IP Library Granted Patent US 10,713,374
Granted Patent B2
US 10,713,374 · App. 15/845,137 · Granted Jul 14, 2020

Resolving detected access anomalies in a dispersed storage network

Inventors: Teague S. Algie (Chicago, IL); Jason K. Resch (Chicago, IL)
Assignee: PURE STORAGE, INC.
G06F21/6218G06F3/067G06F21/602G06F21/604H04L9/085H04L9/3226H04L9/3271H04L63/08H04L63/1408H04L63/1425H04L63/10H04L67/1097H04L2209/34
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,713,374
App. No.
15/845,137
Granted
Jul 14, 2020
Kind
B2
Abstract

A method for execution by a storage unit of a dispersed storage network includes receiving an access request from a requestor. An access anomaly of the access request is detected, and the access request is queued for processing in response. An anomaly detection indicator is issued to a plurality of other storage units. A secondary authentication process is initiated with the requestor, and a secondary authentication response from the requestor. The access request is processed when the secondary authentication response is favorable.

Claims (65)

1. A method for execution by a storage unit that includes a processor, the method comprises:

receiving an access request from a requestor;

detecting an access anomaly of the access request;

queueing the access request for processing in response to detecting the access anomaly;

issuing a first anomaly detection indicator to a plurality of other storage units;

initiating a secondary authentication process with the requestor;

receiving a secondary authentication response from the requestor; and

processing the access request when the secondary authentication response is favorable;

wherein queuing the access request includes:

storing the access request in a local memory; and

associating the access request with at least one other queued access request, wherein the at least one other queued access request includes a request for a same encoded data slice;

wherein processing the access request includes:

extracting the at least one other queued access request associated with the access request; and

processing the access request and the at least one other queued access request in a sequence in accordance with a request type of the access request; and

wherein the access request and the at least one other queued access request include a write request, a commit request, and a finalize request of a three-phase storage process.

2. The method of claim 1 , wherein the access request includes a request to access a data segment, and wherein the data segment was dispersed storage error encoded to produce a set of encoded data slices for storage in a set of storage units.

3. The method of claim 1 , wherein the access request is received via a dispersed storage and task (DST) processing unit that received the access request from the requestor.

4. The method of claim 1 , wherein detecting the access anomaly includes detecting an unfavorable access pattern.

5. The method of claim 1 , wherein detecting the access anomaly includes receiving a second anomaly detection indicator from another storage unit of the plurality of other storage units.

6. The method of claim 1 , wherein issuing the first anomaly detection indicator to the plurality of other storage units includes generating the first anomaly detection indicator to include the access request, an anomaly type, and an identifier of the requestor.

7. The method of claim 1 , wherein initiating the secondary authentication process includes generating a secondary authentication request and sending the secondary authentication request to a dispersed storage and task (DST) processing unit for transmission to the requestor.

8. The method of claim 1 , further comprising processing the secondary authentication response to determine validity by utilizing a key pair to authenticate the secondary authentication response.

9. The method of claim 1 , wherein another storage unit of the plurality of other storage units receives another access request associated with the requestor and queues the another access request in response to receiving the first anomaly detection indicator, further comprising:

transmitting an authentication success notification to the plurality of other storage units when the secondary authentication response is favorable;

wherein the another storage unit processes the another access request in response to receiving the authentication success notification.

10. A processing system of a storage unit comprises:

at least one processor;

a memory that stores operational instructions that, when executed by the at least one processor, cause the processing system to:

receive an access request from a requestor;

detect an access anomaly of the access request;

queue the access request for processing in response to detecting the access anomaly;

issue a first anomaly detection indicator to a plurality of other storage units;

initiate a secondary authentication process with the requestor;

receive a secondary authentication response from the requestor; and

process the access request when the secondary authentication response is favorable;

wherein queuing the access request includes:

storing the access request in a local memory; and

associating the access request with at least one other queued access request, wherein the at least one other queued access request includes a request for a same encoded data slice;

wherein processing the access request includes:

extracting the at least one other queued access request associated with the access request; and

processing the access request and the at least one other queued access request in a sequence in accordance with a request type of the access request; and

wherein the access request and the at least one other queued access request include a write request, a commit request, and a finalize request of a three-phase storage process.

11. The processing system of claim 10 , wherein the access request includes a request to access a data segment, and wherein the data segment was dispersed storage error encoded to produce a set of encoded data slices for storage in a set of storage units.

12. The processing system of claim 10 , wherein detecting the access anomaly includes receiving a second anomaly detection indicator from another storage unit of the plurality of other storage units.

13. The processing system of claim 10 , wherein issuing the first anomaly detection indicator to the plurality of other storage units includes generating the first anomaly detection indicator to include the access request, an anomaly type, and an identifier of the requestor.

14. The processing system of claim 10 , wherein the operational instructions, when executed by the at least one processor, further cause the processing system to process the secondary authentication response to determine validity by utilizing a key pair to authenticate the secondary authentication response.

15. The processing system of claim 10 , wherein another storage unit of the plurality of other storage units receives another access request associated with the requestor and queues the another access request in response to receiving the first anomaly detection indicator, wherein the operational instructions, when executed by the at least one processor, further cause the processing system to:

transmit an authentication success notification to the plurality of other storage units when the secondary authentication response is favorable;

wherein the another storage unit processes the another access request in response to receiving the authentication success notification.

16. A non-transitory computer readable storage medium comprises:

at least one memory section that stores operational instructions that, when executed by a processing system of a dispersed storage network (DSN) that includes a processor and a memory, causes the processing system to:

receive an access request from a requestor;

detect an access anomaly of the access request;

queue the access request for processing in response to detecting the access anomaly;

issue a first anomaly detection indicator to a plurality of other storage units;

initiate a secondary authentication process with the requestor;

receive a secondary authentication response from the requestor; and

process the access request when the secondary authentication response is favorable;

wherein queuing the access request includes:

storing the access request in a local memory; and

associating the access request with at least one other queued access request, wherein the at least one other queued access request includes a request for a same encoded data slice;

wherein processing the access request includes:

extracting the at least one other queued access request associated with the access request; and

processing the access request and the at least one other queued access request in a sequence in accordance with a request type of the access request; and

wherein the access request and the at least one other queued access request include a write request, a commit request, and a finalize request of a three-phase storage process.

Assignments (5)
TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENT RIGHTS Recorded Jun 11, 2025
From: BARCLAYS BANK PLC, AS ADMINISTRATIVE AGENT
To: PURE STORAGE, INC.
Reel/Frame 071558/0523 →
SECURITY INTEREST Recorded Aug 26, 2020
From: PURE STORAGE, INC.
To: BARCLAYS BANK PLC AS ADMINISTRATIVE AGENT
Reel/Frame 053867/0581 →
CORRECTIVE ASSIGNMENT TO CORRECT THE DELETE 15/174/279 AND 15/174/596 PROPERTY NUMBERS PREVIOUSLY RECORDED AT REEL: 49555 FRAME: 530. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Jan 7, 2020
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: PURE STORAGE, INC.
Reel/Frame 051495/0831 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 21, 2019
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: PURE STORAGE, INC.
Reel/Frame 049555/0530 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 20, 2017
From: ALGIE, TEAGUE S.; RESCH, JASON K.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 044443/0433 →
Cited By (1)
US 12,204,798