Restricting access to object based storage

• US 8,341,370 B2
• Filed: 11/16/2009
• Issued: 12/25/2012
• Est. Priority Date: 11/16/2009
• Status: Active Grant

• Current Assignee: Veritas Technologies, LLC (Whitehouse Group Ltd.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Wankhade, Shriram
• Primary Examiner(s): Gu, Shawn X
• Application Number:
  US12/619,495
• Publication Number:
  US 20110119460A1
• Time in Patent Office: 1,135 Days
• Field of Search: None
• US Class Current: 711/164
• CPC Class Codes: G06F 16/128 Details of file system snapshots on the file-level, e.g. snapshot creation, administration, deletion use of snapshots for error detection or correction G06F11/14, G06F11/16

Abstract

A method, in one embodiment, can include a server receiving a message to deactivate a partition key of an object based storage system. A token of the object based storage system is signed by the partition key. The object based storage system includes the server. Additionally, after receiving the message, the server can deactivate the partition key to block access to a partition of the object based storage system by a client. The server includes the partition.

Claims

1. A method comprising:

a server receiving a message to deactivate a partition key of an object based storage system, a token of the object based storage system is signed by the partition key, the object based storage system comprises the server; and

after receiving the message, the server deactivating the partition key to block access to a partition of the object based storage system by a client, the server comprises the partition.

2. The method of claim 1, further comprising:

re-activating the partition key to allow access to the partition of the object based storage system by the client.

3. The method of claim 1, further comprising:

the server receiving a message to re-activate the partition key; and

re-activating the partition key to allow access to the partition of the object based storage system by the client.

4. The method of claim 1, wherein the partition is an Object Storage Device partition.

5. The method of claim 1, further comprising:

after the deactivating, the server receiving the token and sending a message instructing to re-submit the token.

6. The method of claim 5, wherein the message sent by the server further instructing to re-submit the token after a defined period of time.

7. The method of claim 1, wherein the token is a security token.

8. A non-transitory computer readable storage medium having stored thereon, computer-executable instructions that when executed by a computing device cause the computing device to perform a method comprising:

receiving a message to deactivate a partition key of an object based storage system, a token of the object based storage system is signed by the partition key, the object based storage system comprises the computing device; and

after receiving the message, deactivating the partition key to block access to a partition of the object based storage system by a client, the computing device comprises the partition.

9. The non-transitory computer readable storage medium of claim 8, wherein the method further comprising:

re-activating the partition key to allow access to the partition of the object based storage system by the client.

10. The non-transitory computer readable storage medium of claim 8, wherein the method further comprising:

receiving a message to re-activate the partition key; and

re-activating the partition key to allow access to the partition of the object based storage system by the client.

11. The non-transitory computer readable storage medium of claim 8, wherein the partition is an Object Storage Device partition.

12. The non-transitory computer readable storage medium of claim 8, wherein the method further comprising:

after the deactivating, receiving the token and sending a message instructing to re-submit the token.

13. The non-transitory computer readable storage medium of claim 12, wherein the message instructing to re-submit the token further instructs to re-submit the token after a defined period of time.

14. The non-transitory computer readable storage medium of claim 8, wherein the token is a security token.

15. A computer system comprising:

a processor; and

computer readable storage media coupled to the processor and having stored therein instructions that, if executed by the computer system cause the computer system to execute a method comprising;

receiving a message to deactivate a partition key of an object based storage system, a token of the object based storage system is signed by the partition key, the object based storage system comprises the computing system; and

after receiving the message, deactivating the partition key to block access to a partition of the object based storage system by a client, the computing system comprises the partition.

16. The computer system of claim 15, wherein the method further comprising:

re-activating the partition key to allow access to the partition of the object based storage system by the client.

17. The computer system of claim 15, wherein the method further comprising:

receiving a message to re-activate the partition key; and

re-activating the partition key to allow access to the partition of the object based storage system by the client.

18. The computer system of claim 15, wherein the partition is an Object Storage Device partition.

19. The computer system of claim 15, wherein the method further comprising:

after the deactivating, receiving the token and sending a message instructing to re-submit the token.

20. The computer system of claim 19, wherein the message instructing to re-submit the token further instructs to re-submit the token after a defined period of time.