Method and apparatus for data retention in a storage system

• US 9,075,851 B2
• Filed: 12/09/2003
• Issued: 07/07/2015
• Est. Priority Date: 12/09/2003
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Kilian, Michael, Avery, Mark, Todd, Stephen, Teugels, Tom, Martens, Francis, Bruyndonckx, Jan
• Primary Examiner(s): PHAM, KHANH B
• Application Number:
  US10/731,790
• Publication Number:
  US 20050125411A1
• Time in Patent Office: 4,228 Days
• Field of Search: 711/159, 705/11, 707/101, 707/200, 707/205
• US Class Current: 1/1
• CPC Class Codes: G06F 16/2477 Temporal data queries

Abstract

A system and method are provided for retention of data on a storage system. An application program provides the storage system with data to be stored on the storage system. The application program also provides the storage system with a retention period that indicates a period of time for which the data may not be deleted. When the storage system receives a request to delete the data, it first evaluates the retention period associated with that data to determine if the retention period has expired. If the retention period has not expired, the storage system denies the request to delete the data.

Claims

1. A method for use in a computer system comprising at least one host and at least one storage system, the method comprising acts of:

(A) receiving a request, from the host, to delete a first unit of content stored on the storage system, wherein a retention period for the first unit of content is stored in the first unit of content, wherein the request identifies the first unit of content using a first content address generated, at least in part, from the retention period and at least some other content in the first unit of content such that, if the retention period is modified, a second unit of content with a second content address is generated and stored in a different location from the first unit of content;

(B) determining whether the retention period for the first unit of content has expired;

(C) when it is determined in the act (B) that the retention period for the first unit of content has not expired, denying the request to delete the first unit of content; and

(D) when it is determined in the act (B) that the retention period for the first unit of content has expired, directly deleting the first unit of content in response to the request.

2. The method of claim 1, wherein the acts (A), (B) and (C) are performed by the storage system.

3. The method of claim 1, further comprising an act (D) of, prior to performing the acts (A), (B) and (C), receiving information specifying the retention period for the first unit of content.

4. The method of claim 1, further comprising acts of, prior to performing the acts (A), (B) and (C):

(D) receiving the first unit of content at the storage system; and

(E) writing the first unit of content to the storage system.

5. The method of claim 4, further comprising acts of, prior to performing the acts (A), (B) and (C):

(F) receiving information specifying the retention period for the unit of content along with the first unit of content; and

(G) writing the information specifying the retention period to the storage system.

6. At least one non-transitory computer readable storage medium encoded with instructions that, when executed on a computer system, perform a method for use in the computer system, wherein the computer system comprises at least one host and at least one storage system, and wherein the method comprises acts of:

(A) receiving a request, from the host, to delete a first unit of content stored on the storage system, wherein a retention period for the first unit of content is stored in the first unit of content, wherein the request identifies the first unit of content using a content address generated, at least in part, from the retention period and at least some other content in the first unit of content such that, if the retention period is modified, a second unit of content with a second content address is generated and stored in a different location from the first unit of content;

(B) determining whether the retention period for the first unit of content has expired;

(C) when it is determined in the act (B) that the retention period for the first unit of content has not expired, denying the request to delete the first unit of content; and

(D) when it is determined in the act (B) that the retention period for the first unit of content has expired, directly deleting the first unit of content in response to the request.

7. The at least one non-transitory computer readable storage medium of claim 6, wherein the acts (A), (B) and (C) are performed by the storage system.

8. The at least one non-transitory computer readable storage medium of claim 6, further comprising an act (D) of, prior to performing the acts (A), (B) and (C), receiving information specifying the retention period for the first unit of content.

9. The at least one non-transitory computer readable storage medium of claim 6, further comprising acts of, prior to performing the acts (A), (B) and (C):

(D) receiving the first unit of content at the storage system; and

(E) writing the first unit of content to the storage system.

10. The at least one non-transitory computer readable storage medium of claim 9, further comprising acts of, prior to performing the acts (A), (B) and (C):

(F) receiving information specifying the retention period for the first unit of content along with the first unit of content; and

(G) writing the information specifying the retention period to the storage system.

11. A storage system for use in a computer system comprising at least one host and the storage system, the storage system comprising:

at least one storage device, comprising at least one physical storage medium to store data received from the at least one host; and

at least one controller that;

receives a request, from the host, to delete a first unit of content stored on the storage system, wherein a retention period for the first unit of content is stored in the first unit of content, wherein the request identifies the first unit of content using a content address generated, at least in part, from the retention period such that, if the retention period is modified, a second unit of content with a second content address is generated and stored in a different location from the first unit of content;

determines whether the retention period for the unit of content has expired;

when it is determined that the retention period for the unit of content has not expired, denies the request to delete the unit of content and at least some other content in the first unit of content; and

when it is determined that the retention period for the first unit of content has expired, directly deletes the first unit of content in response to the request.

12. The storage system of claim 11, wherein the at least one controller receives information specifying the retention period for the first unit of content.

13. The storage system of claim 11, wherein the at least one controller receives the first unit of content and writes the first unit of content to the at least one storage device.

14. The storage system of claim 11, wherein the at least one controller receives information specifying the retention period for the first unit of content along with the first unit of content and writes the information specifying the retention period to the at least one storage device.

15. The storage system of claim 11, wherein:

a third unit of content is stored on the storage system; and

a reference to the third unit of content is stored in the first unit of content.

16. The storage system of claim 15, wherein the controller is configured not to delete the third unit of content while the reference to the third unit of content is stored in the first unit of content.

17. The storage system of claim 16, wherein:

the controller executes a garbage collector that deletes units of content that are not referenced by other units of content; and

the garbage collector is configured not to delete the third unit of content while the reference to the third unit of content is stored in the first unit of content.

18. The storage system of claim 15, wherein the controller denies every request from the host to delete the third unit of content.

19. The storage system of claim 15, wherein:

the retention period is a first retention period;

a fourth unit of content is stored on the storage system, wherein a second retention period for the fourth unit of content is stored in the fourth unit of content; and

a reference to the third unit of content is stored in the fourth unit of content.

20. The storage system of claim 11, wherein:

the first unit of content is a content descriptor file; and

one or more references to blobs are stored in the content descriptor file.