Rule-based systems for outcome-based data protection

• US 9,749,193 B1
• Filed: 06/12/2015
• Issued: 08/29/2017
• Est. Priority Date: 06/12/2015
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Inventors: Rokicki, John C.
• Primary Examiner(s): Chappell, Daniel C
• Application Number:
  US14/737,859
• Time in Patent Office: 809 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: H04L 41/5009 Determining service level performance parameters or violations of service level contracts, e.g. violations of agreed response time or mean time between failures [MTBF]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes

Abstract

A service level agreement (SLA) is defined for providing data protection with one of data protection levels on data stored in a first system. The SLA includes zero or more service level objectives (SLOs), where each SLO describes a data protection objective to be met. A rule engine applies a set of rules to the SLOs to determine a list of actions to be performed in order to achieve the data protection objectives specified by the SLOs. One or more data protection services are provisioned to be performed at the first storage system and a second storage system that provides data protection for the first storage system. An outcome of the data protection services is evaluated in view of the SLOs to determine whether the data protection objectives have been satisfied.

Claims

1. A computer-implemented method for providing data protection of a data processing system, the method comprising:

defining a service level agreement (SLA) for providing data protection with one of a plurality of data protection levels on data stored in a first system, wherein the SLA includes one or more service level objectives (SLOs), each SLO describing a data protection objective to be met;

applying, using a rule engine, a set of rules to the SLOs to determine a list of actions to be performed in order to achieve the data protection objectives specified by the SLOs, wherein applying a set of rules comprises applying the set of rules using a forward chaining algorithm based on attributes obtained from the SLOs as facts to derive the list of actions, wherein applying a forward chaining algorithm comprises searching based on an inference rule until a condition of the inference rule is known to be true;

provisioning one or more data protection services to be performed at the first storage system and a second storage system that provides data protection for the first storage system; and

evaluating an outcome of the data protection services in view of the SLOs to determine whether the data protection objectives have been satisfied.

2. The method of claim 1, wherein the list of actions includes at least one of data archiving, data backup, data deduplication, data replication, or data migration action.

3. The method of claim 1, wherein the SLOs include at least locality of protected data, a number of copies of the protected data, encryption of the protected data, or retention time of the protected data.

4. The method of claim 1, wherein evaluating an outcome of the data protection services comprises applying the set of rules using a backward chaining algorithm based on the outcome of the data protection services as facts to determine whether a goal of the SLOs has been achieved.

5. The method of claim 4, further comprising:

transmitting a first request to the first storage system to receive first metadata of a first data protection service performed at the first storage system;

communicating with the second storage system to receive second metadata of a second data protection service performed at the second storage system; and

examining the first and second metadata to determine whether a first of the data protection objectives associated with the first and second data protection services has been met.

6. The method of claim 5, wherein examining the first and second metadata comprises confirming whether the first and second data protection services were performed at a first starting time and lasted for a first duration specified by the first data protection objective.

7. The method of claim 6, further comprising confirming whether a first type of the data protection provided by the first and second data protection services conforms to a second type of data protection specified in the first data protection objective.

8. A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for providing data protection of a data processing system, the operations comprising:

defining a service level agreement (SLA) for providing data protection with one of a plurality of data protection levels on data stored in a first system, wherein the SLA includes one or more service level objectives (SLOs), each SLO describing a data protection objective to be met;

applying, using a rule engine, a set of rules to the SLOs to determine a list of actions to be performed in order to achieve the data protection objective specified by the SLOs, wherein applying a set of rules comprises applying the set of rules using a forward chaining algorithm based on attributes obtained from the SLOs as facts to derive the list of actions, wherein applying a forward chaining algorithm comprises searching based on an inference rule until a condition of the inference rule is known to be true;

provisioning one or more data protection services to be performed at the first storage system and a second storage system that provides data protection for the first storage system; and

evaluating an outcome of the data protection services in view of the SLOs to determine whether the data protection objectives have been satisfied.

9. The non-transitory machine-readable medium of claim 8, wherein the list of actions includes at least one of data archiving, data backup, data deduplication, data replication, or data migration action.

10. The non-transitory machine-readable medium of claim 8, wherein the SLOs include at least locality of protected data, a number of copies of the protected data, encryption of the protected data, or retention time of the protected data.

11. The non-transitory machine-readable medium of claim 8, wherein evaluating an outcome of the data protection services comprises applying the set of rules using a backward chaining algorithm based on the outcome of the data protection services as facts to determine whether a goal of the SLOs has been achieved.

12. The non-transitory machine-readable medium of claim 11, wherein the operations further comprise:

transmitting a first request to the first storage system to receive first metadata of a first data protection service performed at the first storage system;

communicating with the second storage system to receive second metadata of a second data protection service performed at the second storage system; and

examining the first and second metadata to determine whether a first of the data protection objectives associated with the first and second data protection services has been met.

13. The non-transitory machine-readable medium of claim 12, wherein examining the first and second metadata comprises confirming whether the first and second data protection services were performed at a first starting time and lasted for a first duration specified by the first data protection objective.

14. The non-transitory machine-readable medium of claim 13, wherein the operations further comprise confirming whether a first type of the data protection provided by the first and second data protection services conforms to a second type of data protection specified in the first data protection objective.

15. A data processing system, comprising:

a processor; and

a memory, coupled to the processor, storing instruction which when executed by the processor cause the processor to perform operations, the operations including;

defining a service level agreement (SLA) for providing data protection with one of a plurality of data protection levels on data stored in a first system, wherein the SLA includes one or more service level objectives (SLOs), each SLO describing a data protection objective to be met,

applying, using a rule engine, a set of rules to the SLOs to determine a list of actions to be performed in order to achieve the data protection objectives specified by the SLOs, wherein applying a set of rules comprises applying the set of rules using a forward chaining algorithm based on attributes obtained from the SLOs as facts to derive the list of actions, wherein applying a forward chaining algorithm comprises searching based on an inference rule until a condition of the inference rule is known to be true,

provisioning one or more data protection services to be performed at the first storage system and a second storage system that provides data protection for the first storage system, and

evaluating an outcome of the data protection services in view of the SLOs to determine whether the data protection objectives have been satisfied.

16. The system of claim 15, wherein the list of actions includes at least one of data archiving, data backup, data deduplication, data replication, or data migration action.

17. The system of claim 15, wherein the SLOs include at least locality of protected data, a number of copies of the protected data, encryption of the protected data, or retention time of the protected data.

18. The system of claim 15, wherein evaluating an outcome of the data protection services comprises applying the set of rules using a backward chaining algorithm based on the outcome of the data protection services as facts to determine whether a goal of the SLOs has been achieved.

19. The system of claim 18, wherein the operations further comprise:

transmitting a first request to the first storage system to receive first metadata of a first data protection service performed at the first storage system;

communicating with the second storage system to receive second metadata of a second data protection service performed at the second storage system; and

examining the first and second metadata to determine whether a first of the data protection objectives associated with the first and second data protection services has been met.

20. The system of claim 19, wherein examining the first and second metadata comprises confirming whether the first and second data protection services were performed at a first starting time and lasted for a first duration specified by the first data protection objective.

21. The system of claim 20, wherein the operations further comprise confirming whether a first type of the data protection provided by the first and second data protection services conforms to a second type of data protection specified in the first data protection objective.