Data repository and method for promoting network storage of data

• US 7,287,030 B2
• Filed: 01/07/2004
• Issued: 10/23/2007
• Est. Priority Date: 02/18/2000
• Status: Expired due to Term

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Burnside Acquisition, LLC
• Inventors: Margolus, Norman H., Knight, Thomas F. Jr.
• Primary Examiner(s): Alam; Shahid Al
• Application Number:
  US10/752,769
• Publication Number:
  US 20040139303A1
• Time in Patent Office: 1,385 Days
• Field of Search: 707/2, 707/10, 707/204, 707/206, 707/100, 707/205, 709/225, 709/203, 709/224, 713/165, 713/176, 713/193, 705/18, 705/51, 712/220, 370/230, 370/260
• US Class Current: 713/176
• CPC Class Codes: G06F 16/137 Hash-based content-based indexing of textual data G06F16/31
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: Y10S 707/959 Network
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99953 Recoverability

Abstract

In general, the invention features methods by which more than one client program connected to a network stores the same data item on a storage device of a data repository connected to the network. In one aspect, the method comprises encrypting the data item using a key derived from the content of the data item, determining a digital fingerprint of the data item, and storing the data item on the storage device at a location or locations associated with the digital fingerprint. In a second aspect, the method comprises determining a digital fingerprint of the data item, testing for whether the data item is already stored in the repository by comparing the digital fingerprint of the data item to the digital fingerprints of data items already in storage in the repository, and challenging a client that is attempting to deposit a data item already stored in the repository, to ascertain that the client has the full data item.

Claims

1. A method by which a client connected to a network over a lower speed connection may provide higher speed access to a data item for application processing than is possible over the relatively low speed connection to the network, the method comprising:

determining a digital fingerprint of the data item;

testing for whether the data item is already stored in a repository by comparing the digital fingerprint of the data item to digital fingerprints of data items already in the repository;

only if the data item is not already in the repository, transferring the data item over the lower speed connection from the client to the repository, the repository being connected to the network over a higher speed connection than the client;

making a higher speed connection between an application server and the data repository;

executing an application on the application server to process the data item stored on the data repository; and

returning at least some of the processed data to the client across the lower speed connection.

2. The method of claim 1 wherein one or both of the data transfers to and from the client are conducted in the background while other applications are running on the client.

3. The method of claim 1 in which the data repository is a disk-based data storage system.

4. The method of claim 1 in winch the application server is separate from and independent of the data repository, and is connected to it by the network.

5. The metnod of claim 1 in which the digital fingerprint is a cryptographic hash of the contentof the data item.

6. The method of claim 1 in which the data item is encrypted using a key based on the content of the data item.

7. The method of claim 1 in which the processed data is returned to the client via a Web browser.

8. The method of claim 1 in which the client has a plurality of data items stored in the data repository and the client controls which of the plurality of data items the application server is allowed to access.

9. The method of claim 8 in which the application server diagnoses a problem based on the plurality of data items.