Policy based composite file system and method

• US 8,099,758 B2
• Filed: 10/31/2005
• Issued: 01/17/2012
• Est. Priority Date: 05/12/1999
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Schaefer, Stuart, Schmeidler, Yonah, Levin, Ilya
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Wyszynski, Aubrey
• Application Number:
  US11/264,747
• Publication Number:
  US 20060259949A1
• Time in Patent Office: 2,269 Days
• Field of Search: 726/1
• US Class Current: 726/1
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A policy configurable file system includes a computer system upon which the policy configurable file system operates, a policy source for providing the configuration policies, and one or more file servers. The computer system includes software for enforcing one or more configuration policies. The policy source is typically either a policy server such that the policy is derived from the policy server, or a policy configurable file system, such that the policy is embedded in the policy configurable file system. The one or more file servers each uses a protocol, wherein the protocols of the one or more file servers are not all the same. In one case, the one or more of the configurable policies are separable from the policy configurable file system. In another case, the one or more configurable policies are downloadable to the computer system.

Claims

1. A policy configurable system, comprising:

a processor;

a computer readable storage medium coupled to the processor, the computer readable storage medium including;

instructions for effectuating a local file system associated with a first policy, wherein the local file system manages local files stored in the computer readable storage medium;

instructions for downloading a second file system associated with a second policy including an application and a configuration file for the application;

instructions for downloading the second policy, the second policy configured to identify a location remote from the second file system to store modifications to the configuration file;

instructions for effectuating a virtual file system, the virtual file system configured to integrate the local files with files in the second file system into a common namespace;

instructions for integrating the first policy with the second policy to form an integrated policy;

instructions for executing the application;

instructions for receiving a request to modify the configuration file; and

instructions for copying the configuration file and modifying the copy of the configuration file in accordance with the request;

instructions for storing the modified copy of the configuration file in the location remote from the second file system in accordance with the second policy.

2. The policy configurable system of claim 1, wherein each policy is formed from one or more separate policies.

3. The policy configurable system of claim 1, wherein the second policy is downloaded from a policy server via a public network.

4. The policy configurable system of claim 1, wherein the integrated policy is formed from the second policy, the second policy having been downloaded from the policy server and the first policy, the first policy having been stored in the computer readable storage medium.

5. The policy configurable system of claim 1, wherein the computer readable storage medium further comprises:

instructions for a file system interface configured to receive file system access calls and send them to the virtual file system.

6. The policy configurable system of claim 5, wherein the integrated policy defines how registry entries are stored.

7. The policy configurable system of claim 1, wherein the computer readable storage medium further comprises:

instructions for selecting the second policy in accordance with information that identifies a logged in user account.

8. The policy configurable system of claim 1, wherein the second file system comprises a BRIQ.

9. A computer implemented method, comprising:

executing a first file system on a computer system, wherein the first file system includes a first set of one or more files and is associated with a first policy;

downloading a second file system that includes a second set of one or more files for an application;

downloading a second policy, wherein the second policy indicates that modifications to configuration data for the application are stored within a file in the first file system;

integrating, by a virtual file system, the first set of one or more files and the second set of one or more files into a common namespace;

integrating the first policy and the second policy into an integrated policy;

receiving a request to modify configuration data for the application; and

storing the modifications to the configuration data for the application within the file in the first file system.

10. The composite file system method of claim 9, wherein files stored in the downloaded second file system include at least one read-only part and at least one read-write part.

11. The composite file system method of claim 9, wherein the integrated policy is formed from the second policy and the first policy, the first policy being locally resident on the computer system.

12. The composite file system method of claim 9, wherein the downloaded file system includes application configuration files.

13. The composite file system method of claim 9, wherein the first file system includes user configuration files including user preference information for the application.

14. The composite file system method of claim 9, wherein the integrated policy controls data read and write operations.

15. The composite file system method of claim 9, wherein the integrated policy defines how registry entries are stored.

16. The composite file system method of claim 9, wherein the second policy is selected in accordance with information that identifies a logged in user account.

17. The composite file system method of claim 16, wherein the second policy is downloaded from the one or more servers.

18. The composite file system method of claim 16, wherein the second policy is downloaded from a plurality of locations.

19. A computer readable storage medium including computer executable instructions that upon execution by a processor cause the processor to:

execute a first file system associated with a first policy;

download a second file system, wherein the second file system includes an application and a configuration file for the application;

download a second policy associated with the second file system;

determine that modifications to the configuration file for the application are stored in the first file system based on information in the second policy and information identifying a user account logged into the operating system;

execute a virtual file system that integrates the first file system and the second files system into a common namespace;

integrate the first policy with a second policy;

receive a request to modify the configuration file for the application;

store the modifications to the configuration file in the first file system in accordance with the second policy.

20. The computer readable storage medium of claim 19, further comprising instructions that upon execution by the processor cause the processor to:

store a copy of a modified configuration file in the first file system.

21. The computer readable storage medium of claim 19, further comprising instructions that upon execution by the processor cause the processor to:

store blocks of changed data that are indicative of the modifications in the first file system.

22. The computer readable storage medium of claim 21, wherein the second policy is downloaded from the one or more servers.

23. The computer readable storage medium of claim 19, further comprising instructions that upon execution by the processor cause the processor to:

integrate the first file system and the second file system into the common namespace in accordance with information in a symlink.

24. The computer readable storage medium of claim 19, further comprising instructions that upon execution by the processor cause the processor to:

integrate the first file system and the second file system into the common namespace, wherein the common namespace is common across a plurality of remote volumes.

25. The computer readable storage medium of claim 19, wherein each volume includes a downloadable file system.

26. The computer readable storage medium of claim 19, wherein the remote volume includes application configuration files.