System and method for storing data using a virtual worm file system

• US 8,631,235 B2
• Filed: 08/08/2007
• Issued: 01/14/2014
• Est. Priority Date: 08/08/2007
• Status: Active Grant

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Oracle America, Inc. (Oracle Corporation)
• Inventors: Hughes, James P.
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): LAKHIA, VIRAL S
• Application Number:
  US11/835,752
• Publication Number:
  US 20090044010A1
• Time in Patent Office: 2,351 Days
• Field of Search: 713/165, 713176-178, 726/7, 726 22- 26
• US Class Current: 713/165
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2463/121 Timestamp
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A system and method for storing data in a virtual file system using write once read many (WORM) protection includes a WORM server in communication with one or more storage devices and a controller in communication with the WORM server. A first time stamping process for creating a first time stamp for a data object based on instructions applied by the controller for storage on the WORM server. A second time stamping process for creating a second time stamp for the data object for storage on the WORM server. The second time stamping process creates the second time stamp for the data object and first time stamp to ensure the integrity of the data object stored on the system.

Claims

1. A system for storing data on a virtual file system using write once read many (WORM) protection, the system comprising:

a WORM server in communication with one or more storage devices;

a controller in communication with the WORM server;

a first time stamping process for creating a first time stamp for a data object based on instructions applied by the controller for storage on the WORM server; and

a second time stamping process for creating a second time stamp for the data object for storage on the WORM server, including;

executing a hash function on a previously created time stamp to produce a new hash value;

processing the new hash value with a digital signature algorithm different from a digital signature algorithm previously used to process a previously produced hash value with respect to the previously created time stamp, to produce a digital signature; and

combining the digital signature and hash value to produce a new time stamp to be recorded along with the previously created time stamp.

2. The system of claim 1 wherein the WORM server is configured to receive data objects from a remote client for storage thereon.

3. The system of claim 2 wherein the WORM server is configured to write data objects to specified locations and prevent future writing of data objects to the specified locations.

4. The system of claim 1 wherein the first time stamping process includes:

applying a hash function to the data object to create a hash value for use in a data digest based on the data object;

establishing a digital time stamping service having a private key, a public key, and capable of generating a published time;

applying the published time from the digital time stamping service with the hash value to create the first time stamp;

digitally signing the timestamp with the digital time stamping service private key to create a digital signature for use with the first stamp; and

storing the first time stamp and associated data object on the WORM server.

5. The first time stamping process of claim 4 wherein digitally signing the first time stamp further comprises:

computing the digital signature using the first time stamp; and

encrypting the time stamp digest with the digital time stamping service private key.

6. The system of claim 4 wherein the first time stamping process is configured to store the digital time stamping service public key with the data object on the WORM server.

7. The system of claim 6 wherein the digital time stamping service includes a public key certificate for reading the data object and associated first time stamp incorporating the private key.

8. A method of storing data on a virtual file system using write once read many (WORM) protection, the method comprising:

providing a write once read many (WORM) server in communication with one or more storage devices;

receiving a data object at the WORM server from a remote client;

computing a first time stamp for the data object with a first time stamping process for storage on the WORM server; and

computing a second time stamp for the data object with a second time stamping process for storage on the WORM server,

wherein the second time stamping process creates the second time stamp for the data object, including;

executing a hash function on a previously created time stamp to produce a new hash value;

processing the new hash value with a digital signature algorithm different from a digital signature algorithm previously used to process a previously produced hash value with respect to the previously created time stamp, to produce a digital signature; and

combining the digital signature and hash value to produce a new time stamp to be recorded along with the previously created time stamp.

9. The method of claim 8 further comprising the step of writing the data objects and associated first and second time stamps to specified locations to prevent future writing of data objects to the specified locations.

10. The method of claim 8 wherein computing the first time stamping further comprises:

applying a hash function to the data object to create a hash value for use in a data digest based on the data object;

establishing a digital time stamping service having a private key, a public key, and capable of generating a published time;

applying the published time from the digital time stamping service with the hash value to create the first time stamp;

digitally signing the timestamp with the digital time stamping service private key to create a digital signature for use with the first stamp; and

storing the first time stamp and associated data object on the WORM server.

11. The method of claim 10 wherein digitally signing the first time stamp further comprises:

computing the digital signature using the first time stamp; and

encrypting the time stamp digest with the digital time stamping service private key.

12. The method of claim 11 further comprising the step of storing the digital time stamping service public key with the data object on the WORM server with the first time stamping process.

13. The method of claim 12 further comprising the step of providing a public key certificate for reading the data object and associated first time stamp incorporating the private key with the digital time stamping service.