Accessing objects in hosted storage

• US 9,154,502 B2
• Filed: 01/31/2013
• Issued: 10/06/2015
• Est. Priority Date: 01/31/2013
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Erb, David, Aikas, Erkki Ville
• Primary Examiner(s): ABYANEH, ALI S
• Application Number:
  US13/756,383
• Publication Number:
  US 20140215574A1
• Time in Patent Office: 978 Days
• Field of Search: 726/2, 726/4, 726/27
• US Class Current: 1/1
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A hosted storage service stores a virtual data object that corresponds to data. The virtual data object includes metadata that enables access to the data in a delegated storage service but does not include the data. A delegate storage service stores the data. The hosted storage service receives a request for access to the virtual object and sends a response that includes metadata to access the data in a delegated storage service. The delegate storage service receives a request for access to the data based on the metadata. In response to receiving the request for access to the data object, the delegate storage service sends the data to the client application.

Claims

1. A system comprising:

a hosted storage service comprising at least one processor and at least one computer readable memory and configured to;

store a virtual data object that corresponds to data stored in a delegated storage service, wherein the virtual data object includes metadata that enables access to the data that corresponds to the virtual data object but does not include the data that corresponds to the virtual data object;

receive, from a client application, a request for access to the virtual data object;

send a response that includes the metadata that enables access to access the data that corresponds to the virtual data object;

store a data object that contains data for the data object;

receive, from the client application, a request for access to the data object;

send a response that includes the data for the data object; and

the delegated storage service comprising at least one processor and at least one computer readable memory and configured to;

store the data that corresponds to the virtual data object;

receive, from the client application, a request for access to the data that corresponds to the virtual data object;

in response to receiving the request for access to the data that corresponds to the virtual data object, send the data that corresponds to the virtual data object to the client application;

the client application configured to;

send the request for access to the virtual data object to the hosted storage service;

receive, from the hosted storage service, the response that includes metadata that enables access to the data that corresponds to the virtual data object;

generate the request for access to the data that corresponds to the virtual data object based on the metadata;

send the request for access to the data that corresponds to the virtual data object to the delegated storage service;

receive the data that corresponds to the virtual data object from the delegated storage service;

send the request for the data object to the hosted storage service; and

receive, from the hosted storage service, the response that includes the data for the data object.

2. The system of claim 1 wherein the request for access to the virtual data object includes user credentials for a user and the hosted storage service is configured to:

determine that the user is authorized to access the virtual data object based on the user credentials and an access control list associated with the virtual data object; and

in response to determining that the user is authorized to access the virtual data object, send, to the client application, the response that includes the metadata that enables access to the data that corresponds to the virtual data object.

3. The system of claim 1 wherein the hosted storage service is configured to:

receive a request to store the virtual data object, the request indicating that the virtual data object should be stored as a virtual data object and including information that enables access to the data that corresponds to the virtual data object in the delegated storage; and

in response to receiving the request to store the virtual data object, create the virtual data object.

4. The system of claim 1 wherein the client application is authenticated by the hosted storage service and the client application is not authenticated by the delegate storage service.

5. A method performed by one or more processors, the method comprising:

storing, by a hosted storage service, a virtual data object that corresponds to data stored in a delegated storage service, wherein the virtual data object includes metadata that enables access to the data that corresponds to the virtual data object but does not include the data that corresponds to the virtual data object;

receiving, by the hosted storage service and from a client application, a request for access to the virtual data object;

sending, from the hosted storage service, a response that includes the metadata that enables access to the data that corresponds to the virtual data object such that the client application is able to access the data that corresponds to the virtual data object from the delegated storage service;

receiving, by the delegated storage service, a request for access to the data that corresponds to the virtual data object based on the metadata;

sending, from the delegated storage service, the data that corresponds to the virtual data object;

storing, by the hosted storage service, a data object that contains data for the data object;

receiving, by the hosted storage service and from the client application, a request for access to the data object; and

sending, by the hosted storage service, a response that includes the data for the data object.

6. The method of claim 5, wherein the request for access to the virtual data object includes user credentials for a user, the method further comprising:

determining, by the hosted storage service, that the user is authorized to access the virtual data object based on the user credentials and an access control list associated with the virtual data object; and

in response to determining that the user is authorized to access the virtual data object, sending, by the hosted storage service to the client application, the response that includes the metadata that enables access to the data that corresponds to the virtual data object.

7. The method of claim 5, further comprising:

receiving, by the hosted storage service, a request to store the virtual data object, the request indicating that the virtual data object should be stored as a virtual data object and including information that enables access to the data that corresponds to the virtual data object in the delegated storage; and

in response to receiving the request to store the virtual data object, creating, by the hosted storage service, the virtual data object.

8. The method of claim 5 wherein the client application is authenticated by the hosted storage service and the client application is not authenticated by the delegate storage service.

9. One or more non-transitory computer readable storage medium storing one or more computer programs, the programs comprising instructions that, when executed by one or more processing devices, cause the one or more processing devices to perform operations comprising:

storing, by a hosted storage service, a virtual data object that corresponds to data stored in a delegated storage service, wherein the virtual data object includes metadata that enables access to the data that corresponds to the virtual data object but does not include the data that corresponds to the virtual data object;

receiving, by the hosted storage service and from a client application, a request for access to the virtual data object;

sending, from the hosted storage service, a response that includes the metadata that enables access to the data that corresponds to the virtual data object such that the client application is able to access the data that corresponds to the virtual data object from the delegated storage service;

receiving, by the delegated storage service, a request for access to the data that corresponds to the virtual data object based on the metadata;

sending, from the delegated storage service, the data that corresponds to the virtual data object;

storing, by the hosted storage service, a data object that contains data for the data object;

receiving, by the hosted storage service and from the client application, a request for access to the data object; and

sending, by the hosted storage service, a response that includes the data for the data object.

10. The computer readable storage medium of claim 9, wherein the request for access to the virtual data object includes user credentials for a user, the method further comprising:

determining, by the hosted storage service, that the user is authorized to access the virtual data object based on the user credentials and an access control list associated with the virtual data object; and

in response to determining that the user is authorized to access the virtual data object, sending, by the hosted storage service to the client application, the response that includes the metadata that enables access to the data that corresponds to the virtual data object.

11. The computer readable storage medium of claim 9, the method further comprising:

receiving, by the hosted storage service, a request to store the virtual data object, the request indicating that the virtual data object should be stored as a virtual data object and including information that enables access to the data that corresponds to the virtual data object in the delegated storage; and

in response to receiving the request to store the virtual data object, creating, by the hosted storage service, the virtual data object.

12. The computer readable storage medium of claim 9, wherein the client application is authenticated by the hosted storage service and the client application is not authenticated by the delegate storage service.