Systems, methods, and computer readable media for computer data protection

• US 20060242381A1
• Filed: 04/22/2005
• Published: 10/26/2006
• Est. Priority Date: 04/22/2005
• Status: Active Grant

• Current Assignee: StorageCraft Technology Corporation
• Original Assignee: StorageCraft Technology Corporation
• Inventors: Barnes, Scott, Kirby, James, Shatskih, Maxim S.
• Granted Patent: US 9,152,823 B2
• Time in Patent Office: Days
• US Class Current: 711/170
• CPC Class Codes: G06F 2003/0697 device management, e.g. handlers, drivers, I/O schedulers
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 3/0601 Interfaces specially adapted for storage systems
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0665 at area level, e.g. provisioning of virtual or logical volumes
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]

Abstract

The present invention comprises computing systems, computer readable media, and methods of protecting computing systems. Embodiments comprise defining a virtual volume, mounting the virtual volume, and processing write accesses. Processing write accesses comprises creating a virtual volume record in a virtual volume database associated with the write access and storing write data at a free location of a shadow cache. Embodiments may also include processing read accesses comprising comparing the read accesses to a virtual volume record to determine if a matching virtual volume record exists, reading data from the target volume if the matching virtual volume record is absent, and reading a data from the shadow cache if the matching virtual volume record is present. Embodiments may also comprise processing at least one virtual volume record upon the occurrence of an event of interest and includes copying a cache data segment from the shadow cache to the target volume.

Claims

1. A method of protecting data in a computing file system, comprising:

defining a virtual volume comprising a virtual volume database associated with a target volume;

mounting the virtual volume;

processing at least one write access including a write data segment and a write target pointer to the target volume, comprising;

creating a virtual volume record in the virtual volume database associated with the at least one write access, comprising;

creating a target pointer corresponding to the write target pointer; and

creating a shadow cache pointer corresponding to a free location of a shadow cache; and

storing the write data segment at the free location; and

processing at least one virtual volume record in the virtual volume database upon the occurrence of an event of interest, comprising copying a cache data segment from the shadow cache at a shadow cache pointer of the at least one virtual volume record to the target volume at a target pointer of the at least one virtual volume record.

2. The method of claim 1, wherein processing the at least one write access further comprises comparing the at least one write access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer, and if the matching virtual volume record is present;

storing the write data segment in the shadow cache at the matching cache pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

3. The method of claim 1, wherein processing the at least one write access further comprises comparing the at least one write access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record in the exclusion catalog, and if the matching exclusion record is present;

storing the write data segment on the target volume at the write target pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

4. The method of claim 1, wherein processing the at least one virtual volume record further comprises comparing the at least one virtual volume record to at least one commit record in an auto-commit catalog to determine a presence of a matching commit record in the auto-commit catalog;

and if the matching commit record is absent, refraining from the act of copying the cache data segment.

5. The method of claim 1, further comprising processing at least one read access including a read target pointer to the target volume, comprising:

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

reading a target data segment from the target volume at the read target pointer if the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer if the matching virtual volume record is present.

6. The method of claim 1, further comprising processing at least one read access including a read target pointer to the target volume, comprising:

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

comparing the at least one read access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record;

reading a target data segment from the target volume at the read target pointer, if the matching exclusion record is present or, if the matching exclusion record is absent and the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer, if the matching exclusion record is absent and the matching virtual volume record is present.

7. The method of claim 1, wherein the event of interest is selected from the group consisting of a scheduled event, a user request, a reboot request, a shutdown request, a virus scan event, a spyware scan event, firewall detection event, and a software installation event.

8. The method of claim 1, wherein the method is initiated by the occurrence of a second event of interest.

9. A method of protecting data in a computing file system, comprising:

defining a virtual volume comprising a virtual volume database associated with a target volume;

mounting the virtual volume;

processing at least one write access including a write data segment and a write target pointer to the target volume, comprising;

creating a virtual volume record in the virtual volume database associated with the at least one write access, comprising;

creating a target pointer corresponding to the write target pointer; and

creating a shadow cache pointer corresponding to a free location of a shadow cache; and

storing the write data segment at the free location; and

processing at least one read access including a read target pointer to the target volume, comprising;

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

reading a target data segment from the target volume at the read target pointer if the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer if the matching virtual volume record is present.

10. The method of claim 9, wherein processing the at least one read access further comprises:

comparing the at least one read access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record;

performing the act of reading a target data segment from the target volume at the read target pointer if the matching exclusion record is present or, if the matching exclusion record is absent and the matching virtual volume record is absent; and

performing the act of reading a cache data segment from the shadow cache at the matching cache pointer if the matching exclusion record is absent and the matching virtual volume record is present.

11. The method of claim 9, wherein processing the at least one write access further comprises comparing the at least one write access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer, and if the matching virtual volume record is present;

storing the write data segment in the shadow cache at the matching cache pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

12. The method of claim 9, wherein processing the at least one write access further comprises comparing the at least one write access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record in the exclusion catalog, and if the matching exclusion record is present;

storing the write data segment on the target volume at the write target pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

13. The method of claim 9, further comprising processing at least one virtual volume record in the virtual volume database upon the occurrence of an event of interest, the processing comprising copying a cache data segment from the shadow cache at a shadow cache pointer of the at least one virtual volume record to the target volume at a target pointer of the at least one virtual volume record.

14. The method of claim 13, wherein processing the at least one virtual volume record further comprises comparing the at least one virtual volume record to at least one commit record in an auto-commit catalog to determine a presence of a matching commit record in the auto-commit catalog;

and if the matching commit record is absent, refraining from the act of copying the cache data segment.

15. The method of claim 13, wherein the event of interest is selected from the group consisting of a scheduled event, a user request, a reboot request, a shutdown request, a virus scan event, a spyware scan event, firewall detection event, and a software installation event.

16. The method of claim 9, wherein the method is initiated by the occurrence of a second event of interest.

17. A computing system, comprising:

a processor configured for executing computer instructions;

a memory configured for storing computer instructions for execution by the processor;

a computing file system comprising computer instructions for execution on the processor and configured for servicing file and directory access requests from an operating system and application programs;

a volume virtualizer comprising computer instructions for execution on the processor and configured for;

defining a virtual volume comprising a virtual volume database associated with a target volume;

mounting the virtual volume;

processing at least one write access including a write data segment and a write target pointer to the target volume, comprising;

creating a virtual volume record in the virtual volume database associated with the at least one write access, comprising;

creating a target pointer corresponding to the write target pointer; and

creating a shadow cache pointer corresponding to a free location of a shadow cache; and

storing the write data segment at the free location; and

processing at least one virtual volume record in the virtual volume database upon the occurrence of an event of interest, comprising copying a cache data segment from the shadow cache at a shadow cache pointer of the at least one virtual volume record to the target volume at a target pointer of the at least one virtual volume record; and

at least one mass storage device configured as the target volume.

18. The computing system of claim 17, wherein processing the at least one write access further comprises comparing the at least one write access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer, and if the matching virtual volume record is present;

storing the write data segment in the shadow cache at the matching cache pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

19. The computing system of claim 17, wherein processing the at least one write access further comprises comparing the at least one write access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record in the exclusion catalog, and if the matching exclusion record is present;

storing the write data segment on the target volume at the write target pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

20. The computing system of claim 17, wherein processing the at least one virtual volume record further comprises comparing the at least one virtual volume record to at least one commit record in an auto-commit catalog to determine a presence of a matching commit record in the auto-commit catalog;

and if the matching commit record is absent, refraining from the act of copying the cache data segment.

21. The computing system of claim 17, further comprising processing at least one read access including a read target pointer to the target volume, comprising:

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

reading a target data segment from the target volume at the read target pointer if the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer if the matching virtual volume record is present.

22. The computing system of claim 17, further comprising processing at least one read access including a read target pointer to the target volume, comprising:

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

comparing the at least one read access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record;

reading a target data segment from the target volume at the read target pointer, if the matching exclusion record is present or, if the matching exclusion record is absent and the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer, if the matching exclusion record is absent and the matching virtual volume record is present.

23. The computing system of claim 17, wherein the event of interest is selected from the group consisting of a scheduled event, a user request, a reboot request, a shutdown request, a virus scan event, a spyware scan event, firewall detection event, and a software installation event.

24. The computing system of claim 17, wherein the virtual file system is initiated by the occurrence of a second event of interest.

25. A computing system, comprising:

a processor configured for executing computer instructions;

a memory configured for storing computer instructions for execution by the processor;

a computing file system comprising computer instructions for execution on the processor and configured for servicing file and directory access requests from an operating system and application programs;

a volume virtualizer comprising computer instructions for execution on the processor and configured for;

defining a virtual volume comprising a virtual volume database associated with a target volume;

mounting the virtual volume;

processing at least one write access including a write data segment and a write target pointer to the target volume, comprising;

creating a virtual volume record in the virtual volume database associated with the at least one write access, comprising;

creating a target pointer corresponding to the write target pointer; and

creating a shadow cache pointer corresponding to a free location of a shadow cache; and

storing the write data segment at the free location; and

processing at least one read access including a read target pointer to the target volume, comprising;

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

reading a target data segment from the target volume at the read target pointer if the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer if the matching virtual volume record is present; and

at least one mass storage device configured as the target volume.

26. The computing system of claim 25, wherein processing the at least one read access further comprises:

comparing the at least one read access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record;

performing the act of reading a target data segment from the target volume at the read target pointer if the matching exclusion record is present or, if the matching exclusion record is absent and the matching virtual volume record is absent; and

performing the act of reading a cache data segment from the shadow cache at the matching cache pointer if the matching exclusion record is absent and the matching virtual volume record is present.

27. The computing system of claim 25, wherein processing the at least one write access further comprises comparing the at least one write access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer, and if the matching virtual volume record is present;

storing the write data segment in the shadow cache at the matching cache pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

28. The computing system of claim 25, wherein processing the at least one write access further comprises comparing the at least one write access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record in the exclusion catalog, and if the matching exclusion record is present;

storing the write data segment on the target volume at the write target pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

29. The computing system of claim 25, further comprising processing at least one virtual volume record in the virtual volume database upon the occurrence of an event of interest, the processing comprising copying a cache data segment from the shadow cache at a shadow cache pointer of the at least one virtual volume record to the target volume at a target pointer of the at least one virtual volume record.

30. The computing system of claim 29, wherein processing the at least one virtual volume record further comprises comparing the at least one virtual volume record to at least one commit record in an auto-commit catalog to determine a presence of a matching commit record in the auto-commit catalog;

and if the matching commit record is absent, refraining from the act of copying the cache data segment.

31. The computing system of claim 29, wherein the event of interest is selected from the group consisting of a scheduled event, a user request, a reboot request, a shutdown request, a virus scan event, a spyware scan event, firewall detection event, and a software installation event.

32. The computing system of claim 25, wherein the virtual file system is initiated by the occurrence of a second event of interest.

33. A computer readable medium including a computer program, the computer program comprising:

instructions for defining a virtual volume comprising a virtual volume database associated with a target volume;

instructions for mounting the virtual volume;

instructions for processing at least one write access including a write data segment and a write target pointer to the target volume, comprising;

creating a virtual volume record in the virtual volume database associated with the at least one write access, comprising;

creating a target pointer corresponding to the write target pointer; and

creating a shadow cache pointer corresponding to a free location of a shadow cache; and

storing the write data segment at the free location; and

instructions for processing at least one virtual volume record in the virtual volume database upon the occurrence of an event of interest, comprising copying a cache data segment from the shadow cache at a shadow cache pointer of the at least one virtual volume record to the target volume at a target pointer of the at least one virtual volume record.

34. The computer readable medium of claim 33, wherein the instructions for processing at least one write access further comprise comparing the at least one write access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer, and if the matching virtual volume record is present;

storing the write data segment in the shadow cache at the matching cache pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

35. The computer readable medium of claim 33, wherein the instructions for processing at least one write access further comprise comparing the at least one write access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record in the exclusion catalog, and if the matching exclusion record is present;

storing the write data segment on the target volume at the write target pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

36. The computer readable medium of claim 33, wherein the instructions for processing at least one virtual volume record further comprise comparing the at least one virtual volume record to at least one commit record in an auto-commit catalog to determine a presence of a matching commit record in the auto-commit catalog;

and if the matching commit record is absent, refraining from the act of copying the cache data segment.

37. The computer readable medium of claim 33, further comprising instructions for processing at least one read access including a read target pointer to the target volume, comprising:

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

reading a target data segment from the target volume at the read target pointer if the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer if the matching virtual volume record is present.

38. The computer readable medium of claim 33, further comprising instructions for processing at least one read access including a read target pointer to the target volume, comprising:

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

comparing the at least one read access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record;

reading a target data segment from the target volume at the read target pointer, if the matching exclusion record is present or, if the matching exclusion record is absent and the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer, if the matching exclusion record is absent and the matching virtual volume record is present.

39. The computer readable medium of claim 33, wherein the event of interest is selected from the group consisting of a scheduled event, a user request, a reboot request, a shutdown request, a virus scan event, a spyware scan event, firewall detection event, and a software installation event.

40. The computer readable medium of claim 33, wherein the computer program is initiated by the occurrence of a second event of interest.

41. A computer readable medium including a computer program, the computer program comprising:

instructions for defining a virtual volume comprising a virtual volume database associated with a target volume;

instructions for mounting the virtual volume;

instructions for processing at least one write access including a write data segment and a write target pointer to the target volume, comprising;

creating a virtual volume record in the virtual volume database associated with the at least one write access, comprising;

creating a target pointer corresponding to the write target pointer; and

creating a shadow cache pointer corresponding to a free location of a shadow cache; and

storing the write data segment at the free location; and

instructions for processing at least one read access including a read target pointer to the target volume, comprising;

comparing the at least one read access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer;

reading a target data segment from the target volume at the read target pointer if the matching virtual volume record is absent; and

reading a cache data segment from the shadow cache at the matching cache pointer if the matching virtual volume record is present.

42. The computer readable medium of claim 41, wherein the instructions for processing at least one read access further comprise:

comparing the at least one read access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record;

performing the act of reading a target data segment from the target volume at the read target pointer if the matching exclusion record is present or, if the matching exclusion record is absent and the matching virtual volume record is absent; and

performing the act of reading a cache data segment from the shadow cache at the matching cache pointer if the matching exclusion record is absent and the matching virtual volume record is present.

43. The computer readable medium of claim 41, wherein the instructions for processing at least one write access further comprise comparing the at least one write access to at least one additional virtual volume record to determine a presence of a matching virtual volume record including a matching cache pointer, and if the matching virtual volume record is present;

storing the write data segment in the shadow cache at the matching cache pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

44. The computer readable medium of claim 41, wherein the instructions for processing at least one write access further comprise comparing the at least one write access to at least one exclusion record in an exclusion catalog to determine a presence of a matching exclusion record in the exclusion catalog, and if the matching exclusion record is present;

storing the write data segment on the target volume at the write target pointer; and

refraining from the acts of creating the virtual volume record and storing the write data segment at the free location.

45. The computer readable medium of claim 41, further comprising instructions for processing at least one virtual volume record in the virtual volume database upon the occurrence of an event of interest, the processing comprising copying a cache data segment from the shadow cache at a shadow cache pointer of the at least one virtual volume record to the target volume at a target pointer of the at least one virtual volume record.

46. The computer readable medium of claim 45, wherein the instructions for processing at least one virtual volume record further comprise comparing the at least one virtual volume record to at least one commit record in an auto-commit catalog to determine a presence of a matching commit record in the auto-commit catalog;

and if the matching commit record is absent, refraining from the act of copying the cache data segment.

47. The computer readable medium of claim 45, wherein the event of interest is selected from the group consisting of a scheduled event, a user request, a reboot request, a shutdown request, a virus scan event, a spyware scan event, firewall detection event, and a software installation event.

48. The computer readable medium of claim 41, wherein the computer program is initiated by the occurrence of a second event of interest.