Abstract: A computer readable storage device includes a first memory section that stores operational instructions that, when executed, cause a computing device to, as data accesses occur for a plurality of data objects of a storage container, update object values to produce updated object values, update object retention costs to produce updated object retention costs, adjust a dynamic retention threshold based on the updated object values and the updated object retention costs and update a data object retention policy for a data object based on the dynamic retention threshold to produce an updated retention policy for the data object. The computer readable storage device includes a second memory section that stores operational instructions that, when executed, cause the computing device to, when a data access is a deletion request, utilizing a current updated data object retention policy to determine and execute a deletion-retention option for the data object.

Abstract: A method begins by obtaining dispersed storage network (DSN) operational issue information concerning a DSN memory issue in a first locally operated DSN memory of a plurality of locally operated DSN memories. The method continues with determining whether the DSN memory issue is regarding a local DSN issue or a global DSN issue. When the DSN memory issue is the global DSN issue, the method continues with determining a corrective action in response to the DSN memory issue and determining whether the global DSN management unit is configured for automatic correction of the DSN memory issue. When the global DSN management unit is configured for automatic correction of the DSN memory issue in the first locally operated DSN memory of the plurality of locally operated DSN memories, the method continues with executing the corrective action in the first locally operated DSN memory.

Abstract: A method a dispersed storage network (DSN) begins by detecting a missing encoded data slice storage error associated with a current revision of a storage resource mapping, where storage resources of the DSN are selected for storage of encoded data slices in accordance with a distributed agreement protocol function on an identifier of the encoded data slices utilizing the current revision of the storage resource mapping. The method continues by accessing, for one or more previous revisions, a storage resource mapping history to identify a next oldest revision of the storage resource mapping. The method continues by determining, for a location cycle, whether the missing encoded data slice is available from a previous storage resource in accordance with the identified next oldest revision of the storage resource mapping and when locating the data within the previous storage resource, facilitating migration of the missing encoded data slice.

Abstract: A method for execution by one or more processing modules of one or more computing devices of a dispersed storage network (DSN). The method begins by receiving a data access requests with regards to a data object. The method continues by identifying a vault set based on the data access request, where a plurality of storage vaults includes the vault set. The method continues by obtaining configuration information associated with the vault set and determining whether to process the data access request based on the obtained configuration information associated with the vault set.

Abstract: A method includes generating an entry for inclusion in a configuration queue regarding a configuration submission regarding DSN managed by a managing unit that uses a manager's configuration database stored in a first database. The method further includes updating a first version of the configuration queue stored in first database and a second version of the configuration queue stored in a manager's vault to include the entry. When the manager's configuration database requires restoring, the method further includes copying a backup version of the manager's configuration database to the first database to create an initially restored manager's configuration database and establishing an association between the managing unit and the initially restored manager's configuration database.

Abstract: A method for execution by dispersed storage network (DSN) monitoring unit that includes a processor includes receiving configuration parameters via an interface of the DSN monitoring unit. A configuration update request is generated for transmission to a plurality of managing units based on the configuration parameters. Collected storage unit data is received from each of the plurality of managing units. Aggregated storage statistics are generated based on the collected storage unit data received from each of the plurality of managing units.

Abstract: A method includes, for a storage unit of a set of storage units of the DSN, performing at least one of determining whether a data access request for the storage unit is atypical, determining whether an error rate for the storage unit is atypical, and determining whether a response rate for the storage unit is atypical. When the at least one of the data access request, the error rate, and the response rate for the storage unit is atypical, the method continues by identifying the storage unit as having a security risk. The method continues by executing a security response for the storage unit based on the security risk.

Abstract: A method begins with a processing module obtaining a data object from a user and identifying a plurality of virtual storage vaults (VSVs) for storage of the data object. The method continues with the processing module determining dispersal error encoding parameters associated with a first virtual storage vault and error encoding the data object in accordance with those dispersal error encoding parameters to produce a corresponding plurality of sets of encoded data slices (EDSs), issuing write slice requests for the EDSs and receiving EDS information from at least some of the plurality of VSVs. When the EDS information indicates that a threshold number of VSVs have successfully stored the plurality of sets of encoded data slices within a synchronization timeframe, the method continues with the processing module issuing a favorable response to the user, or when a threshold number of VSVs have not successfully stored the plurality of sets of encoded data slices initiating a retry process.

Abstract: A method for execution by a security module operating in a device of a dispersed storage network (DSN). The method begins by identifying storage unit(s) having security risk(s) and determining the security risk(s). The method continues by determining a type of security response and a level of security response. When the security response is a storage unit security response and the level of the security response is a first local level, the method continues by instructing the identified storage unit to implement one or more of a read only mode, ceasing multiple phase write operations, and ceasing issuance of rebuild requests. When security response is a DSN security response and level of the security response is a first network level, the method continues by instructing devices to perform at least one of revoking digital certificates of the identified storage unit and deleting access permissions of the identified storage unit.

Abstract: A method for execution by dispersed storage network (DSN) monitoring unit that includes a processor includes receiving configuration parameters via an interface of the DSN monitoring unit. A configuration update request is generated for transmission to a plurality of managing units based on the configuration parameters. Collected storage unit data is received from each of the plurality of managing units. Aggregated storage statistics are generated based on the collected storage unit data received from each of the plurality of managing units.

Abstract: A storage unit for use within a dispersed storage network comprises an interface and a processing module operable to receive encoded data slices from a dispersed storage network client. The encoded data slices are associated with DSN logical addresses and the storage unit is allocated a range of DSN logical addresses in which the DSN logical addresses are found. The storage unit determines whether to store the encoded data slices in local memory of the storage unit or store them in remote memory. When the storage unit determines to store the encoded data slice to the remote memory it converts the DSN logical address into a local storage unit logical address and outputs the encoded data slices to the remote memory.

Abstract: A method includes receiving, by a computing device of a dispersed storage network (DSN), a non-standard data access request regarding a set of encoded data slices, where the non-standard data access request includes a set of network identifiers of a set of storage units, a data identifier corresponding to data, and a data access function. The method further includes the computing device converting the non-standard data access request into one or more DSN slice names. The method further includes the computing device determining that the one or more DSN slice names are within a slice name range allocated to the computing device. When the one or more DSN slice names are within the slice name range, the method further includes the computing device executing the data access function regarding one or more encoded data slices corresponding to the one or more DSN slice names.

Abstract: A method for execution by a resource allocation module includes facilitating migration of a first set of encoded data slices stored at a storage unit for decommissioning to a newly commissioned storage unit, and facilitating migration of a remaining set of encoded data slices stored at the storage unit for decommissioning as foster encoded data slices to at least one other storage unit. For each foster encoded data slice, it is determined whether to facilitate migration of the foster encoded data slice to the newly commissioned storage unit. When determining to facilitate the migration of the foster encoded data slice, the migration of the foster encoded data slice to the newly commissioned storage unit is facilitated. An association of the newly commissioned storage unit and identity of the foster encoded data slice is updated in response to detecting successful migration of the foster encoded data slice.

Abstract: A method includes determining, by a computing device of a dispersed storage network (DSN), a source name for a data object to be scanned for missing encoded data slices. The method further includes issuing list source requests to the set of storage units. When a list source response is not received from a storage unit of the set of storage units within a response timeframe, the method further includes identifying one or more encoded data slices stored on the storage unit as potentially missing encoded data slices; determining a next level missing encoded data slice determination approach for the storage unit based on one or more of: a number of potentially missing encoded data slices, a performance goal, a network loading level, a rebuilding loading level, a predetermination, and an entry of a system registry; and executing the next level missing encoded data slice determination approach.

Abstract: A method includes generating an entry for inclusion in a configuration queue regarding a configuration submission regarding DSN managed by a managing unit that uses a manager's configuration database stored in a first database. The method further includes updating a first version of the configuration queue stored in first database and a second version of the configuration queue stored in a manager's vault to include the entry. When the manager's configuration database requires restoring, the method further includes copying a backup version of the manager's configuration database to the first database to create an initially restored manager's configuration database and establishing an association between the managing unit and the initially restored manager's configuration database.

Abstract: A method begins by a computing device of a dispersed storage network (DSN) maintaining a queue of pending requests to access the DSN while new requests are added to the queue and executed requests are deleted from the queue. The method continues by the computing device determining, for each pending request in the queue, a prioritization score to produce a plurality of prioritization scores. The prioritization score is determined by determining an identity of a requestor associated with a pending request, obtaining a trust score based on the requestor's identity, and obtaining a compliance score based on the requestor's identity. The trust score indicates the requestor's level of legitimate use of the DSN and the compliance score indicates the requestor's level of compliance with DSN system requests. The method continues by the computing device executing pending requests of the queue in accordance with the plurality of prioritization scores.

Abstract: A method begins by receiving an access request from a requesting device of a dispersed storage network. At least one of the access request and the requesting device is associated with a credential. The method continues with determining whether an authentication of the credential is included in a local authentication list. When the authentication of the credential is in the local authentication list, the method continues with determining whether a first timeframe regarding the credential has expired. When the first timeframe has expired, the method continues with determining whether a condition exists to extend a time for the authentication for a second time frame. When the condition exists, the method continues with determining whether the second time frame has expired. When the second time frame has not expired, the method continues with utilizing the authentication included in the local authentication list to authenticate the access request.

Abstract: A method for identifying encoded data slices for rebuilding includes determining, by a computing device of a dispersed storage network (DSN), a partial scanning approach based on an event, where the event is one of a plurality of possible events. When the event is a memory device issue, the method further includes selecting a first partial scanning approach that includes: sending a scan memory device request to the storage unit to scan the memory device for encoded data slices affected by the memory device issue, receiving a scan memory device response from the storage unit, and identifying the encoded data slices indicated in the scan memory device response for rebuilding.

Abstract: A method includes receiving, by a computing device of a dispersed storage network (DSN), a non-standard data access request regarding a set of encoded data slices, where the non-standard data access request includes a set of network identifiers of a set of storage units, a data identifier corresponding to data, and a data access function. The method further includes the computing device converting the non-standard data access request into one or more DSN slice names. The method further includes the computing device determining that the one or more DSN slice names are within a slice name range allocated to the computing device. When the one or more DSN slice names are within the slice name range, the method further includes the computing device executing the data access function regarding one or more encoded data slices corresponding to the one or more DSN slice names.

Abstract: A method begins with one or more processing modules of a dispersed storage network (DSN) identifying a set of encoded data slices generated from a data segment based on an error encoding dispersal function. The method continues with the one or more processing modules identifying a set of storage units (SUs) that distributedly store the set of EDSs, and determining a first plurality of performance values associated with the set of SUs, followed by the one or more processing modules receiving from the set of SUs a second plurality of performance values generated by the set of SUs.