Granted Patent B2

US 11,595,386 · App. 17/159,715 · Granted Feb 28, 2023

Inventors: Ying Yu (Chengdu, CN); Jing Li (Chengdu, CN); Ming Yue (Chengdu, CN); Jia Huang (Chengdu, CN); Nan Wang (Chengdu, CN)

Assignee: EMC IP Holding Company LLC

H04L63/0876H04L63/102H04L63/145H04L63/20H04L67/1097

Abstract

Claims (87)

1. A method for storage management, comprising:

receiving, at a storage server, an access request for target data from a client, wherein the access request occurs in a session between the storage server and the client;

determining, based on attribute information of the client, security information of the session, wherein the security information indicates whether the session is subjected to antivirus protection; and

executing, based on the security information, an access operation specified by the access request on the target data;

determining a first user ID of the user initiating the access request from the attribute information; and

determining that the first user ID does not match a second user ID of a trusted user stored in the storage server;

sending a request for performing virus detection on the target data to a virus detector in response to determining that the first user ID does not match the second user ID; and

wherein executing the access operation is in response to receiving, from the virus detector, a response indicating that the target data is not threatened by a virus.

2. The method according to claim 1 , further comprising:

determining that the security information has not been predetermined; and

acquiring the attribute information in response to determining that the security information has not been predetermined.

3. The method according to claim 1 , wherein the attribute information comprises at least one of:

an Internet protocol (IP) address of the client,

a multi-access control (MAC) address of the client,

an identifier of the client, and

a user identifier (ID) of a user initiating the access request.

4. The method according to claim 1 , wherein the determining the security information comprises:

sending the attribute information to a security manager associated with the client;

receiving, from the security manager, information of antivirus software installed on the client corresponding to the attribute information; and

determining, based on the information of the antivirus software, the security information.

5. The method according to claim 4 , wherein the information of the antivirus software comprises at least one of:

an identifier of the antivirus software,

update time of the antivirus software, and

a function enabled in the antivirus software.

6. The method according to claim 5 , wherein the determining the security information comprises determining at least one of:

whether the identifier of the antivirus software matches an identifier of specified antivirus software,

whether the update time exceeds a threshold time, and

whether the enabled function is a specified function.

7. The method according to claim 1 , further comprising:

determining credibility of a second user in response to security information of a second session indicating that the second session is subjected to the antivirus protection; and

executing, based on the credibility, a second access operation on the target data.

8. The method according to claim 7 , wherein the determining the credibility comprises:

determining a first user ID of the second user initiating a second access request from the attribute information; and

determining that the first user ID matches a second user ID of a trusted user stored in the storage server; and

wherein executing the second access operation is in response to determining that the first user ID matches the second user ID.

9. An electronic device, comprising:

at least one processing unit; and

at least one memory, wherein the at least one memory is coupled to the at least one processing unit and stores instructions configured to be executed by the at least one processing unit, and the instructions, when executed by the at least one processing unit, cause the device to perform actions comprising:

receiving, at a storage server, an access request for target data from a client, wherein the access request occurs in a session between the storage server and the client;

determining, based on attribute information of the client, security information of the session, wherein the security information indicates whether the session is subjected to antivirus protection; and

executing, based on the security information, an access operation specified by the access request on the target data;

determining a first user ID of the user initiating the access request from the attribute information; and

determining that the first user ID does not match a second user ID of a trusted user stored in the storage server;

sending a request for performing virus detection on the target data to a virus detector in response to determining that the first user ID does not match the second user ID; and

wherein executing the access operation is in response to receiving, from the virus detector, a response indicating that the target data is not threatened by a virus.

10. The device according to claim 9 , wherein the actions further comprise:

determining that the security information has not been predetermined; and

acquiring the attribute information in response to determining that the security information has not been predetermined.

11. The device according to claim 9 , wherein the attribute information comprises at least one of:

an IP address of the client,

an MAC address of the client,

an identifier of the client, and

a user ID of a user initiating the access request.

12. The device according to claim 9 , wherein the determining the security information comprises:

sending the attribute information to a security manager associated with the client;

receiving, from the security manager, information of antivirus software installed on the client corresponding to the attribute information; and

determining, based on the information of the antivirus software, the security information.

13. The device according to claim 12 , wherein the information of the antivirus software comprises at least one of:

an identifier of the antivirus software,

update time of the antivirus software, and

a function enabled in the antivirus software.

14. The device according to claim 13 , wherein the determining the security information comprises determining at least one of:

whether the identifier of the antivirus software matches an identifier of specified antivirus software,

whether the update time exceeds a threshold time, and

whether the enabled function is a specified function.

15. The device according to claim 9 , further comprising:

determining credibility of a second user in response to security information of a second session indicating that the second session is subjected to the antivirus protection; and

executing, based on the credibility, a second access operation on the target data.

16. The device according to claim 15 , wherein the determining the credibility comprises:

determining a first user ID of the second user initiating a second access request from the attribute information; and

determining that the first user ID matches a second user ID of a trusted user stored in the storage server; and

wherein executing the second access operation is in response to determining that the first user ID matches the second user ID.

17. A computer program product having a non-transitory computer readable medium which stores a set of instructions to perform storage management; the set of instructions, when carried out by computerized circuitry, causing the computerized circuitry to perform a method of:

receiving, at a storage server, an access request for target data from a client, wherein the access request occurs in a session between the storage server and the client;

determining, based on attribute information of the client, security information of the session, wherein the security information indicates whether the session is subjected to antivirus protection; and

executing, based on the security information, an access operation specified by the access request on the target data;

determining a first user ID of the user initiating the access request from the attribute information; and

determining that the first user ID does not match a second user ID of a trusted user stored in the storage server;

sending a request for performing virus detection on the target data to a virus detector in response to determining that the first user ID does not match the second user ID; and

wherein executing the access operation is in response to receiving, from the virus detector, a response indicating that the target data is not threatened by a virus.

18. The computer program product of claim 17 , wherein the method further comprises:

processing other access requests from other clients while concurrently executing the access operation to provide storage management on behalf of multiple clients simultaneously.

19. The computer program product of claim 17 , wherein determining the security information of the session includes:

receiving an indication that a parameter corresponding to a client-side virus detection system is less than a predetermined threshold; and

wherein executing the access operation includes:

submitting a request for a server-side virus detection system to perform virus detection on the target data; and

in response to receiving an indication that the target data is safe, writing the target data to the storage server.

Assignments (9)

Priority Claims (1)

Continuity (1)

Cited By (1)

US 12,519,819