Abstract: A log data service in a virtual environment that allows customers of a compute service provider to access system, application and custom log files associated with virtual machine instances that are executing. In some embodiments, log data can be received that includes events or messages from virtual machines in a multi-tenant environment. The log data can be transformed into metric data, which can be used by the customer to generate statistics, view graphs, and generally monitor the customer's virtual machine instances. The log data can also be stored as a service so that the customer has a central repository for which to access the log data.

Abstract: A method includes determining, by a first client and a second client module, that a first data object and a second data objects are related. The method further includes dispersed storage error encoding the first data object to produce a first plurality of sets of encoded data slices and the second data object to produce a second plurality of sets of encoded data slices. The method further includes sending, by the first client module, first requests regarding the first plurality of sets of encoded data slices to a set of storage units. The method further includes sending, by the second client module, second requests regarding the second plurality of sets of encoded data slices to the set of storage units. The method further includes processing, by a binding module, remaining phases of the first and second write requests as a single write operation for the first and second data objects.

Abstract: A storage system provides shared storage by utilizing dispersed storage devices while optimizing both the placement of data across the dispersed storage devices and the method for accessing the stored data. The storage system enables high level of scalability and performance while minimizing resource consumption.

Abstract: Approaches to expose a remotely located file on top of a virtual volume, at the volume level. The need to backup individual files as opposed to backing up the entire container volume in sparse mode had become apparent. Creating a novel method of exposing individual backed up files at the volume level avoids the associated reboot issues, performance issues and the need to operate at the file system level. The backup storage device can be any arbitrary device, such as a dedupe storage, NAS device, CIFS share, FTP server, or any other type of storage device.

Abstract: A near end point of presence (PoP) of a cloud proxy service receives, from a client device, a request for a network resource. A far end PoP from a plurality of PoPs of the cloud proxy service is identified. Responsive to determining that a version of the network resource is stored in the near end PoP, a request for the network resource is transmitted to the far end PoP with a version identifier that identifies that version. The far end PoP receives, from the near end PoP, a response that includes difference(s) between the version of the network resource stored in the near end PoP with a most current version of the network resource. The response does not include the entire network resource. The near end PoP applies the specified difference(s) to the version that it has stored to generate an updated version of the network resource, and transmits it to the client device.

Abstract: A method and system for improving an operation of an automated IT system is provided. The method includes identifying a minimum set of software applications associated with requirements of processes executed by a hardware device with respect to an IT system. A list of sub-features associated with software based solutions is generated and associated evaluation code is generated. Software features are identified and software operational solutions are generated. Gating criteria adjustment code for selecting additional software applications is generated and executed resulting in improved operation of the hardware device.

Abstract: Systems and methods for providing awareness of a host file system on a storage device are described. In one embodiment, a storage device includes a host interface and a file awareness block. The host interface provides an interface between a host and the storage device. The file awareness block provides an awareness of the host file system to the storage device.

Abstract: According to one embodiment, a first control module (CM) of a storage system receives a first request from a client device to read first data stored in a second storage location of a storage module, where the second storage location is associated with a second CM. The first CM includes a first processor and the second CM includes a second processor. The first CM transmits a first control signal the second CM via the inter-processor link to request the second CM to copy the first data from the second storage location to a first memory location associated with the first CM. The first CM initiates a first data transaction to transmit the first data from the first memory location to the client device through a communication fabric without having to go through the second CM.

Abstract: A method, computer program product, computing system, and system for machine replication are described. The method may include creating a crash-consistent replica of a source machine by replicating sectors from a source drive on the source machine to a target drive on a target machine wherein the sectors on the target drive have the same offset as the sectors on the source drive. The method may further include, in response to determining that a sector replicated from the source drive to the target drive has changed on the source drive, replicating the sector that changed on the source drive to the target drive on the target machine out-of-order. The method may also include creating an application-consistent replica version of the source machine by creating a snapshot of the source machine and replicating sectors from the snapshot to the target drive on the target machine.

Abstract: Techniques are disclosed relating to an in-memory, software-managed cache configured to store web application data. In some embodiments, operations to cache data specify a visibility parameter for the data, among a plurality of namespaces. In some embodiments, requests to access cached data are checked, based on a request's namespace and the visibility parameter for the cached data, to determine whether they are allowed to proceed. In some embodiments, this may facilitate caching data using shared computing systems and data structures while maintaining configurable privacy for cached data.

Abstract: The present application generally relates to systems, devices, and methods to conduct the secure exchange of encrypted data using a three-element-core mechanism consisting of the key masters, the registries and the cloud lockboxes with application programming interfaces providing interaction with a wide variety of user-facing software applications. Together the mechanism provides full lifecycle encryption enabling cross-platform sharing of encrypted data within and between organizations, individuals, applications and devices. Control of the private key required for decryption is maintained by the information owner. More specifically, the mechanism establishes unique identities, verifies authenticity, generates and securely exchanges asymmetric encryption key pairs, encrypts, transmits, receives and decrypts data to/from cloud lockboxes; creates and appends metadata specific to the applications and retrieves and/or act upon metadata.

Abstract: Systems, methods, and non-transitory computer-readable storage media for directing conferences to on-premises media agents and cloud-based media agents. A centralized controller and a plurality of cloud-based media agents are disposed within a cloud or other remote or virtual network, and a plurality of on-premises media agents are provided on-premises. The centralized controller manages the directing and forwarding of conferences and is in communication with the cloud-based media agents and the on-premises media agents.

Abstract: Systems and techniques for transferring one or more files by connecting to a communications system host; sending, to a client connected to the communications system host, a request to transfer one or more files; when a client permits access to the one or more files, establishing a direct socket connection from the client and bypassing the communications system host; and initiating the transfer of the one or more files from the client over the direct socket connection.

Abstract: A method, system and computer readable medium for joining multiple virtual machines (VMs). The method includes identifying a first VM executing a first operating system (OS) for joining with a second VM executing a second OS, wherein the first OS and the second OS are incompatible. A new VM having a first new disk and a second new disk is created. The method includes creating a first image of a first disk associated with the first VM and a second image of a second disk associated with the second VM, installing the first image into the first new disk and the second image into the second new disk, and configuring the new VM to include a dual boot function enabling boot up of the new VM with either the first OS or the second OS.

Abstract: The disclosed techniques provide systems and methods for deletion of end-user messages, message threads, attachments, and/or other message information. More specifically, a key-value store residing in computer memory on the storage system is described. Each value in the key-value store is indexed by a key and structured to include multiple column portions associated with multiple column families. In one embodiment, a deletion column family having an associated retention policy for data stored therein is defined.

Abstract: A method for invalidating content segments of a bitstream. The method comprises a step of delivering a manifest file from an origin server to a content delivery network. The manifest file may have a time-to-live value and may be redelivered based on the time-to-live value. The method comprises a step of delivering one or more content segments from the origin server to the content delivery network. The manifest file may contain pointers to the content segments. The method comprises a step of modifying the manifest file at the origin server to include invalidation information based on an input signal. The method comprises a step of invalidating the content segments throughout the content delivery network based on the invalidation information.

Abstract: A storage system and a method for processing a data operation request are disclosed. The method is applied to a storage system that has a write once read many (WORM) function. In the method, after the storage system receives a data operation request, which is used to change data stored in the storage system, sent by an application server, the storage system acquires a time difference between a real-time clock (RTC) and a reference clock, wherein the RTC is configured to provide system time for the storage system, and the reference clock cannot be modified when the system is running. Then, the storage system determines whether the time difference is greater than an accumulated time precision error of the reference clock, and refuses to execute the data operation request when the time difference is greater than the accumulated time precision error.

Abstract: A system for providing real-time streaming of data in non-POSIX formats to systems in POSIX formats in the general context of system backup and recovery. The system uses an index to manage storage and retrieval of data in non-POSIX formats. While retrieving the backup, the system presents a virtual volume to a hypervisor or other similar device to create a virtual machine that allows the user to make read or write requests with respect to the backup before it is completely restored. The system merges any changes to the virtual volume, due to write requests, with the complete, backed-up volume. In one embodiment, a system backup is stored in object storage and can be recovered in real-time, allowing a user to access and use the system before it has finished recovering.

Abstract: A method for executing an application on a processor, wherein executing the application includes accessing a data file on a local storage. The method includes the steps of: producing an instruction to use a data file on a local storage; sending a request to retrieve the data file; intercepting the request and temporarily suspending it; downloading the data file from a remote storage to the local storage; allowing the request to retrieve the data file to complete; and using the data file.

Abstract: A cluster based file service may operate on a cluster of two or more independent devices that have access to a common data storage. The file service may have a namespace definition with each device in the cluster, but may be modified by any device operating the file service. Each instance of the file service may identify and capture a command that changes the namespace structure and cause the change to be propagated to the other members of cluster. If one of the devices in the cluster does not successfully perform an update to the namespace structure, that device may be brought offline. The cluster based file service may permit adding or removing devices from the cluster while the file service is operating, and may provide a high throughput and high availability file service.

Abstract: A cloud storage system that includes at least one interface that connects the cloud storage system to a data network, at least one non-volatile mass memory, and at least one control unit connected to the interface and to the at least one mass memory and arranged to 1) receive requests from a user with regard to data objects from the interface according to a data transmission protocol, 2) store data objects transmitted according to a write request in the at least one mass memory and 3) retrieve data objects requested according to a read request from the at least one mass memory, wherein a predetermined storage period is assigned to each data object, stored in the at least one non-volatile mass memory by a write request, at the latest upon receiving the write request, and the stored data objects in a predetermined group cannot be changed by subsequent requests according to the protocol via the interface before expiration of the assigned storage period.

Abstract: A media file exchange system that supports group collaboration sessions in which media files are being shared with one or more participants. The system augments real-time media collaboration where one or more users have shared media to a group collaboration session. The system allows participants in the collaboration group to indicate their desire to share a media file to one, a few, or an entire group. The media file to be shared and a specific one of the receiving user devices are selected on a participants device other than the device owning the media. The system automatically moderates the exchange of the information between the participants.

Abstract: A storage system provides shared storage by utilizing dispersed storage devices while optimizing both the placement of data across the dispersed storage devices and the method for accessing the stored data. The storage system enables high level of scalability and performance while minimizing resource consumption.

Abstract: An approach is provided for determining a cloud provider identifier associated with a request to provision one or more communication services. The approach further involves validating the request by matching the cloud provider identifier against another copy of the cloud provider identifier associated with a session over which the provisioning request was received.

Abstract: Examples of techniques for generating streaming analytics applications are described herein. An example computer-implemented method includes receiving, via a processor, subject matter requirements in a semi-structured format. The method includes classifying, via the processor, the subject matter requirements based on a predefined taxonomy. The method includes extracting, via the processor, a list of entities from the subject matter requirements based on grammar. The method includes generating a solution based on a glossary and the list of extracted entities. The method includes generating, via the processor, a streaming analytics application based on the solution.

Abstract: In general, aspects of the present disclosure are directed to techniques for migrating social networking connections in a social network from one profile to another profile. A first incoming connection from a third profile in a social network to a first profile in the social network may be determined. A first outgoing connection to a fourth profile in the social network from the first profile in the social network may be determined. A second incoming connection from the third profile to a second profile may be created based at least in part on the first incoming connection. A second outgoing connection to the fourth profile from the second profile may be created based at least in part on the first outgoing connection.

Abstract: Techniques described and suggested herein include systems and methods for logging execution of code using thread-local output buffers. For example, one or more output buffers are allocated to one or more threads executing on a computing system. A global declaration list containing information relating to log types (e.g., verbose log descriptions, templates for specific variables, and the like) may be implemented, and the global declaration list may be generated as part of an initialization process for some or all of the threads. Log events from executing threads may be stored in the output buffers in a fashion conforming to the global declaration list, and may be retrieved asynchronously relative to the executing threads.

Abstract: An uploading method for an electronic apparatus includes: determining whether a current location of the electronic apparatus is recorded on an allowed network information list stored in a storage device; if the current location of the electronic apparatus is recorded on the allowed network information list, uploading the group of files according to an allowed network configuration corresponding to the current location; and if the current location of the electronic apparatus is not recorded on the allowed network information list, performing a network selecting process related to the current location.

Abstract: In one embodiment, a computer program product includes a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code including computer readable program code configured to initialize an internal look-up table cache provided internally to a switching processor, the internal look-up table cache being configured to store a plurality of look-up entries and being organized into at least three segments: a persistent flows entries segment, a non-persistent flows entries segment, and an access control list (ACL) segment. Each look-up entry relates to a traffic flow which has been or is anticipated to be received by a switching processor configured to access the internal look-up table cache. The computer readable program code is also configured to manage the internal look-up table cache to store entries relating to a particular segment type into a corresponding segment of the internal look-up table cache.

Abstract: Exemplary methods for minimizing contention among multiple threads include maintaining a plurality of linked lists of elements, each linked list corresponding to one of a plurality of threads accessing cache entries, each element of each linked list corresponding to one of the cache entries, wherein each linked list comprises a head element and a tail element, the head element corresponding to a most recently used (MRU) cache entry among all cache entries accessed by a corresponding thread, and the tail element corresponding to a least recently used cache entry among all cache entries accessed by the corresponding thread. In response to a cache eviction request, determining a LRU cache entry among the plurality of cache entries based on values accessed from one or more of the tail elements of the linked lists, and evicting the determined LRU cache entry by populating the determined LRU cache entry with the new data.

Abstract: Disclosed is a computer program stored in a computer-readable medium performing correlation matching for an early-arrived-message. The computer program allows a computer to perform the following steps and the steps include transmitting a message; registering a listener; determining whether an early-arrived-message is present by checking an early-arrived-message map; and performing correlation matching of the listener and the message when the early-arrived-message is present, in which the listener performs correlation matching with the message and when the correlation matching is performed, the listener permits a process based on the message to be performed.

Abstract: A method for providing access to objects associated with a particular client in a cloud storage system is disclosed. The method includes the steps of establishing a connection with a user, providing a client namespace associated with the client to the user, where the client namespace represents objects stored on the cloud storage system and objects stored on a private storage system apart from the cloud storage system, receiving a request from the user to access an object stored on the private storage system, and providing information to the user to facilitate access to the object stored on the private storage system by said user. Other systems and methods are also disclosed. Important advantages of the present invention are facilitated by separating the logic for user access (control plane) from the actual storage (Storage plane). Private file system access can still be managed from the cloud, while keeping the client data private.

Abstract: A method for any community of interest to conduct secure exchange of encrypted data using a three-party security mechanism consisting of key masters, registries and cloud lockboxes. The registries establish unique identities, verify authenticity, and create directories of individuals, members, cloud lockboxes and other registries. The registries manage permissions lists communicated to the cloud lockboxes as well as detecting and halting anomalous activity. The key masters operated by members to manage keys for individuals, handle encryption and decryption and conduct key exchanges with other members. The cloud lockboxes manage file storage, retrieval and access control. Related application programming interfaces support multiple levels of integration and generate metadata specific to the needs of the community of interest. Community of interest establishes operating parameters including: selecting an encryption algorithm, establishing identity verification processes and selecting a security level.

Abstract: Embodiments disclosed herein provide advantageous methods and systems that use multicast communications via unreliable datagrams sent on a protected traffic class. These methods and systems provide effectively reliable multicast delivery while avoiding the overhead associated with point-to-point protocols. Rather than an exponential scaling of point-to-point connections (with expensive setup and teardown of the connections), the traffic from one server is bounded by linear scaling of multicast groups. In addition, the multicast rendezvous disclosed herein creates an edge-managed flow control that accounts for the dynamic state of the storage servers in the cluster, without needing centralized control, management or maintenance of state. This traffic shaping avoids the loss of data due to congestion during sustained oversubscription. Other embodiments, aspects and features are also disclosed.

Abstract: Embodiments disclosed herein provide advantageous methods and systems that use multicast communications via unreliable datagrams sent on a protected traffic class. These methods and systems provide effectively reliable multicast delivery while avoiding the overhead associated with point-to-point protocols. Rather than an exponential scaling of point-to-point connections (with expensive setup and teardown of the connections), the traffic from one server is bounded by linear scaling of multicast groups. In addition, the multicast rendezvous disclosed herein creates an edge-managed flow control that accounts for the dynamic state of the storage servers in the cluster, without needing centralized control, management or maintenance of state. This traffic shaping avoids the loss of data due to congestion during sustained oversubscription. Other embodiments, aspects and features are also disclosed.

Abstract: Embodiments of the present invention provide a capacity expansion method and device, so as to reduce the time needed by capacity expansion of a hard disk. The method specifically includes: dividing, in a distributed redundant array of independent disks RAID system, each hard disk into virtual hard disks of equal size equally; dividing an original hard disk into X groups equally; selecting m virtual hard disks from each hard disk in sequence to form one original hard disk; selecting m virtual hard disks from each added hard disk and inserting the m virtual hard disks into the virtual hard disk group; moving, in the virtual hard disk group, data in virtual hard disks of the original hard disk to the virtual hard disks of the added hard disk. The present invention is applied to capacity expansion of a hard disk.

Abstract: A method in a computer for detecting a file encryption attack. The computer detects an attempt to overwrite current file data of a file with new file data. The computer then compares the new file data to the current file data to obtain a measure of the difference between the current and the new file data, and if the difference exceeds a threshold, the computer considers this to identify a file encryption attack.

Abstract: An approach is presented for making the use of a mobile device more socially suitable. Remote control application programming interfaces and installation packages are specified to developers for designing applications that can be controlled via a main device (e.g., a mobile phone) and one or more accessory devices (e.g., a watch). Specifically, each application is required to have two installable components—one that resides on the main device and one that is automatically installed on an associated remote accessory device. By enabling the seamless installation of these two components, a new paradigm or ecosystem for how applications are to be created and installed is introduced. In this new paradigm, application developers will not only develop the applications, but they will also design and define a way to make their applications remotely controllable and reachable from an accessory device, thus making the associated mobile devices running such applications more socially suitable.

Abstract: A mobile storage system is disclosed that in one aspect identifies a geographical location change of a user, such as movement from a first geographical location to a second geographical location. In response, the mobile storage system may move the user's information to a storage device associated with the second geographical location so that the user's information may be accessed by the user more efficiently.

Abstract: An apparatus counts, for each piece of data, an access count indicating a number of times of access to the each piece of data for every unit time so as to store a management information element including the access count and identification information identifying the each piece of data. The apparatus deletes, from the plurality of management information elements stored in a memory, a management information element that includes the access count having a value minimum among the plurality of management information elements, when a number of the plurality of management information elements reaches a predetermined number. The apparatus determines whether there is a piece of data that satisfies a condition related to rapid increase of access, based on the access counts included in the plurality of management information elements.

Abstract: A mechanism is provided in a data processing system for de-duplication aware secure delete. Responsive to receiving a secure delete request for a file, the mechanism identifies a list of file blocks to be securely deleted from a physical disk device. Responsive to determining at least one virtual block of another file refers to a given disk block corresponding to a file block in the list, the mechanism copies the given disk block to generate a copied disk block in the physical disk device and updates a pointer of the at least one virtual block to refer to the copied disk block. The mechanism writes a secure delete pattern for each file block in the list of file blocks to a disk block in the physical disk device without performing de-duplication processing.

Abstract: An information processing apparatus is connected via a network to an electronic apparatus, and includes a first storage that stores a first file received from the electronic apparatus in response to a request from the electronic apparatus, a detection unit that detects that the first file is stored in the first storage, a similarity calculation unit that calculates similarity levels between the first file and other files stored in the first storage based on characteristic information of the first file and characteristic information of the other files when the detection unit detects that the first file is stored in the first storage, and a first conversion unit that generates a second file by converting a first data format of the first file into a second data format different from the first data format based on the similarity levels.

Abstract: A network storage server system includes a distributed object store and a metadata subsystem. The metadata subsystem stores metadata relating to the stored data objects and allows data objects to be located and retrieved easily via user-specified search queries. It manages and allows searches on at least three categories of metadata via the same user interface and technique. These categories include user-specified metadata, inferred metadata and system-defined metadata. Search queries for the metadata can include multi-predicate queries.

Abstract: A systematic distributed storage system (DSS) comprising: a plurality of storage nodes, wherein each storage node configures to store a plurality of sub blocks of a data file and a plurality of coded blocks, a set of repair pairs for each of the storage nodes, wherein the system is configured to use the respective repair pair of storage nodes to repair a lost or damaged sub block or coded block on a given storage node. Also a distributed storage system DSS comprising h non-empty nodes, and data stored non homogenously across the non-empty nodes according to the storing codes (n,k). Further a method for determining linear erasure codes with local repairability comprising: selecting two or more coding parameters including r and ?; determining if an optimal [n, k, d] code having all-symbol (r, ?)-locality (“(r, ?)a”) exists for the selected r, ?; and if the optimal (r, ?)a code exists performing a local repairable code using the optimal (r, ?)a code.

Abstract: The present disclosure relates generally to the field of reducing application input/output operations from a server having data stored on (e.g., remotely stored on) de-duped storage. In various embodiments, reducing application input/output operations from a server having data stored on (e.g., remotely stored on) de-duped storage may be implemented in the form of systems, methods and/or algorithms.

Abstract: A method and system that enables operation of a file system-based queue that supports the efficient and fair distribution of messages among a plurality of processors.

Abstract: One object of the present invention is a method for access to subscription data stored in a database entity of a mobile communication network referred to as first database entity, storing subscription data referred to as first subscription data for support to network entities of the mobile communication network entities referred to as first network entities, the method comprising a step wherein a database entity of the mobile communication network referred to as second database entity, storing subscription data referred to as second subscription data for support to network entities of the mobile communication network referred to as second network entities, communicates with the first database entity to have access to at least part of the first subscription data, a step wherein an Application Server communicates with the second database entity, to have access to the at least part of first subscription data via the second database entity.

Abstract: Embodiments of systems and methods are described for instant provisioning (e.g., cloning, copying, replicating, migrating, backing up, restoring, etc.) of virtual machines, virtual machine files, or other types of files (e.g., database files). In some implementations, a cloned virtual machine file can present an illusion to multiple applications accessing the cloned file that the cloned file contains all the appropriate data (e.g., a file system volume), even while the clone file is still being filled with relevant data. In some embodiments, the systems and methods use a file system filter driver to intercept and redirect certain input/output (I/O) requests to the cloned file. The file system filter driver may use a data structure (e.g., a bitmap) to determine which logical units of the clone file have already been filled with data. In some embodiments, the systems and methods use the operating system to handle cached I/O requests, which may improve efficiency.

Abstract: Embodiments provide a solution for controlling file migration in archiving systems. A networked device can be configured to, during an archiving process, exclude or otherwise prevent files from migrating to tape or another archiving appliance connected to the networked device which, in one embodiment, implements an archive node appliance. The archive node appliance may be configured to start an archiving process to store a file. The archiving process may cause the file to be stored in a share or directory on the archive node appliance. The archive node appliance may check a file exclusion policy associated with the share or directory to determine whether the file is to be excluded from migration. The archive node appliance may stop the archiving process if it determines that the file exclusion policy contains a pattern that matches the file name. One example of such a pattern can be a user-defined glob.

Abstract: Data management systems and methods include a cloud-based platform coupled to a system of agents or folders hosted on client devices. The platform does not store actual data but instead makes use of metadata provided by the agents to track a location of all data in the system and manage the distributed storage, movement and processing of the actual data among the agents. In so doing, the platform pools networked storage into “virtual clusters” using local storage at the agents. The agents collectively monitor, store, and transfer or move data, and perform data processing operations as directed by the platform, as described in detail herein. The agents include agents hosted on or coupled to processor-based devices, agents hosted on devices of a local area network, agents hosted on devices of a wide area network, agents hosted on mobile devices, and agents hosted on cloud-based devices.