Virtualized data storage vaults on a dispersed data storage network

• US 20090094251A1
• Filed: 10/09/2007
• Published: 04/09/2009
• Est. Priority Date: 10/09/2007
• Status: Active Grant

• Current Assignee: Pure Storage, Inc.
• Original Assignee: Cleversafe Incorporated (International Business Machines Corporation)
• Inventors: Motwani, Mainsh, Dhuse, Greg, Volvovski, Ilya, Thornton, Vance, Bellanca, Jamie, Mark, Zachary, Leggette, Wesley, Gladwin, S. Christopher, Foster, Lynn, Toledano, Sarah
• Granted Patent: US 7,904,475 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 11/1092 Rebuilding, e.g. when physically replacing a failing disk
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: G06F 16/2272 Management thereof
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: Y10S 707/959 Network

Abstract

A system, method, and apparatus for implementing a plurality of dispersed data storage networks using a set of slice servers are disclosed. A plurality of information records are maintained, with each information record corresponding to a dispersed data storage network. The information record maintains what slice servers are used to implement the dispersed data storage network, as well as other information needed to administer a DDSN, such as the information dispersal algorithm used, how data is stored, and whether data is compressed or encrypted.

Claims

1. A distributed computer system implementing a plurality of dispersed data storage networks comprising:

i) a plurality of slice servers each including a network port coupled to a network; and

ii) a grid access computer for receiving at least one request from a client computer and including a network port coupled to said network,

wherein said grid access computer accesses a plurality of information records each specifying a virtual data storage vault comprised of a subset of said slice servers forming a dispersed data storage network, and wherein each of said information records also comprises an access control list specifying at least one account associated with said dispersed data storage network, and wherein said grid access computer (a) identifies a virtual data storage vault associated with said request, (b) extracts a second account from said information record, (c) authorizes said request using said second account and said access control list, and (d) executes said request using said virtual data storage vault.

2. The distributed computer system of claim 1, wherein said information record also specifies an information dispersal algorithm for use on said virtual data storage vault and a set of dispersal parameters including a slice count indicative of a number of data slices a stored data segment is divided into, and a redundancy count indicative of a number of data slices that can be lost without compromising the ability to reconstruct said data segment.

3. The distributed computer system of claim 1, wherein said information record also specifies a maximum amount of storage which may be used by said virtual data storage vault.

4. The distributed computer system of claim 1, wherein said information record also specifies an encryption algorithm for use on data segments stored on said virtual data storage vault.

5. The distributed computer system of claim 1, wherein said information record also specifies a compression algorithm for use on data segments stored on said virtual data storage vault.

6. The distributed computer system of claim 1, wherein at least one slice server comprises a part of a plurality of virtual data storage vaults.

8. The distributed computer system of claim 1, wherein said grid access computer accesses said information records by retrieving said information records from said slice servers.

7. The distributed computer system of claim 1, wherein said information records are maintained by said grid access computer.

7-1. A method of forming a plurality of dispersed data storage networks from a plurality of slice servers, said method operating on at least one computer and comprising the steps of:

i) receiving a request for an operation to be performed on a dispersed data storage network;

ii) identifying a virtual storage vault comprising a plurality of slice servers forming a dispersed data storage network and associated with said request;

iii) extracting an account from said request;

iv) authorizing said request against an access control list using said account; and

v) executing said request.