Protecting file entities

• US 8,769,609 B2
• Filed: 07/05/2011
• Issued: 07/01/2014
• Est. Priority Date: 07/06/2010
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Slater, Alastair, Coney, Daniel Philip
• Primary Examiner(s): CHEN, SHIN HON
• Application Number:
  US13/176,581
• Publication Number:
  US 20120011562A1
• Time in Patent Office: 1,092 Days
• Field of Search: 709/201, 726/30, 707/791
• US Class Current: 726/1
• CPC Class Codes: G06F 16/11 File system administration, e.g. details of archiving or snapshots file system backup G06F11/14
• CPC Class Codes: G06F 16/176 Support for shared access to files; File sharing support
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/805 using a security table for the storage sub-system

Abstract

There is described a computer system to provide a filesystem, and to export a consumer directory of the filesystem for access by a consumer application over a network. The system has a protected directory. Protection controls restrict performance of file management activities on file entities of the protected directory by the consumer application.

Claims

1. A computer system to:

provide a filesystem;

export a shared directory of the filesystem for access by a consumer application over a network;

determine whether one or more protection criteria of the shared directory are satisfied;

in response to a determination that the one or more protection criteria of the shared directory are satisfied;

automatically move one or more file entities from the shared directory to a protected directory; and

prevent performance of file management activities on the one or more file entities of the protected directory by the consumer application.

2. The computer system of claim 1, wherein the one or more protection criteria are specified in one or more stored policies.

3. The computer system of claim 1, wherein the one or more protection criteria specify a time elapsed since a file management event in the shared directory.

4. The computer system of claim 1, comprising a management interface to permit movement of the one or more file entities from the protected directory in response to instructions received by the management interface.

5. The computer system of claim 1, wherein the file management activities include movement of a file entity from the protected directory.

6. The computer system of claim 1, wherein the file management activities include modification or deletion of a file entity of the protected directory.

7. The computer system of claim 1, wherein the one or more protection criteria specify at least one file type of the one or more file entities.

8. The computer system of claim 1, wherein the one or more file entities comprise at least one directory of the filesystem.

9. The computer system of claim 1, wherein the file management activities include discovery of the one or more file entities of the protected directory.

10. The computer system of claim 1, further comprising an inline data deduplication system to deduplicate a plurality of file entities.

11. A non-transitory computer readable medium having computer readable instructions stored thereon to cause a processor included in a server to:

provide, by a server, at least one filesystem including;

a protected directory; and

a shared directory accessible to a consumer application of a client computer using a network filesystem protocol;

determine whether one or more protection criteria are satisfied;

in response to a determination that the one or more protection criteria are satisfied;

automatically move one or more file entities from the shared directory to the protected directory; and

protect one or more file entities in the protected directory from modification by the consumer application from the protected directory.

12. The non-transitory computer readable medium of claim 11, wherein the computer readable instructions cause the processor to permit movement of files between the shared directory and the protected directory using a management interface.

13. The non-transitory computer readable medium of claim 11, wherein the computer readable instructions cause the processor to deprotect protected files in response to a movement of the protected files from the protected directory to the shared directory, and to permit subsequent modification by the consumer application of the deprotected files.

14. The non-transitory computer readable medium of claim 11, wherein the computer readable instructions cause the processor to hide the protected one or more file entities from the consumer application.

15. A computer-implemented method comprising:

sharing, by a server, a shared directory with a consumer application over a network;

determining whether one or more protection criteria are satisfied;

in response to a determination that the one or more protection criteria are satisfied;

automatically moving one or more file entities from the shared directory to a protected directory; and

protecting the one or more file entities in the protected directory from manipulation by the consumer application.

16. The method of claim 15, comprising manipulating the protected directory file entities using a management interface.

17. The method of claim 15, wherein the one or more protection criteria are specified in one or more policies managed by a management interface.

18. The method of claim 15, wherein the one or more protection criteria include at least one criterium based on a time or time period relative to a file management event.

19. The method of claim 18, the at least one criterium including a time elapsed since a file management event.

20. The method of claim 15, comprising deduplicating data received from the consumer application, and storing deduplicated data relating to the shared directory and the protected directory in mass storage using a single data deduplicating store.