IP Library Granted Patent US 11,500,788
Granted Patent B2
US 11,500,788 · App. 17/039,580 · Granted Nov 15, 2022

Logical address based authorization of operations with respect to a storage system

Inventors: Ethan L. Miller (Santa Cruz, CA); Ronald Karr (Palo Alto, CA)
Assignee: Pure Storage, Inc.
G06F12/1441G06F12/0246G06F12/1408G06F21/31G06F21/64
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,500,788
App. No.
17/039,580
Granted
Nov 15, 2022
Kind
B2
Abstract

An illustrative method includes a data protection system detecting a request provided by a source to perform an operation with respect to a storage system, the request including a logical address that comprises a logical element representative of a storage location within the storage system, determining whether the logical address further comprises an authorization element indicating that the source is authorized to initiate operations with respect to the storage system, and performing, based on the determining whether the logical address includes the authorization element, an action with respect to the operation.

Claims (48)

1. A method comprising:

detecting, by a data protection system, a request provided by a source to perform an operation with respect to a storage system, the request including a logical address that comprises a logical element representative of a storage location within the storage system;

determining, by the data protection system, whether the logical address further comprises an authorization element indicating that the source is authorized to initiate operations with respect to the storage system, the determining comprising analyzing the logical address for a sequence of bits representative of the authorization element and generated in accordance with an authorization scheme used by the data protection system; and

performing, by the data protection system based on the determining whether the logical address includes the sequence of bits representative of the authorization element, an action with respect to the operation;

wherein

the determining whether the logical address includes the authorization element comprises determining that the logical address does not include the authorization element, and

the performing of the action with respect to the operation comprises preventing the operation from being performed.

2. The method of claim 1 , further comprising:

detecting, by the data protection system, an additional request to perform an additional operation with respect to the storage system, the additional request including an additional logical address that comprises an additional logical element representative of a storage location within the storage system;

determining that the additional logical address includes the authorization element; and

allowing, based on the determining that the additional logical address includes the authorization element, the additional operation to be performed.

3. The method of claim 2 , wherein the allowing the additional operation to be performed comprises performing the additional operation.

4. The method of claim 2 , wherein the allowing the additional operation to be performed comprises directing the storage system to perform the additional operation.

5. The method of claim 1 , wherein the request comprises one or more of a request to write data to the storage location represented by the logical address, read data from the storage location represented by the logical element, delete data stored at the storage location represented by the logical element, or modify data stored at the storage location represented by the logical element.

6. The method of claim 1 , further comprising providing, by the data protection system, data specifying the authorization element to the source prior to the source providing the request to perform the operation.

7. The method of claim 6 , further comprising:

receiving, by the data protection system, an authorization request from the source; and

authenticating, by the data protection system, the source based on the authorization request;

wherein the providing of the data specifying the authorization element to the source is performed in response to the authenticating.

8. The method of claim 1 , further comprising:

maintaining, by the data protection system, data representative of the authorization element;

wherein the determining whether the logical address includes the authorization element comprises comparing data included in the logical address to the data representative of the authorization element.

9. The method of claim 1 , wherein the sequence of bits is at a beginning of the logical address.

10. The method of claim 1 , wherein the sequence of bits includes at least eight bits.

11. The method of claim 1 , wherein the logical element comprises a block address.

12. The method of claim 1 , wherein the authorization element comprises one or more of a security token, a digital signature of data associated with the operation, or a digital signature of the logical element.

13. A system comprising:

a memory storing instructions;

a processor communicatively coupled to the memory and configured to execute the instructions to:

detect a request provided by a source to perform an operation with respect to a storage system, the request including a logical address that comprises a logical element representative of a storage location within the storage system;

determine whether the logical address further comprises an authorization element indicating that the source is authorized to initiate operations with respect to the storage system, the determining comprising analyzing the logical address for a sequence of bits representative of the authorization element and generated in accordance with an authorization scheme; and

perform, based on the determining whether the logical address includes the sequence of bits representative of the authorization element, an action with respect to the operation;

wherein

the determining whether the logical address includes the authorization element comprises determining that the logical address does not include the authorization element, and

the performing of the action with respect to the operation comprises preventing the operation from being performed.

14. The system of claim 13 , further comprising:

detecting, by the data protection system, an additional request to perform an additional operation with respect to the storage system, the additional request including an additional logical address that comprises an additional logical element representative of a storage location within the storage system;

determining that the additional logical address includes the authorization element; and

allowing, based on the determining that the additional logical address includes the authorization element, the additional operation to be performed.

15. The system of claim 13 , wherein the request comprises one or more of a request to write data to the storage location represented by the logical address, read data from the storage location represented by the logical element, delete data stored at the storage location represented by the logical element, or modify data stored at the storage location represented by the logical element.

16. The system of claim 13 , wherein the processor is further configured to execute the instructions to provide data specifying the authorization element to the source prior to the source providing the request to perform the operation.

17. A non-transitory computer-readable medium storing instructions that, when executed, direct a processor of a computing device to:

detect a request provided by a source to perform an operation with respect to a storage system, the request including a logical address that comprises a logical element representative of a storage location within the storage system;

determine whether the logical address further comprises an authorization element indicating that the source is authorized to initiate operations with respect to the storage system, the determining comprising analyzing the logical address for a sequence of bits representative of the authorization element and generated in accordance with an authorization scheme; and

perform, based on the determining whether the logical address includes the sequence of bits representative of the authorization element, an action with respect to the operation;

wherein

the determining whether the logical address includes the authorization element comprises determining that the logical address does not include the authorization element, and

the performing of the action with respect to the operation comprises preventing the operation from being performed.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 30, 2020
From: MILLER, ETHAN L.; KARR, RONALD
To: PURE STORAGE, INC., A DELAWARE CORPORATION
Reel/Frame 053939/0224 →
Continuity (4)
Continuation In Part 16711060 · Dec 11, 2019
Provisional Application 62939518 · Nov 22, 2019
Provisional Application 62985229 · Mar 4, 2020
Related Publication 20210216478A1 · Jul 15, 2021
Cited By (5)
US 12,306,941 US 12,367,282 US 12,443,714 US 12,556,388 US 12,561,193