Method and apparatus for accessing remote storage in a distributed storage cluster architecture

• US 6,952,737 B1
• Filed: 12/29/2000
• Issued: 10/04/2005
• Est. Priority Date: 03/03/2000
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Coates, Joshua L., Bozeman, Patrick E., Patterson, David A.
• Primary Examiner(s): Prieto, Beatriz
• Application Number:
  US09/753,221
• Time in Patent Office: 1,740 Days
• Field of Search: 709/229, 710 1- 5, 710/33, 710/74, 711/100, 711/114, 711 3- 6, 711/11
• US Class Current: 709/229
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: G06F 16/188 Virtual file systems
• CPC Class Codes: G06F 3/0607 by facilitating the process of upgrading existing storage systems, e.g. for improving compatibility between host and storage device
• CPC Class Codes: G06F 3/0643 Management of files
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A network storage system includes a virtual file system (“VFS”) that manages the files of the network storage system, and a storage center that stores the files. The VFS and the storage center are separated, such that a client accesses the VFS to conduct file system operations and the client accesses the storage center to upload/download files. The client accesses the network storage system through one or more storage ports. The storage center includes a plurality of distributed object storage managers (DOSMS) and a storage cluster that includes a plurality of intelligent storage nodes. The network storage system includes additional storage centers at geographically disparate locations. The network storage system uses a multi-cast protocol to maintain file information at the DOSMs regarding files stored in the intelligent storage nodes, including files stored in disparate storage centers.

Claims

1. A method comprising:

determining by a selected one of a plurality of control nodes, whether a client request to access an object is authentic, the determining being based upon whether a first certificate matches a second certificate, the first certificate being obtained from the client request, the second certificate being calculated based upon an encoded request from the client request;

if the selected one of the plurality of control nodes determines that the client request is authentic, determining, by the selected one of the plurality of control nodes, one of a plurality of storage nodes in which the object is located; and

retrieving the object from the one of the plurality of storage nodes.

2. The method of claim 1, wherein:

the second certificate is based upon a first calculation and a second calculation, the first calculation comprising hashing an object fingerprint and a key to yield a first result, the second calculation yielding the second certificate and comprising hashing the first result and the key.

3. The method of claim 2, further comprising:

generating, based upon the client request, the first certificate and the object fingerprint.

4. The method of claim 1, wherein:

the selected one of the plurality of control nodes is selected by a level four switch.

5. The method of claim 4, wherein:

the level four switch selects the selected one of the plurality of control nodes based on availability of the selected one of the plurality of control nodes to retrieve the object.

6. The method of claim 2, wherein:

the object fingerprint identifies the object.

7. The method of claim 1, wherein:

the determining of the one of the plurality of storage nodes is based upon examination by the selected one of the plurality of control nodes of a file table at the one of the plurality of control nodes.

8. The method of claim 7, further comprising:

broadcasting by the selected one of the control nodes a broadcast request for the object to the plurality of storage nodes.

9. An apparatus comprising:

a selected one of a plurality of control nodes to determine whether a client request to access an object is authentic, based upon whether a first certificate matches a second certificate, the first certificate being obtained from the client request, the second certificate being calculated based upon an encoded request from the client request; and

the selected one of the plurality of control nodes being capable of, if the selected one of the plurality of control nodes determines that the client request is authentic, determining one of a plurality of storage nodes in which the object is located, and retrieving the object from the one of the plurality of storage nodes.

10. The apparatus of claim 9, wherein:

the second certificate is based upon a first calculation and a second calculation, the first calculation comprising hashing an object fingerprint and a key to yield a first result, the second calculation yielding the second certificate and comprising hashing the first result and the key.

11. The apparatus of claim 10, wherein:

the selected one of the plurality of control nodes is capable of generating, based upon the client request, the first certificate and the object fingerprint.

12. The apparatus of claim 10, wherein:

the object fingerprint identifies the object.

13. The apparatus of claim 9, further comprising:

a level four switch to select the selected one of the plurality of control nodes.

14. The apparatus of claim 13, wherein:

the level four switch is capable of selecting the selected one of the plurality of control nodes based on availability of the selected one of the plurality of control nodes to retrieve the object.

15. The apparatus of claim 9, wherein:

the selected one of the plurality of control nodes is capable of determining the one of the plurality of storage nodes based upon examination by the selected one of the plurality of control nodes of a file table at the one of the plurality of control nodes.

16. The apparatus of claim 15, wherein:

the selected one of the control nodes is capable of broadcasting a broadcast request for the object to the plurality of storage nodes.