使用具有存储卷中的每个块的顶点的有向图以及表示块的块的顶点对之间的有向边，将权重与代表块之间的块的不同性的每个有向边相关联相应的顶点对，选择用于划分存储卷的最大碎片数（K），识别与不超过K个碎片的组合的当前顶点相关联的最小聚集权重，执行顶点的最小聚集权重的标识在有向图中，并选择与最后一个顶点相关联的最小聚合权重，以确定跨越存储卷的分片，并在不超过K个块的块中提供最小的不相似性。

3. 发明授权

US07697690B2 Windowed backward key rotation 有权
标题翻译：向后旋转键
公开(公告)号：US07697690B2
公开(公告)日：2010-04-13
申请号：US10624403
申请日：2003-07-21
申请人： Kevin E. Fu , Mahesh Kallahalla , Ram Swaminathan
发明人： Kevin E. Fu , Mahesh Kallahalla , Ram Swaminathan
IPC分类号： H04L9/00 , H04N7/167 , H04L9/32 , G06F21/00
CPC分类号： H04L9/083 , G06F19/00 , H04L9/0841 , H04L9/0891
摘要： Windowed backward key rotation. A user is provided information that allows determining a limited number of previous keys in a series of keys from a later key in the series. A key in the series is generated, based at least in part on the information provided to the user. The key in the series is provided to the user. The user determines at least one key in the limited number of previous keys in the series by applying the information to the key in the series.
摘要翻译：向后旋转键。提供用户被提供的信息，其允许从系列中的稍后的键确定一系列键中的有限数量的先前的键。至少部分地基于提供给用户的信息来生成系列中的关键。该系列的关键是提供给用户。用户通过将该信息应用于该系列中的密钥来确定该系列中有限数量的先前密钥中的至少一个密钥。

4. 发明授权

US07313694B2 Secure file access control via directory encryption 有权
标题翻译：通过目录加密保护文件访问控制
公开(公告)号：US07313694B2
公开(公告)日：2007-12-25
申请号：US09972385
申请日：2001-10-05
申请人： Erik Riedel , Mahesh Kallahalla , Ram Swaminathan
发明人： Erik Riedel , Mahesh Kallahalla , Ram Swaminathan
IPC分类号： H04L9/00
CPC分类号： G06F21/6218 , G06F2221/2107
摘要： A technique for secure file access control via directory encryption. Filenames of data files stored by a network server are encrypted so as to protect them in the event the server is untrustworthy, such as in a distributed computing environment. Two encryption keys are employed so as to provide different access capabilities. For example, clients of the server that are authorized to perform read-only operations on the files may be prevented from modifying the files, while client that are authorized to perform write operations, may modify the files or even delete the files. In a preferred embodiment, encrypted filenames replace plaintext files in a directory structure without otherwise changing the directory structure. Because the directory structure is otherwise unchanged, the server may still have adequate information to perform file management and space management functions.
摘要翻译：一种通过目录加密进行安全文件访问控制的技术。网络服务器存储的数据文件的文件名被加密，以便在服务器不可信的情况下（例如在分布式计算环境中）来保护它们。采用两个加密密钥来提供不同的访问能力。例如，被授权对文件执行只读操作的服务器的客户端可能被阻止修改文件，而被授权执行写入操作的客户端可以修改文件甚至删除文件。在优选实施例中，加密的文件名替换目录结构中的明文文件，而不改变目录结构。由于目录结构不变，服务器可能仍然具有足够的信息来执行文件管理和空间管理功能。

5. 发明授权

US07313238B2 Method and system for relating cryptographic keys 有权
标题翻译：用于密码密钥相关的方法和系统
公开(公告)号：US07313238B2
公开(公告)日：2007-12-25
申请号：US10355470
申请日：2003-01-31
申请人： Kevin E. Fu , Mahesh Kallahalla , Ram Swaminathan
发明人： Kevin E. Fu , Mahesh Kallahalla , Ram Swaminathan
IPC分类号： H04L9/00
CPC分类号： G06F21/6209 , H04L9/0838 , H04L9/0891
摘要： A method and system for relating cryptographic keys. A method includes providing to a user a private share related to a key. The method also includes generating a new key based on a previous version of the key and publishing a rotation catalyst. The new version of the key is determinable based on the key rotation catalyst and the private share. Further, former versions of the key are determinable based on the key rotation catalyst.
摘要翻译：一种密码密钥相关的方法和系统。一种方法包括向用户提供与密钥相关的私有共享。该方法还包括基于密钥的先前版本生成新密钥并发布旋转催化剂。新版本的关键是可以根据关键轮换催化剂和私人份额确定的。此外，钥匙的以前版本可以基于旋转催化剂来确定。

6. 发明授权

US07203317B2 System for enabling lazy-revocation through recursive key generation 有权
标题翻译：通过递归密钥生成实现延迟撤销的系统
公开(公告)号：US07203317B2
公开(公告)日：2007-04-10
申请号：US09984927
申请日：2001-10-31
申请人： Mahesh Kallahalla , Erik Riedel , Ram Swaminathan
发明人： Mahesh Kallahalla , Erik Riedel , Ram Swaminathan
IPC分类号： H04L9/00
CPC分类号： G06F21/6209 , H04L9/0891
摘要： A plurality of users may have access to a file. The file is encrypted with a key. Access for a user to the file is revoked. A new key is generated from the current key of the file in response to said revocation, and the file is encrypted with the new key.
摘要翻译：多个用户可以访问文件。该文件用密钥加密。用户对该文件的访问被撤销。响应于所述撤销，从文件的当前密钥生成新密钥，并且用新密钥加密该文件。

7. 发明申请

US20060075252A1 Method of managing computer system 有权
公开(公告)号：US20060075252A1
公开(公告)日：2006-04-06
申请号：US10959698
申请日：2004-10-06
申请人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan
发明人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan
IPC分类号： H04L9/00
CPC分类号： G06F21/6227 , G06F2221/2141 , H04L9/083
摘要： An embodiment of a method of managing a computer system begins with a step of placing a virtual machine monitor on a computer. The virtual machine monitor includes an interface for a module. The method continues with a step of forming a computing platform on the computer. The virtual machine monitor provides access control to the hardware resources for software executing on the computing platform. The method concludes with a step of adding a module to the virtual machine monitor through the interface. The module modifies the access control provided by the virtual machine monitor.

8. 发明申请

US20060075199A1 Method of providing storage to virtual computer cluster within shared computing environment 审中-公开
标题翻译：在共享计算环境中为虚拟计算机集群提供存储的方法
公开(公告)号：US20060075199A1
公开(公告)日：2006-04-06
申请号：US10959851
申请日：2004-10-06
申请人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan
发明人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan
IPC分类号： G06F12/00
CPC分类号： G06F3/0608 , G06F3/0622 , G06F3/0637 , G06F3/0665 , G06F3/067 , G06F21/57
摘要： An embodiment of a method of providing storage to a virtual computer cluster within a shared computing environment begins with a first step of combining storage resources within the shared computing environment into a virtual storage pool. The virtual storage pool comprises at least portions of storage devices in which at least one of the storage devices is not directly accessible by all computers which directly access any of the storage devices. The method continues with a second step of partitioning a virtual storage volume from the virtual storage pool. In a third step, the method assigns the virtual storage volume to the virtual computer cluster. The method concludes with a fourth step of making the virtual storage volume accessible to computing platforms of the virtual computer cluster using software. The software allows access to the virtual storage volume by the computing platforms while precluding access to remaining storage within the shared computing environment by the computing platforms.
摘要翻译：向共享计算环境中的虚拟计算机集群提供存储的方法的实施例从将共享计算环境内的存储资源组合成虚拟存储池的第一步骤开始。虚拟存储池至少包括存储设备的至少一部分，其中至少一个存储设备不能直接访问任何存储设备的所有计算机。该方法继续第二步，从虚拟存储池分区虚拟存储卷。在第三步中，该方法将虚拟存储卷分配给虚拟计算机集群。该方法的第四步是使用软件使虚拟计算机集群的计算平台可以访问虚拟存储卷。该软件允许计算平台访问虚拟存储卷，同时阻止计算平台访问共享计算环境中的剩余存储。

9. 发明授权

US08095928B2 Method of forming virtual computer cluster within shared computing environment 有权
标题翻译：在共享计算环境中形成虚拟计算机集群的方法
公开(公告)号：US08095928B2
公开(公告)日：2012-01-10
申请号：US10959536
申请日：2004-10-06
申请人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan , Frederic Gittler
发明人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan , Frederic Gittler
IPC分类号： G06F9/455 , G06F12/00 , G06F13/00 , G06F13/28
CPC分类号： G06F3/0665 , G06F3/0608 , G06F3/0644 , G06F3/0683 , G06F9/5077 , G06F21/6227
摘要： An embodiment of a method of forming a virtual computer cluster within a shared computing environment begins with a step of placing gatekeeper software on each of a plurality of particular host computers of the shared computing environment. The method continues with a step of assigning computing platforms located on the particular host computers to the virtual computer cluster. The gatekeeper software interposes between the computing platforms and hardware resources of the particular host computers. The method concludes with a step of isolating the virtual computer cluster from a remainder of the shared computing environment using the gatekeeper software. The gatekeeper software allows communication between the computing platforms while precluding communication with other computing platforms of the shared computing environment. The gatekeeper software controls input and output operations for the virtual computer cluster.
摘要翻译：在共享计算环境中形成虚拟计算机集群的方法的实施例开始于在所述共享计算环境的多个特定主机计算机中的每一个上放置关守软件的步骤。该方法继续将位于特定主机计算机上的计算平台分配给虚拟计算机集群。网守软件介入计算平台和特定主机的硬件资源之间。该方法的结论是使用网守软件将虚拟计算机集群与共享计算环境的其余部分隔离。网守软件允许计算平台之间的通信，同时排除与共享计算环境的其他计算平台的通信。网闸软件控制虚拟计算机集群的输入和输出操作。

10. 发明授权

US07620984B2 Method of managing computer system 有权
标题翻译：计算机系统管理方法
公开(公告)号：US07620984B2
公开(公告)日：2009-11-17
申请号：US10959698
申请日：2004-10-06
申请人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan
发明人： Mahesh Kallahalla , Mustafa Uysal , Ram Swaminathan
IPC分类号： G06F7/04 , G06F9/00 , G06F11/00 , G06F12/00 , G06F9/455 , G06F21/00 , G06F9/46 , G06F12/14 , G06F12/10
CPC分类号： G06F21/6227 , G06F2221/2141 , H04L9/083
摘要： An embodiment of a method of managing a computer system begins with a step of placing a virtual machine monitor on a computer. The virtual machine monitor includes an interface for a module. The method continues with a step of forming a computing platform on the computer. The virtual machine monitor provides access control to the hardware resources for software executing on the computing platform. The method concludes with a step of adding a module to the virtual machine monitor through the interface. The module modifies the access control provided by the virtual machine monitor.
摘要翻译：管理计算机系统的方法的一个实施例开始于将虚拟机监视器放置在计算机上的步骤。虚拟机监视器包括一个模块的接口。该方法继续在计算机上形成计算平台的步骤。虚拟机监视器为计算平台上执行的软件提供对硬件资源的访问控制。该方法的结束是通过界面将模块添加到虚拟机监视器。该模块修改虚拟机监视器提供的访问控制。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式