Placement of dispersed storage data based on requestor properties

• US 10,387,079 B2
• Filed: 09/09/2016
• Issued: 08/20/2019
• Est. Priority Date: 09/09/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ober, Brian F.
• Primary Examiner(s): Decady, Albert
• Assistant Examiner(s): Ahmed, Enam
• Application Number:
  US15/260,898
• Publication Number:
  US 20180074753A1
• Time in Patent Office: 1,075 Days
• Field of Search: 714764
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 3/0605 by facilitating the interaction with a user or administrator
• CPC Class Codes: G06F 3/0631 by allocating resources to storage systems
• CPC Class Codes: G06F 3/0635 by changing the path, e.g. traffic rerouting, path reconfiguration
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]

Abstract

Methods for use in identifying optimal storage units for storage of data in a dispersed storage network (DSN) having geographically distributed storage units. In operation, a data object to be stored is received by a computing device functioning. When selecting from multiple sets of storage units servicing multiple geographic regions for placement of the data, the computing device biases its decision based on additional properties of the storage request or of the requestor. In one example, the primary or “home” location of the requestor is determined from metadata received from an authentication authority. Alternatively, the home location information may be derived from a store data request received from the requestor. Following a determination that the originating location of the storage request differs from the home location, the computing device selects storage units in relatively closer proximity to the home location as compared to a current location of the requestor.

Claims

1. A method for execution by one or more processing modules of one or more computing devices of a dispersed storage network (DSN) having storage units distributed in a plurality of geographic regions, the method comprises:

receiving a store data request to store a data object in the storage units of the DSN, wherein the store data request includes requesting entity credentials associated with a user profile of the DSN;

obtaining metadata relating to the requesting entity credentials, the metadata indicating a primary geographic region for the user profile;

analyzing the store data request to determine an originating geographic region for the store data request, the originating geographic region associated with a first plurality of storage units;

determining that the originating geographic region differs from the primary geographic region;

in response to determining that the originating geographic region differs from the primary geographic region, identifying, by the one or more processing modules, a second plurality of storage units associated with the primary geographic region, the second plurality of storage units differing from the first plurality of storage units; and

facilitating, by the one or more processing modules, dispersed storage of at least a portion of the data object in the second plurality of storage units.

2. The method of claim 1 further comprises:

selecting an authentication authority based on the requesting entity credentials;

providing at least a portion of the requesting entity credentials to the authentication authority; and

receiving responsive information from the authentication authority indicating that the requesting entity credentials are authenticated.

3. The method of claim 2, wherein the authentication authority includes at least one of Active Directory®

Domain Services, a Lightweight Directory Access Protocol server, or a KeyStone identity service.

4. The method of claim 1, wherein the first plurality of storage units is in closer geographic proximity to the originating geographic region than the primary geographic region.

5. The method of claim 1, wherein facilitating dispersed storage of at least a portion of the data object in the second plurality of storage units includes:

dispersed storage error encoding the data object, in accordance with dispersal parameters associated with the user profile, to produce a plurality of sets of encoded data slices, wherein the data object is segmented into a plurality of data segments and wherein each data segment is dispersed storage error encoded into a respective set of encoded data slices;

identifying one or more storage units of the second plurality of storage units; and

initiating storage of the plurality of sets of encoded data slices in the one or more identified storage units.

6. The method of claim 1 further comprises:

facilitating, by the one or more processing modules, replicated storage of at least a portion of the data object in the first plurality of storage units.

7. The method of claim 1 further comprises:

identifying a third plurality of storage units associated with a third geographic region, the third plurality of storage units in closer proximity to the primary geographic region than the first plurality of storage units; and

facilitating, by the one or more processing modules, replicated storage of at least a portion of the data object in the third plurality of storage units.

8. The method of claim 1, wherein analyzing the store data request to determine an originating geographic region includes at least one of determining a location of a user device from which the store data request originated, determining the location of a user of the user device from which the store data request originated, or determining a location of a computing device receiving the store data request.

9. A method for execution by one or more processing modules of one or more computing devices of a dispersed storage network (DSN) having storage units distributed in a plurality of geographic regions, the method comprises:

receiving a store data request to store a data object in the storage units of the DSN, wherein the store data request includes identification information indicating a primary geographic region associated with a requestor of the store data request;

analyzing the store data request to determine an originating geographic region for the store data request, the originating geographic region serviced by a first plurality of storage units;

determining that the originating geographic region differs from the primary geographic region;

in response to determining that the originating geographic region differs from the primary geographic region, identifying, by the one or more processing modules, a second plurality of storage units servicing the primary geographic region, the second plurality of storage units differing from the first plurality of storage units; and

facilitating, by the one or more processing modules, dispersed storage of at least a portion of the data object in the second plurality of storage units.

10. The method of claim 9 further comprises:

selecting an authentication authority for authentication of the requestor of the store data request;

providing at least a portion of the identification information to the authentication authority; and

receiving responsive information from the authentication authority indicating that the store data request is allowed by the DSN.

11. The method of claim 10, wherein the identification information includes at least one of:

user profile information;

location coordinates;

country identification information;

continent identification information;

address information;

or

a ZIP code.

12. The method of claim 10, wherein the authentication authority includes at least one of Active Directory®

Domain Services, a Lightweight Directory Access Protocol server, or a KeyStone identity service.

13. The method of claim 9, wherein the first plurality of storage units is in closer geographic proximity to the originating geographic region than the primary geographic region.

14. The method of claim 9, wherein facilitating dispersed storage of at least a portion of the data object in the second plurality of storage units includes:

dispersed storage error encoding the data object to produce a plurality of sets of encoded data slices, wherein the data object is segmented into a plurality of data segments and wherein each data segment is dispersed storage error encoded into a respective set of encoded data slices;

identifying one or more storage units of the second plurality of storage units; and

initiating storage of the plurality of sets of encoded data slices in the one or more identified storage units.

15. The method of claim 9 further comprises:

facilitating, by the one or more processing modules, replicated storage of at least a portion of the data object in the first plurality of storage units.

16. A computing device for use in a dispersed storage network (DSN) having storage units distributed in a plurality of geographic regions, the computing device comprises:

a network interface;

a local memory; and

a processing module operably coupled to the network interface and the local memory, wherein the processing module operates to;

receive, via the network interface, a store data request to store a data object in the storage units of the DSN, wherein the store data request includes requesting entity credentials associated with a user profile known to the DSN;

obtain metadata relating to the requesting entity credentials, the metadata indicating a primary geographic region for the user profile;

analyze the store data request to determine an originating geographic region for the store data request, the originating geographic region associated with a first plurality of storage units;

determine that the originating geographic region differs from the primary geographic region;

in response to determining that the originating geographic region differs from the primary geographic region, identify a second plurality of storage units associated with the primary geographic region, the second plurality of storage units differing from the first plurality of storage units; and

facilitate dispersed storage of at least a portion of the data object in the second plurality of storage units.

17. The computing device of claim 16, wherein the processing module further operates to:

select an authentication authority based on the requesting entity credentials;

provide, via the network interface, at least a portion of the requesting entity credentials to the authentication authority for use in authenticating a requesting entity; and

receive, via the network interface, responsive information from the authentication authority.

18. The computing device of claim 17, wherein the authentication authority includes at least one of Active Directory®

Domain Services, a Lightweight Directory Access Protocol server, or a KeyStone identity service.

19. The computing device of claim 16, wherein the first plurality of storage units is in closer geographic proximity to the originating geographic region than the primary geographic region.

20. The computing device of claim 16, wherein the processing module further operates to facilitate dispersed storage of a least a portion of the data object in the second plurality of storage units by:

dispersed storage error encoding the data object, in accordance with dispersal parameters associated with the user profile, to produce a plurality of sets of encoded data slices, wherein the data object is segmented into a plurality of data segments and wherein each data segment is dispersed storage error encoded into a respective set of encoded data slices;

identify one or more storage units of the second plurality of storage units; and

initiate, via the network interface, storage of the plurality of sets of encoded data slices in the one or more identified storage units.