Virtualized data storage vaults on a dispersed data storage network
View Patent ↗A system, method, and apparatus for implementing a plurality of dispersed data storage networks using a set of slice servers are disclosed. A plurality of information records are maintained, with each information record corresponding to a dispersed data storage network. The information record maintains what slice servers are used to implement the dispersed data storage network, as well as other information needed to administer a DDSN, such as the information dispersal algorithm used, how data is stored, and whether data is compressed or encrypted.
1. A distributed computer system comprising:
a plurality of slice servers each including a network port coupled to a network; and
a grid access computer including a network port coupled to the network, wherein the grid computer functioning to:
receive a request to access a virtual digital data storage vault, wherein a set of the plurality of slice servers support the virtual digital data storage vault;
retrieve a vault data structure corresponding to the virtual digital data storage vault;
authenticate the request in accordance with information of the vault data structure;
when the request is authenticated, send the request to the set of the plurality of slice servers;
a slice server of the set of plurality of slice servers functioning to:
receive the request to access the virtual digital data storage vault;
determine whether the slice server supports the virtual digital data storage vault; when the slice server supports the virtual digital data storage vault, determine whether type of request is allowed;
when the type of request is allowed, execute the request to generate a response; and
send the response via the network port.
2. The distributed computer system of claim 1 , wherein the vault data structure comprises:
a vault identifier;
identity of the set of the plurality of slice servers that is coupled to the network;
an access control list that identifies at least one user account having access to the virtual digital data storage vault; and
an information dispersal algorithm for use on said virtual data storage vault and a set of dispersal parameters.
3. The distributed computer system of claim 1 , wherein the vault data structure comprises: a maximum amount of storage for the virtual digital data storage vault.
4. The distributed computer system of claim 1 , wherein the vault data structure comprises: an indication of an encryption algorithm is used to encrypt data segments stored on the virtual digital data storage vault.
5. The distributed computer system of claim 1 , wherein the vault data structure comprises: an indication of a compression algorithm is used to compress data segments stored on the virtual digital data storage vault.
6. The distributed computer system of claim 1 , further comprises:
the grid computer functioning to:
receive a second request to access a second virtual digital data storage vault, wherein a second set of the plurality of slice servers support the second virtual digital data storage vault;
retrieve a second vault data structure corresponding to the second virtual digital data storage vault;
authenticate the second request in accordance with information of the second vault data structure;
when the second request is authenticated, send the second request to the second set of the plurality of slice servers;
a second slice server of the second set of plurality of slice servers functioning to:
receive the second request to access the second virtual digital data storage vault;
determine whether the second slice server supports the second virtual digital data storage vault;
when the slice server supports the second virtual digital data storage vault, determine whether type of request is allowed;
when the type of request is allowed, execute the second request to generate a second response; and
send the second response via the network port.
7. The distributed computer system of claim 1 , wherein the grid access computer further functions to: access the vault data structure by retrieving the vault data structure from at least one of the plurality of slice servers.
8. A computer comprises:
a network port operable to provide a connection to a network;
a central processing unit operably coupled to the network port; and
memory operably coupled to the central processing unit, wherein the memory stores, as directed by the central processing unit, a plurality of vault data structures, wherein a first vault data structure of the plurality of vault data structures includes:
a first vault identifier;
identity of a first set of slice servers of a plurality of slice servers that is coupled to the network, wherein a first portion of memory from each slice server of the first set of slice services constitutes a first virtual digital data storage vault; and
a first access control list that identifies at least one user account having access to the first virtual digital data storage vault; and
wherein a second vault data structure of the plurality of vault data structures includes:
a second vault identifier;
identity of a second set of slice servers of a plurality of slice servers, wherein a second portion of memory from each slice server of the second set of slice services constitutes a second virtual digital data storage vault; and
a second access control list that identifies at least one user account having access to the second virtual digital data storage vault.
9. The computer of claim 8 further comprises: the first vault data structure further including identity of a first information dispersal algorithm and first information dispersal parameters; and the second vault data structure further including a second information identity of a second information dispersal algorithm and second information dispersal parameters.
10. The computer of claim 8 further comprises: the first vault data structure further including a first indication of use of a first data compression algorithm and identity of the first data compression algorithm; and the second vault data structure further including a second indication of use of a second data compression algorithm and identity of the second data compression algorithm.
11. The computer of claim 8 further comprises: the first vault data structure further including a first indication of use of a first integrity check algorithm and identity of the first integrity check algorithm; and the second vault data structure further including a second indication of use of a second integrity check algorithm and identity of the second integrity check algorithm.
12. The computer of claim 8 further comprises: the first vault data structure further including a first indication of use of a first encryption algorithm and identity of the first encryption algorithm; and
the second vault data structure further including a second indication of use of a second encryption algorithm and identity of the second encryption algorithm.
13. The computer of claim 8 further comprises: the first access control further including, for each of the at least one user account having access to the first virtual digital data storage vault, permissions regarding the access; and the second access control further including, for each of the at least one user account having access to the second virtual digital data storage vault, permissions regarding the access.
14. The computer of claim 8 further comprises: a user account data structure that identifies the at least one user account.