System and Methiod for Storing Data Using a Virtual Worm File System

• US 20090044010A1
• Filed: 08/08/2007
• Published: 02/12/2009
• Est. Priority Date: 08/08/2007
• Status: Active Grant

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Hughes, James P.
• Granted Patent: US 8,631,235 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2463/121 Timestamp
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A system and method for storing data in a virtual file system using write once read many (WORM) protection includes a WORM server in communication with one or more storage devices and a controller in communication with the WORM server. A first time stamping process for creating a first time stamp for a data object based on instructions applied by the controller for storage on the WORM server. A second time stamping process for creating a second time stamp for the data object for storage on the WORM server. The second time stamping process creates the second time stamp for the data object and first time stamp to ensure the integrity of the data object stored on the system.

Claims

1. A system for storing data on a virtual file system using write once read many (WORM) protection, the system comprising:

a WORM server in communication with one or more storage devices;

a controller in communication with the WORM server;

a first time stamping process for creating a first time stamp for a data object based on instructions applied by the controller for storage on the WORM server; and

a second time stamping process for creating a second time stamp for the data object for storage on the WORM server,

wherein the second time stamping process creates the second time stamp for the data object and first time stamp to ensure the integrity of the data object stored on the system.

2. The system of claim 1 wherein the WORM server is configured to receive data objects from a remote client for storage thereon.

3. The system of claim 2 wherein the WORM server is configured to write data objects to specified locations and prevent future writing of data objects to the specified locations.

4. The system of claim 1 wherein the first time stamping process includes:

applying a hash function to the data object to create a hash value for use in a data digest based on the data object;

establishing a digital time stamping service having a private key, a public key, and capable of generating a published time;

applying the published time from the digital time stamping service with the hash value to create the first time stamp;

digitally signing the timestamp with the digital time stamping service private key to create a digital signature for use with the first stamp; and

storing the first time stamp and associated data object on the WORM server.

5. The first time stamping process of claim 4 wherein digitally signing the first time stamp further comprises:

computing the digital signature using the first time stamp; and

encrypting the time stamp digest with the digital time stamping service private key.

6. The system of claim 4 wherein the first time stamping process is configured to store the digital time stamping service public key with the data object on the WORM server.

7. The system of claim 6 wherein the digital time stamping service includes a public key certificate for reading the data object and associated first time stamp incorporating the private key.

8. The system of claim 1 wherein the second time stamping process comprises:

applying a hash function to the data object and the first time stamp;

applying the published time from the digital time stamping service with the hash value to create a second time stamp;

digitally signing the timestamp with the digital time stamping service private key to create a digital signature for use with the first stamp; and

storing the first time stamp and associated data object on the WORM server.

9. A method of storing data on a virtual file system using write once read many (WORM) protection, the method comprising:

providing a write once read many (WORM) server in communication with one or more storage devices;

receiving a data object at the WORM server from a remote client;

computing a first time stamp for the data object with a first time stamping process for storage on the WORM server; and

computing a second time stamp for the data object with a second time stamping process for storage on the WORM server,

wherein the second time stamping process creates the second time stamp for the data object and first time stamp to ensure the integrity of the data object stored on the system.

10. The method of claim 9 further comprising the step of writing the data objects and associated first and second time stamps to specified locations to prevent future writing of data objects to the specified locations.

11. The method of claim 9 wherein computing the first time stamping further comprises:

applying a hash function to the data object to create a hash value for use in a data digest based on the data object;

establishing a digital time stamping service having a private key, a public key, and capable of generating a published time;

applying the published time from the digital time stamping service with the hash value to create the first time stamp;

digitally signing the timestamp with the digital time stamping service private key to create a digital signature for use with the first stamp; and

storing the first time stamp and associated data object on the WORM server.

12. The method of claim 11 wherein digitally signing the first time stamp further comprises:

computing the digital signature using the first time stamp; and

encrypting the time stamp digest with the digital time stamping service private key.

13. The method of claim 12 further comprising the step of storing the digital time stamping service public key with the data object on the WORM server with the first time stamping process.

14. The method of claim 13 further comprising the step of providing a public key certificate for reading the data object and associated first time stamp incorporating the private key with the digital time stamping service.

15. The method of claim 9 wherein computing the second time stamping further comprises:

applying a hash function to the data object and the first time stamp;

applying the published time from the digital time stamping service with the hash value to create a second time stamp;

digitally signing the timestamp with the digital time stamping service private key to create a digital signature for use with the first stamp; and

storing the first time stamp and associated data object on the WORM server.

18. The method of claim 11 wherein digitally signing the second time stamp further comprises:

computing the digital signature using the second time stamp; and

encrypting the time stamp digest with the digital time stamping service private key.

19. The method of claim 18 further comprising the step of storing the digital time stamping service public key with the data object on the WORM server with the second time stamping process.

20. The method of claim 19 further comprising the step of providing a public key certificate for reading the data object and associated first time stamp incorporating the private key with the digital time stamping service.

16. A method of establishing integrity for a data object stored on a read once read many (WORM) virtual file system with an associated first time stamp, the method comprising:

applying a hash function to the data object and the first time stamp;

applying the published time from the digital time stamping service with the hash value to create a second time stamp;

digitally signing the timestamp with the digital time stamping service private key to create a digital signature for use with the first stamp; and

storing the first time stamp and associated data object on the WORM server.

17. The method of claim 16 further comprising the step of writing the data object and second time stamp to specified locations to prevent future writing of data objects to the specified locations.