NETWORK STORAGE SYSTEM FOR A DOWNLOAD INTENSIVE ENVIRONMENT

• US 20150149786A1
• Filed: 02/05/2015
• Published: 05/28/2015
• Est. Priority Date: 03/18/2008
• Status: Active Grant

• Current Assignee: ReduxIO Systems Ltd. (Reduxio Systems, Inc.)
• Original Assignee: ReduxIO Systems Ltd. (Reduxio Systems, Inc.)
• Inventors: PELEG, Nir, SAGI, Or, STRASSER, Amnon
• Granted Patent: US 9,787,692 B2
• Time in Patent Office: Days
• US Class Current: 713/181
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A network storage system for a download intensive environment is provided. The network storage comprises at least a data storage server (DSS) that includes an interface enabling connection of the DSS to a network at a location that enables at least a view of network transactions performed by a plurality of clients; a storage unit; and a system adapted to monitor the network transactions occurring on the network and identification of the network transactions as belonging to a registered client of the DSS, and storing in the storage the transactions with an identification corresponding to the registered client.

Claims

1. A system for directing permanent storage of data by a data storage server (DSS) in a download intensive environment, comprising:

a processor; and

a memory, the memory containing instructions that, when executed by the processing unit, configure the system to;

detect a storage operation on data with respect of a temporary storage;

parse a protocol of the storage operation using a respective protocol parser;

determine an appropriate stream address of the temporary storage respective of the parsed protocol;

determine if the detected storage operation matches a storage operation on a user storage that is associated with a registered client of a virtual file system; and

send a request to the DSS to permanently store the data on a back-end storage (BES), wherein the request includes at least the appropriate stream address upon determination that the detected storage operation matches a storage operation on the user storage.

2. The system of claim 1, wherein the protocol of the storage operation is any of:

a Simple Mail Transfer Protocol (SMTP), bittorrent, eMule, a File Transfer Protocol (FTP), a Hypertext Transfer Protocol (HTTP), and a Post Office Protocol version 3 (POP3).

3. The system of claim 1, wherein the system is further configured to:

cope with out of order packet delivery.

4. The system of claim 1, wherein the BES is a content addressable storage (CAS).

5. The system of claim 1, wherein the system is further configured to:

upon receiving a request for the data from the temporary storage;

cause a first client to send a digest value and a first challenge value to a second client;

cause the second client to send an acknowledgment to the first client, the acknowledgement comprising;

the digest value, a first response, and a second challenge;

cause the first client to send the digest value and a second response;

cause the second client to send the digest value, a retrieval key, and a decryption key; and

cause the first client to delete encrypted data corresponding to the digest value, wherein access by the first client to encrypted data of the second client is enabled by the retrieval key and the decryption key.

6. The system of claim 1, wherein the system is further configured to:

upon receiving a request for the data on the temporary storage by a current client, determine if the data matches a previously stored data associated with a previous client; and

upon determining that the data matches the previously stored data, refer the current client to the previous client.

7. The system of claim 1, wherein the storage operation comprises an array consisting of:

a stream, a byte offset, and a length.

14. A non-transitory computer readable medium having stored thereon instructions for causing one or more processing units to execute the method according to claim 1.

20. The method of claim 14, wherein the challenged client is any one of:

the transacting client, and the at least one subscribed client.

21. A non-transitory computer readable medium having stored thereon instructions for causing one or more processing units to execute the method according to claim 1.

8. A method for directing permanent storage of data by a data storage server (DSS) in a download intensive environment, comprising:

detecting a storage operation on data with respect of a temporary storage;

parsing, by a respective of protocol parser, a protocol of the storage operation;

determining an appropriate stream address of the temporary storage respective of the parsed protocol;

determining if the detected storage operation matches storage operation on a user storage that is associated with a registered client of a virtual file system; and

sending a request to the DSS to permanently store the data on a back-end storage (BES), wherein the request comprises the appropriate stream address, upon determining that the detected storage operation matches a user storage operation of the plurality of user storage operations.

9. The method of claim 8, wherein the protocol of operation is any of:

a Simple Mail Transfer Protocol (SMTP), bittorrent, eMule, a File Transfer Protocol (FTP), a Hypertext Transfer Protocol (HTTP), and a Post Office Protocol version 3 (POP3).

10. The method of claim 8, wherein the BES is a content addressable storage (CAS).

11. The method of claim 8, further comprising:

upon receiving a request for the data from the temporary storage;

causing a first client to send a digest value and a first challenge value to a second client;

causing the second client to send an acknowledgment to the first client, the acknowledgement comprising;

the digest value, a first response, and a second challenge;

causing the first client to send the digest value and a second response;

causing the second client to send the digest value, a retrieval key, and a decryption key; and

causing the first client to delete encrypted data corresponding to the digest value, wherein access by the first client to encrypted data of the second client is enabled by the retrieval key and the decryption key.

12. The method of claim 8, further comprising:

upon receiving a request for the data from the temporary storage by a current client, determining if the data matches a previously stored data associated with a previous client; and

upon determining that the data matches the previously stored data, refer the current client to the previous client.

13. The method of claim 8, wherein the storage operation comprises an array consisting of:

a stream, a byte offset, and a length.

15. A method for sharing data stored on a data storage server (DSS), comprising:

monitoring transactions over a network communicatively connected to the DSS to identify a network transaction of transactional data by a transacting client;

upon identification of the network transaction, determining whether there is a match between the transactional data and a previously stored data associated with at least one subscribed client;

upon determining a match, sending a challenge to at least a challenged client;

receiving a response from each of the at least a challenged client;

determining, based on the response, whether the received response is valid; and

upon determining that the received response is valid, subscribing the transacting client to the previously stored data.

16. The method of claim 15, wherein subscribing the transacting client to the previously stored data further comprises:

providing a decryption key and a retrieval key to the transacting client.

17. The method of claim 16, further comprising:

determining whether an authenticity of the decryption key and the retrieval key is verified.

18. The method of claim 17, further comprising:

upon determining that the authenticity of the decryption key and the retrieval key is unverified, providing a new decryption key and a new retrieval key to the transacting client.

19. The method of claim 15, further comprising:

upon subscribing the transacting client to the previously stored data, deleting the transactional data.

22. A system for directing permanent storage of data by a data storage server (DSS) in a download intensive environment, comprising:

a processor; and

a memory, the memory containing instructions that, when executed by the processing unit, configure the system to;

monitor transactions over a network communicatively connected to the DSS to identify a network transaction of transactional data by a transacting client;

upon identification of the network transaction, determine whether there is a match between the transactional data and a previously stored data associated with at least one subscribed client;

upon determining a match, send a challenge to at least a challenged client;

receive a response from each of the at least a challenged client;

determine, based on the response, whether the received response is valid; and

upon determining that the received response is valid, subscribe the transacting client to the previously stored data.