Abstract: Systems and methods for managing access to computing services include an access manager that receives a request to modify a configuration of a computing service to a new configuration. The access manager stores a previous configuration of the computing service, updates the configuration of the computing service from the previous configuration to the new configuration based on information representing the new configuration, and starts a service request timer for the computing service. The access manager receives a subsequent request. When the subsequent request is a reconnect request, the access manager deletes the stored previous configuration. When the subsequent request is not a reconnect request or a new request the access manager returns an error when the service request timer has not expired, or sets the configuration of the computing service to the previous configuration of the computing service when the timer has expired.

Abstract: Systems and methods for managing access to computing services include an access manager that receives a request to modify a configuration of a computing service to a new configuration. The access manager stores a previous configuration of the computing service, updates the configuration of the computing service from the previous configuration to the new configuration based on information representing the new configuration, and starts a service request timer for the computing service. The access manager receives a subsequent request. When the subsequent request is a reconnect request, the access manager deletes the stored previous configuration. When the subsequent request is not a reconnect request or a new request the access manager returns an error when the service request timer has not expired, or sets the configuration of the computing service to the previous configuration of the computing service when the timer has expired.

Abstract: Systems and methods for managing access to computing services include an access manager that receives a request to modify a configuration of a computing service to a new configuration. The access manger stores a previous configuration of the computing service, updates the configuration of the computing service from the previous configuration to the new configuration based on information representing the new configuration, and starts a service request timer for the computing service. The access manager receives a subsequent request. When the subsequent request is a reconnect request, the access manager deletes the stored previous configuration. When the subsequent request is not a reconnect request or a new request the access manager returns an error when the service request timer has not expired, or sets the configuration of the computing service to the previous configuration of the computing service when the timer has expired.

Abstract: Techniques include systems, computerized methods and computer readable media for creating a private network for one or more execution environments inside of an existing network using a data center container, such that the private network can provide one or more services that are independent of identical services of the existing network. A private network is created in an existing network. A data center container provides a service in the private network that is identical to an existing service provided by the existing network. A data center container manager manages execution of one or more execution environments in the data center container using the service in the private network, such that the one or more execution environments can execute in the private network using the service without interfering with the operation of the existing service in the existing network.

Abstract: Computerized systems and methods are provided for integrating copy data tokens with source code repositories. A first command associated with the version control system stores in the memory a copy of source code and a copy of the data token from the remote repository, comprising source data and mount data. A second command associated with the version control system is executed to create a version of the source code stored in the memory. Based on the execution of the second command a working copy of the copy data is created based on the data token for use with the version of the source code, comprising creating a copy of the copy data from the data source based on the source data, and mounting the working copy to the device based on the mount data, thereby automatically managing the copy data for the version control system.

Abstract: Computerized systems and methods are provided for data virtualization using copy data tokens. A data token is stored that defines attributes associated with copy data, including source data, transformation data, and access data for the copy data. The access data is indicative of a set of access settings for the copy data that define how an instance of the copy data is to be created for the user, and a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access. The data token is transmitted to a remote computer storing the copy data based on the source data in the data token. A copy of the copy data that was generated based on the preparation information and the access data is received.

Abstract: Described are systems and methods for managing access to computing services so the computing services can be bounced back. An access manager receives a request to modify a configuration of a computing service to a new configuration. The access manger stores a previous configuration of the computing service, updates the configuration of the computing service from the previous configuration to the new configuration based on information representing the new configuration, and starts a service request timer for the computing service. The access manager receives a subsequent request. When the subsequent request is a reconnect request, the access manager deletes the stored previous configuration. When the subsequent request is not a reconnect request or a new request the access manager returns an error when the service request timer has not expired, or sets the configuration of the computing service to the previous configuration of the computing service when the timer has expired.

Abstract: Techniques include systems, computerized methods and computer readable media for creating a private network for one or more execution environments inside of an existing network using a data center container, such that the private network can provide one or more services that are independent of identical services of the existing network. A private network is created in an existing network. A data center container provides a service in the private network that is identical to an existing service provided by the existing network. A data center container manager manages execution of one or more execution environments in the data center container using the service in the private network, such that the one or more execution environments can execute in the private network using the service without interfering with the operation of the existing service in the existing network.

Abstract: Computerized systems and methods are provided for integrating copy data tokens with source code repositories. A first command associated with the version control system stores in the memory a copy of source code and a copy of the data token from the remote repository, comprising source data and mount data. A second command associated with the version control system is executed to create a version of the source code stored in the memory. Based on the execution of the second command a working copy of the copy data is created based on the data token for use with the version of the source code, comprising creating a copy of the copy data from the data source based on the source data, and mounting the working copy to the device based on the mount data, thereby automatically managing the copy data for the version control system.

Abstract: Computerized systems and methods are provided for data virtualization using copy data tokens. A data token is stored that defines attributes associated with copy data, including source data, transformation data, and access data for the copy data. The access data is indicative of a set of access settings for the copy data that define how an instance of the copy data is to be created for the user, and a set of access permissions for the copy data that define an access level for the user for the copy data that defines how much of the copy data the user can access. The data token is transmitted to a remote computer storing the copy data based on the source data in the data token. A copy of the copy data that was generated based on the preparation information and the access data is received.

Abstract: A dynamic volume configuration technique is provided which allows storage space within storage devices in the data storage system to be dynamically associated and disassociated (i.e., added and removed) from the volumes on an as-needed basis, without requiring disruption of host activities with respect to the volumes. The persistent identifier of a volume allows all hosts and other data storage systems to “see” the volume. This allows a volume in one data storage system to have associated storage space from another volume in another data storage system. Using these techniques, the invention allows software applications and operating systems on hosts that interface to the data storage system to perceive that a volume is always present on the data storage system, even if storage space understood to be associated with the volume from the host's perspective is allocated elsewhere or is non-existent.

Abstract: A method of managing workflows related to storage services provided by a service provider to a customer (via a management system) is presented. The management system includes a Web server and a workflow process. The Web server presents to a customer a task screen (or set of task screens) for a customer-selected work order request type so that the customer can prepare and submit a work order request to the management system. After receiving the work order request, the Web server uses information contained in and associated with the request to create a database object that includes some or all of the following elements: customer identifier; work order identifier, date/time of request; request state (e.g., new, open or closed); type of request; parameters or arguments to the request; and any textual description provided by the customer. The Web server stores the object in a database.

Abstract: A service provider management system (SPMS) that connects to storage resources in a datacenter controlled by a service provider and a database that stores information about the datacenter and customers that receive the storage resources as a service. The SPMS enables the service provider to allocate storage resources to a customer and to assign ownership to billable devices, such as disks, volumes, ports, and so forth, as well as to generate billing information based on hardware configuration and customer usage. The SPSM is supported on a server architecture, which includes a Web server that exports a first interface to the service provider to enable the service provider to manage the data storage resources to which the SPMS is connected, and a second interface to the customer to enable the customer to manage the allocated data storage resources directly.

Abstract: This invention is a system and method for managing data in a secure manner in a data storage environment that is in communication with a network including an internet-based network. The system includes logic for securely managing internet client's access to data volumes stored on a data storage system, and may also include logic operating with a file server for providing dynamic access of data available to such clients in a secure fashion.

Abstract: Method and apparatus for managing access to a plurality of volumes of storage in a computer system including a host computer. The host computer includes an application layer that includes at least one application program. The application layer is presented with the plurality of volumes of storage that are visible to the application layer. The method of managing access to at least one of the plurality of volumes of storage includes assigning limited access privileges to the application program to access the plurality of volumes of storage. The limited access privileges are less than root access privileges and the at least one of the plurality of volumes of storage is mapped indirectly to one or more physical storage devices so that the at least one of the plurality of volumes of storage does not correspond directly to an actual physical storage device.

Abstract: Scanning a storage device for viruses includes determining physical portions of the storage device that have been modified since a previous virus scan and scanning at least parts of the physical portions for viruses. The physical portions may correspond to tracks of the storage device, sectors of the storage device, and/or to subportions of the storage device. Determining the physical portions of the storage device that have been modified may include creating a table that is indexed according to each of the portions and has entries indicating whether a corresponding one of the portions has been modified, the entries being cleared after a virus scan to indicate that no portions have been modified and setting a specific one of the entries in response to a corresponding one of the portions of the storage device being subject to a write operation. Creating the table may include copying an other table provided by the storage device and/or using an other table provided by the storage device.

Abstract: A data storage system includes methods and apparatus that provide volumes for access by host computing devices. The volumes can have a storage size that is independently configurable from an actual amount of data storage that may or may not be associated with the volume. The volumes also have a persistent identifier. The volumes can have any amount of associated storage space allocated to the volume, including none, within the data storage system. Since the storage size and associated storage space are each independently configurable from each other, host that interface with the data storage system can perceive the volumes as being larger than they really are. A dynamic volume configuration technique is provided which allows storage space within storage devices in the data storage system to be dynamically associated and disassociated (i.e., added and removed) from the volumes on an as-needed basis, without requiring disruption of host activities with respect to the volumes.

Abstract: Methods and apparatus for performing a data migration in a clustered computer system. In one aspect, the availability of the data being migrated is maintained during the migration. In another aspect, a data set is migrated by a transfer utility in one of the hosts in the cluster, and in response to a failure of the host, the migration is resumed without restarting from the beginning point of the data set. In a further embodiment, the hosts in the cluster have agents associated therewith to manage the data migration, and prior to taking at least one action associated with the data migration, the agents coordinate to ensure that the hosts in the cluster are prepared to have the at least one action taken.

Abstract: A data management technique for managing accesses to data at a shared storage system includes a filter at the storage system. The filter is coupled to a configuration table, which identifies which of a number of coupled host processors have accesses to each of the resources at the device. During operation, requests received from the host devices are filtered by the filter, and only those requests to resources that the individual host devices have privilege to access are serviced. Advantageously, data security is further enhanced by authenticating each of the requests received by the storage system to verify that the host processor that is represented as forwarding the request is the indicated host processor. In addition, transfers of data between the storage system and the host processor may be validated to ensure that data was not corrupted during the data transfer.

Abstract: This invention is a system and for managing data in a secure manner in a data storage environment that is in communication with a network including an internet-based network. The system includes computer-executable logic or software for securely managing internet client's access to data volumes stored on a data storage system, and may also include logic operating with a file server for providing dynamic access of data available to such client's in a secure fashion.