Secure data transfer platform for hybrid computing environment

• US 9,596,315 B2
• Filed: 05/29/2014
• Issued: 03/14/2017
• Est. Priority Date: 05/30/2013
• Status: Active Grant

• Current Assignee: Zentera Systems, Inc.
• Original Assignee: Zentera Systems, Inc.
• Inventors: Lee, Jaushin, Wu, Junwei, Chu, Wei-Chin
• Primary Examiner(s): Meky, Moustafa M
• Application Number:
  US14/290,757
• Publication Number:
  US 20140359047A1
• Time in Patent Office: 1,020 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 2009/45583 Memory management, e.g. access or allocation
• CPC Class Codes: G06F 2009/45587 Isolation or security of virtual machine instances
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects
• CPC Class Codes: G06F 9/5016 the resource being the memory
• CPC Class Codes: G06F 9/505 considering the load
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data

Abstract

A data transfer profile defines the transfer of data among different domains. The data transfer profile is processed to generate data transfer rules. Subsets of the rules are distributed to the different domains. A rule can specify a folder in a particular domain in which files stored in the folder will be transferred to another domain.

Claims

1. A method comprising:

providing a data transfer profile specifying a source, and a destination, the source being in a first network domain of an enterprise, and the destination being in a cloud domain of a cloud services provider;

processing the data transfer profile to generate a plurality of rules;

distributing a first rule of the plurality of rules to the source, the first rule comprising an identification of a folder at the source;

receiving, in response to an evaluation of the first rule at the source, a plurality of files stored in the folder at the source; and

transmitting the plurality of files to a cache server in the cloud domain for the cache server to distribute the plurality of files to the destination in the cloud domain of the cloud services provider.

2. The method of claim 1 comprising:

distributing a second rule of the plurality of rules to the cache server, the second rule comprising an identification of the destination.

3. The method of claim 1 wherein the destination comprises a virtual machine, and the method comprises:

distributing a second rule of the plurality of rules to the virtual machine, the second rule comprising an identification of a folder at the virtual machine;

receiving, in response to an evaluation of the second rule at the virtual machine, a second plurality of files stored in the folder at the virtual machine from the cache server; and

transmitting the second plurality of files to a backup.

4. The method of claim 3 wherein the backup comprises a cloud storage server in the cloud domain.

5. The method of claim 3 wherein the backup comprises a backup server in the first network domain of the enterprise.

6. The method of claim 3 wherein the backup comprises a backup server in a second network domain of the enterprise, different from the first network domain.

7. The method of claim 1 comprising:

storing a security key at a location outside of the cloud domain for encrypting files transmitted to the destination in the cloud domain.