Temporary suspension of vault access

• US 10,157,011 B2
• Filed: 11/14/2016
• Issued: 12/18/2018
• Est. Priority Date: 06/25/2012
• Status: Active Grant

• Current Assignee: Pure Storage, Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Leggette, Wesley B., Resch, Jason K., Vas, Sebastien
• Primary Examiner(s): Ko, Chae M
• Application Number:
  US15/350,904
• Publication Number:
  US 20170060466A1
• Time in Patent Office: 764 Days
• Field of Search: 714 622
• CPC Class Codes: G06F 11/008 Reliability or availability analysis
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 11/1092 Rebuilding, e.g. when physically replacing a failing disk
• CPC Class Codes: G06F 2211/109 Sector level checksum or ECC, i.e. sector or stripe level checksum or ECC in addition to the RAID parity calculation
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/064 Management of blocks
• CPC Class Codes: G06F 3/0659 Command handling arrangements, e.g. command buffers, queues, command scheduling
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H03M 13/1515 Reed-Solomon codes
• CPC Class Codes: H03M 13/3761 using code combining, i.e. using combining of codeword portions which may have been transmitted separately, e.g. Digital Fountain codes, Raptor codes or Luby Transform [LT] codes

Abstract

A method includes issuing, by a managing unit of a dispersed storage network (DSN), a vault access restriction to a set of storage units of the DSN regarding a logical storage vault supported by the set of storage units. While the vault access restriction is active, the method continues by receiving, by a storage unit of the set of storage units, a data access request to the vault. The method continues by determining, by the storage unit, whether the data access request is regarding a rebuilding operation. When the data access request is regarding a rebuilding operation, the method continues by processing, by the storage unit, the data access request. When data access request is not regarding a rebuilding operation, the method continues by denying, by the storage unit, the data access request.

Claims

1. A method comprises

issuing, by a managing unit of a dispersed storage network (DSN), a vault access restriction to a set of storage units of the DSN regarding a logical storage vault supported by the set of storage units;

while the vault access restriction is active;

receiving, by a storage unit of the set of storage units, a data access request to the vault;

determining, by the storage unit, whether the data access request is regarding a rebuilding operation;

when the data access request is regarding a rebuilding operation, processing, by the storage unit, the data access request; and

when data access request is not regarding a rebuilding operation, denying, by the storage unit, the data access request.

2. The method of claim 1 further comprises:

generating, by the managing unit, the vault access restriction based on one or more of;

an unpaid vault access fee, an unauthorized user, and allowed types of data accesses.

3. The method of claim 1 further comprises:

revoking, by the managing unit, the vault access restriction to render the vault access restriction inactive.

4. The method of claim 1 further comprises:

issuing, by the managing unit, the vault access restriction regarding a particular user device of the vault;

while the vault access restriction is active;

determining, by the storage unit, whether the data access request to the vault is from the particular user device; and

when the data access request is from the particular user device, denying, by the storage unit, the data access request.

5. The method of claim 1, wherein the processing the data access request comprises:

receiving a data read request from a rebuilding module regarding an encoded data slice stored within the vault; and

sending the encoded data slice to the rebuilding module.

6. The method of claim 1 further comprises:

determining, by the storage unit, that the data access request is regarding a rebuilding operation by determining an identity of a device issuing the data access request as a rebuilding module.

7. A computer readable memory comprises:

a first memory section for storing operational instructions that, when executing by a managing unit of a dispersed storage network (DSN), causes the managing unit to;

issue a vault access restriction to a set of storage units of the DSN regarding a logical storage vault supported by the set of storage units;

a second memory section for storing operational instructions that, when executing by a storage unit of the set of storage units, causes the storage unit to;

while the vault access restriction is active;

receive a data access request to the vault;

determine whether the data access request is regarding a rebuilding operation;

when the data access request is regarding a rebuilding operation, process the data access request; and

when data access request is not regarding a rebuilding operation, deny the data access request.

8. The computer readable memory of claim 7, wherein the first memory section further stores operational instructions that, when executing by the managing unit, causes the managing unit to:

generate the vault access restriction based on one or more of;

an unpaid vault access fee, an unauthorized user, and allowed types of data accesses.

9. The computer readable memory of claim 7, wherein the first memory section stores further operational instructions that, when executing by the managing unit, causes the managing unit to:

revoke the vault access restriction to render the vault access restriction inactive.

10. The computer readable memory of claim 7 further comprises:

the first memory section stores further operational instructions that, when executing by the managing unit, causes the managing unit to;

issue the vault access restriction regarding a particular user device of the vault;

while the vault access restriction is active;

the second memory section for storing operational instructions that, when executing by a storage unit of the set of storage units, causes the storage unit to

determine whether the data access request to the vault is from the particular user device; and

when the data access request is from the particular user device, deny the data access request.

11. The computer readable memory of claim 7, wherein the second memory section further stores operational instructions that, when executing by the storage unit, causes the storage unit to process the data access request by:

receiving a data read request from a rebuilding module regarding an encoded data slice stored within the vault; and

sending the encoded data slice to the rebuilding module.

12. The computer readable memory of claim 7, wherein the second memory section further stores operational instructions that, when executing by the storage unit, causes the storage unit to:

determine that the data access request is regarding a rebuilding operation by determining an identity of a device issuing the data access request as a rebuilding module.