System and method for authenticating block level cache access on network
First Claim
Patent Images
1. A cache device including a local data storage for fulfilling requests for block storage from at least one client to at least one block storage server, the cache device performing the steps of:
- maintaining, in the local data storage, an ephemeral copy of at least one write block written from at least a write client to the server;
subsequently writing the write block to the server from the local data storage;
authenticating at least a first client, prior to permitting access to the ephemeral copy of at least one write block in the local data storage.
1 Assignment
0 Petitions
Accused Products
Abstract
A data cache for an iSCSI network caches block-level data from WAN servers for use by clients (e.g., LANs). The cache authenticates itself to the WAN servers, and authenticates clients requesting cache access. Mechanisms are provided to prevent clients from accessing cached data intended for other clients.
94 Citations
81 Claims
-
1. A cache device including a local data storage for fulfilling requests for block storage from at least one client to at least one block storage server, the cache device performing the steps of:
-
maintaining, in the local data storage, an ephemeral copy of at least one write block written from at least a write client to the server; subsequently writing the write block to the server from the local data storage; authenticating at least a first client, prior to permitting access to the ephemeral copy of at least one write block in the local data storage. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 44, 70, 71, 78, 81)
-
-
21. A method for communicating data in a network between at least one client and at least one server, comprising:
-
placing data at block level onto the network; selectively caching at least some data at one and only one cache device located between a client and a server, the cache device having a local data storage; and using the cache device to authenticate at least one client prior permitting the client to access the at least some data at the cache device. - View Dependent Claims (22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 72, 73)
-
-
41. A device comprising:
-
a digital processing apparatus; and logic means stored on a computer readable storage device, the storage device being accessed by the digital processing apparatus for caching data flowing between a server and a client in a network, the logic means comprising; means for caching data at a block level in a cache data storage; and means for authenticating a client requesting access to data in the data storage, wherein the means for authenticating includes means for associating at least one authenticator with at least one logical unit in the cache data storage holding at least one requested block of data, the means for associating selectively granting access based on whether the client is successfully authenticated by the cache data storage. - View Dependent Claims (42, 43, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 76, 77)
-
-
60. A system for transferring data between first and second networks, the first network being relatively faster than the second network, comprising:
-
the first network; the second network; and a data cache device between the networks; and caching data in a local storage pursuant to transferring the data between the networks, the data cache device and only the data cache device authenticating a client prior to sending data in the local storage to a client. - View Dependent Claims (61, 62, 63, 64, 65, 66, 67, 68, 69, 74, 75)
-
-
79. A cache device including a local data storage for fulfilling requests for block storage from at least one client to at least one block storage server, the cache device including logic for undertaking method acts comprising:
-
receiving a request from at least a read client to read at least one read block from the server; requesting a read block from a server; storing the read block in the local data storage, such that subsequent requests for the read block from the read client can be satisfied from the local storage; and authenticating at least a first client, prior to permitting access to the read block in the local data storage; wherein the cache device and only the cache device authenticates the first client. - View Dependent Claims (80)
-
Specification