Policy driven cloud storage management and cloud storage policy router

• US 9,633,024 B2
• Filed: 07/22/2014
• Issued: 04/25/2017
• Est. Priority Date: 07/24/2009
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Demilo, David, Ferriera, David Brian, Viswanathan, Ramkumar, Mahajani, Ravindra, Lincoln, Blaine, McKernan, James
• Primary Examiner(s): Ruiz, Angelica
• Application Number:
  US14/338,162
• Publication Number:
  US 20140351606A1
• Time in Patent Office: 1,008 Days
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services

Abstract

Techniques are disclosed for a policy driven cloud storage management broker and a cloud storage policy router, along with methods for registering tenant applications with the cloud storage management broker and for sending (and retrieving) files to/from a cloud storage service. A tenant application may be configured to generate a user interface that allows a user to specify metadata to associate with a file along with a link to a cloud storage service to which the file is uploaded. The tenant application may collect and store the metadata attributes (along with a reference to the file stored in the cloud) in an enterprise database, while the file itself may be transmitted to the cloud storage service directly. The cloud storage policy router may learn the capabilities of different cloud storage providers using an advertisement routing protocol.

Claims

1. A routing device, comprising:

a processor; and

a memory storing instructions, which, when executed by the processor, performs an operation, comprising;

receiving, from a client application via an interface provided by the routing device, a file for forwarding to one of a plurality of cloud storage services for storage,

identifying one or more storage parameters specifying requirements for a cloud storage service selected to store the file, the requirements comprising at least one of a regulatory requirement, an allocation requirement, and a service availability requirement,

evaluating the storage parameters to identify a cloud storage service, of the plurality, which satisfies the specified requirements,

forwarding the file to the selected cloud storage service for storage,

storing, in an index table of the routing device, an indication that the file was stored by the selected cloud storage service, wherein the index table stores indications for a plurality of files stored by the plurality of cloud storage services, and

transmitting, to the client application, an address to a location in the selected cloud storage service where the file is stored.

2. The routing device of claim 1, wherein the routing device stores advertised capabilities received from the plurality of cloud storage services, wherein the storage parameters are received by the routing device from the client application via the interface.

3. The routing device of claim 2, wherein evaluating the storage parameters comprises matching the specified requirements against the advertised capabilities received from the plurality of cloud storage services and one or more storage policies.

4. The routing device of claim 1, wherein the requirements further comprise a data retention requirement for the selected could storage service.

5. The routing device of claim 1, wherein the operation further comprises, prior to forwarding the file to the selected cloud storage service, encrypting the file.

6. The routing device of claim 1, wherein the operation further comprises, sending a message to a client which sent the file to the routing device, wherein the message identifies the cloud storage service storing the file.

7. The routing device of claim 1, wherein the operation further comprises, evaluating a content of the file to identify at least one of the storage parameters.

8. The method of claim 1, wherein identifying one or more storage parameters comprises evaluating metadata associated with the file against at least one storage policy.

9. A method, comprising:

receiving, from a client application via an interface provided by a cloud storage policy router, a file for forwarding to one of a plurality of cloud storage services;

identifying one or more storage parameters specifying requirements for a cloud storage service selected to store the file, the requirements comprising at least one of a regulatory requirement, an allocation requirement, and a service availability requirement;

evaluating the storage parameters to identify a cloud storage service, of the plurality, which satisfies the specified requirements;

forwarding the file to the selected cloud storage service for storage;

storing, in an index table of the routing device, an indication that the file was stored by the selected cloud storage service, wherein the index table stores indications for a plurality of files stored by the plurality of cloud storage services; and

transmitting, to the client application, an address to a location in the selected cloud storage service where the file is stored.

10. The method of claim 9, wherein the cloud storage policy router stores advertised capabilities received from the plurality of cloud storage services, wherein the storage parameters are received by the router from the client application via the interface.

11. The method of claim 10, wherein evaluating the storage parameters comprises matching the specified requirements against the advertised capabilities received from the plurality of cloud storage services and one or more storage policies.

12. The method of claim 9, wherein the requirements further comprise a data retention requirement for the selected could storage service.

13. The method of claim 9, wherein the operation further comprises, prior to forwarding the file to the selected cloud storage service, encrypting the file.

14. The method of claim 9, wherein the operation further comprises, sending a message to a client which sent the file to the routing device, wherein the message identifies the cloud storage service storing the file.

15. The method of claim 9, wherein the operation further comprises, evaluating content of the file to identify at least one of the storage parameters.

16. The method of claim 9, wherein identifying one or more storage parameters comprises evaluating metadata associated with the file against at least one storage policy.

17. A non-transitory computer-readable storage medium containing a program, which, when executed on a processor, performs an operation comprising:

receiving, from a client application via an interface provided by a cloud storage policy router, a file for forwarding to one of a plurality of cloud storage services;

identifying one or more storage parameters specifying requirements for a cloud storage service selected to store the file, the requirements comprising at least one of a regulatory requirement, an allocation requirement, and a service availability requirement;

evaluating the storage parameters to identify a cloud storage service, of the plurality, which satisfies the specified requirements;

forwarding the file to the selected cloud storage service for storage;

storing, in an index table of the routing device, an indication that the file was stored by the selected cloud storage service, wherein the index table stores indications for a plurality of files stored by the plurality of cloud storage services; and

transmitting, to the client application, an address to a location in the selected cloud storage service where the file is stored.

18. The computer-readable storage medium of claim 17, wherein the cloud storage policy router stores advertised capabilities received from the plurality of cloud storage services, wherein the storage parameters are received by the routing device from the client application via the interface.

19. The computer-readable storage medium of claim 18, wherein evaluating the storage parameters comprises matching the specified requirements against the advertised capabilities received from the plurality of cloud storage services and one or more storage policies.

20. The computer-readable storage medium of claim 17, wherein the requirements further comprise a data retention requirement for the selected could storage service.

21. The computer-readable storage medium of claim 17, wherein the operation further comprises, prior to forwarding the file to the selected cloud storage service, encrypting the file.

22. The computer-readable storage medium of claim 17, wherein the operation further comprises, sending a message to a client which sent the file to the routing device, wherein the message identifies the cloud storage service storing the file.

23. The computer-readable storage medium of claim 17, wherein the operation further comprises, evaluating content of the file to identify at least one of the storage parameters.

24. The computer-readable storage medium of claim 17, wherein identifying one or more storage parameters comprises evaluating metadata associated with the file against at least one storage policy.