Abstract: Data from application systems is copied to a server. The server generates different views of some or all of the data and provides the views to services that may be running on other systems. Each view may be of a subset of the data on the server, and the subsets may be mutually exclusive. Each view is in a format appropriate to the service consuming it, and the format may be block level, file level, stream, or other format appropriate to the service. The data may be deduplicated, and the deduplicated data processed by a service. The result of the processing of an object containing a deduplicated portion of data may be applied to other objects sharing the deduplicated portion of data. A workflow may be applied to the objects sharing the deduplicated portion of data.

Abstract: A method, article of manufacture, and apparatus for backing up or archiving objects in the event of imminent failure, comprising receiving an indication of imminent failure, determining a prioritization of the objects, and indicating the prioritized objects to a backup application. Prioritization may be determined by the nature of the imminent failure, and the objects are backed up according to the prioritization. The objects may be prioritized according to object location, object type, or timestamp.

Abstract: A method, article of manufacture, and apparatus for protecting data, comprising receiving information about objects stored on a plurality of hosts, determining whether an object needs to be backed up, and if the object needs to be backed up, requesting each host having the object to provide a portion of the object to a target. Information about the objects and backup may be stored in an index. A requesting host may request an object to be restored to a target. It is determined whether the object is available at the backup and at other hosts, and the backup and hosts having the object may be requested to provide portions of the object to the target, which may be the requesting host. The index may be used to determine availability of the object at the backup and other hosts.

Abstract: A method for protecting objects in a computer system against malware is disclosed. An object is analyzed to determine whether it is infected by malware, and if it is determined to be infected, a backup copy of the object is located in a backup of the objects. The infected object is replaced with the backup copy.

Abstract: A method, article of manufacture, and apparatus for monitoring a location having a plurality of audio sensors and video sensors are disclosed. In an embodiment, this comprises receiving auditory data, comparing a portion of the auditory data to a lexicon comprising a plurality of keywords to determine if there is a match to a keyword from the lexicon, and if a match is found, selecting at least one video sensor to monitor an area to be monitored. Video data from the video sensor is archived with the auditory data and metadata. The video sensor is selected by determining video sensors associated with the areas to be monitored. A lookup table is used to determine the association. Cartesian coordinates may be used to determine positions of components and their areas of coverage.

Abstract: A method, article of manufacture, and apparatus for managing an object are disclosed. In an embodiment, this comprises managing an object having content, in a system having a dynamic policy selector configured with at least one analytic policy applied to evaluate the content of the object. The object is associated to an information management policy. Classification levels may be used, in which classification levels are associated to information management policies and objects are associated with classification levels. Objects containing certain elements or related elements may be associated to form an information group, to which information management policies may be applied as a group. Storage pools may be used for managing objects with similar classification levels or information protection policies.

Abstract: Incremental scanning is disclosed. A system is monitored to detect object events, and a scan list may be updated with information regarding objects to be scanned, based on some of the object events. Objects are scanned based on the information in the scan list.

Abstract: A method, article of manufacture, and apparatus for managing an object are disclosed. In an embodiment, this comprises managing an object having content, in a system having a dynamic policy selector configured with at least one analytic policy applied to evaluate the content of the object. The object is associated to an information management policy. Classification levels may be used, in which classification levels are associated to information management policies and objects are associated with classification levels. Objects containing certain elements or related elements may be associated to form an information group, to which information management policies may be applied as a group. Storage pools may be used for managing objects with similar classification levels or information protection policies.

Abstract: Scanning is disclosed. A scan collection period is determined. A system is monitored to detect object events during the scan collection period, and differential and incremental scan lists may be updated with information regarding objects to be scanned, based on some of the object events. Objects are scanned based on the information in the incremental scan list. Objects are scanned based on the information in the differential scan list. The incremental scan may be performed more than once before the differential scan is performed. Information regarding objects associated with object events occurring outside the scan collection period may be removed from the scan list.

Abstract: A method, article of manufacture, and apparatus for processing auditory communications is disclosed. In an embodiment, this comprises receiving an auditory communication, comparing a portion of the communication to a lexicon comprising a plurality of keywords to determine if there is a negative match to a first keyword from the lexicon, and quarantining the communication if the comparison returns a positive result, wherein the positive result indicates that the communication is not compliant.

Abstract: A method, article of manufacture, and apparatus for efficiently restoring information is disclosed. In an embodiment, this comprises receiving a self-contained datastream and analyzing the self-contained datastream for file headers, corresponding file metadata and corresponding file blocks. Data is then reconstructed based on analyzing the self-contained datastream into reconstructed data, and the reconstructed data is then stored in a storage device. File headers are used to indicate the start of a new file in the self contained datastream. File blocks contain the information necessary to reconstruct the files in the datastream. File metadata describes how to reconstruct the file, such as which file blocks are required for the file, and the location of each file block in the self contained datastream, among others. In an embodiment, the reconstructed data may contain deduped data.

Abstract: Scanning is disclosed. A system is monitored to detect object events, and it is determined whether an object event requires an update to a scan list. If an update is required, the scan list is authenticated. The scan list is updated with information regarding objects associated with the object event. Authentication may be performed by comparing a stored hash value of the scan list with a computed hash value of the scan list. If the scan list is not successfully authenticated, a full scan may be performed or a remotely stored scan list may be used.

Abstract: A method, article of manufacture, and apparatus for tracking a plurality of objects being stored are disclosed. In an embodiment, this comprises computing the hash value of the name of each object being stored, concatenating the hashed values into a hint, and storing the hint in an index. The size of the hash values is determined by dividing the number of objects into the space available for storing the concatenation, and the range of the hash values may be determined by choosing a prime number smaller than the number that can be represented by the space available for storing the concatenation. Either the hint or the longest pathname containing the objects can be stored, and this may be selected based on the application.

Abstract: A method, article of manufacture, and apparatus for inventory control of items in a location. In an embodiment, this comprises an identification tag associated with a transaction authorizing some items to be removed from the location, such as a purchase, an identification tag reader configured to read the identification tag and placed to cover a portion of the location, and a computer configured to process information including the identification tag read by the reader and take action in response, such as issuing an alert. An identification tag reader having erase/reprogram capability may be provided to reprogram identification tags, and the reprogrammed code may include an identification of the transaction. The inventory control system may be further configured to detect when an identification tag is brought back into the location. In some embodiments, encryption is used in reprogramming the identification tag, and authentication is performed when the tag is detected at an egress to the location.

Abstract: Differential scanning is disclosed. A scan collection period is determined. A system is monitored to detect object events during the scan collection period, and a scan list may be updated with information regarding objects to be scanned, based on some of the object events. Objects are scanned based on the information in the scan list. Information regarding objects associated with object events occurring outside the scan collection period may be removed from the scan list.

Abstract: A method, article of manufacture, and apparatus for tracking a plurality of objects being stored are disclosed. In an embodiment, this comprises determining an application associated with the objects being stored, selecting a hint or longest pathname containing the plurality of objects, and storing the selection in the index. The hint may be generated by concatenating at least a portion of a name of each object being stored into the hint, concatenating hash values of the names of the objects, or producing a bitmap of hash values of the names of the objects, depending on available space. In an embodiment, each hint generation may be tried in succession based on determining whether the previous hint fits into the space available for storing the hint.

Abstract: A method, article of manufacture, and apparatus for managing a lifecycle of an auditory communication is disclosed. In an embodiment, this comprises receiving an auditory communication with associated data representing identified keywords in the communication and call transport information. A data for a disposition of the communication is determined from a portion of the identified keywords, a portion of the call transport information, or a portion of the policies invoked. The communication is associated with the date(s).

Abstract: A method, article of manufacture, and apparatus for building portlets from templates and managing templates are disclosed. In an embodiment, this comprises providing a portlet template with configuration user interface components; and using the configuration user interface components to present the portlet template to a user. Attributes of the portlet to be configured are displayed to the user, portlet configuration information is obtained from the user, and the portlet configuration information is used to set portlet attributes. In an embodiment, attributes of the portlet template to be configured are displayed to the user, portlet template configuration information is obtained from the user, and the portlet template configuration information is used to update the template descriptor and other template components. In an embodiment, the portlet templates may be built by creating child portlet templates based on parent portlet templates.

Abstract: A method, article of manufacture, and apparatus for monitoring a location having a plurality of audio sensors and video sensors are disclosed. In an embodiment, this comprises receiving auditory data, comparing a portion of the auditory data to a lexicon comprising a plurality of keywords to determine if there is a match to a keyword from the lexicon, and if a match is found, selecting at least one video sensor to monitor an area to be monitored. Video data from the video sensor is archived with the auditory data and metadata. The video sensor is selected by determining video sensors associated with the areas to be monitored. A lookup table is used to determine the association. Cartesian coordinates may be used to determine positions of components and their areas of coverage.

Abstract: A method, article of manufacture, and apparatus for tracking a plurality of objects being stored are disclosed. In an embodiment, this comprises computing the hash value of the name of each object being stored, transforming the hash value into a plurality of bytes such that none of the bytes has the value of a flag used by the system, concatenating the transformed hashed values into a hint, and storing the hint in an index. In an embodiment, bytes having the flag value are mapped to an unused value during the transformation. In an embodiment, the hint is retrieved from the index and hashed values are transformed back. Mapped values are restored to the flag values. This allows use of the hint with a system that uses a flag in the index as an indicator; for example, to indicate that an endpoint has been reached.