Abstract: Controlling backup data access is disclosed. A request is received to access backup data in a requested mode, wherein backup data is accessed based at least in part on a restore point. It is determined if the requested mode is allowed given a currently executing mode. In the event that the mode is allowed, access to backup data is allowed.

Abstract: A method for grooming a backup data set is disclosed. The method comprises receiving data associated with one or more restore points associated with the backup data set. The method further comprises automatically selecting one or more of said one or more restore points for retention, removal, or transfer.

Abstract: Efficient incremental backups using a change database is disclosed. Based at least in part on a file attribute it is determined that a file has changed since a previous backup. Change data is stored in a data structure additional to a file system with which a file is associated. Change data indicates the file has changed since the previous backup. The file attribute is configured to be reset, each time a file is backed up, to a value indicating the file has not changed. Storing the change data enables a backup operation performed subsequent to the file attribute being reset to determine that the file has changed since the previous backup.

Abstract: A method for tracking file system backups is disclosed. The method comprises receiving a request to perform a backup with respect to a data set comprising a file system or a portion thereof and automatically associating the requested backup with any previously performed backups, if any, that would be required to be available in order to restore the data set to a state associated with the requested backup.

Abstract: A method of automatically classifying clients into different backup policy groups according to pre-selected criteria, such as type of client, whether the client is a server, a desktop or a mobile computer, the department or business unit, or even the user. The method uses information obtained from the client itself to classify the client. This information includes the kind of processor platform and operating system in the client, the type and version of software being run, and whether the client has a battery, indicating that it is a mobile computer. Other information that can be used to classify the client for backup may be obtained from information that identifies the user, the department to which the client is assigned, and the location in which it is used. The process enables a mobile client traveling to another site of an enterprise to connect to a local LAN of the enterprise and be authenticated for backup, and to be automatically assigned an appropriate backup classification.

Abstract: A method of automatically authenticating clients on a computer system network enables clients on the network to be automatically logged in and added to a backup database and assigned for backup. The method employs a public key/private key encryption system in which clients have a public key and the backup server has a private key. The backup server interrogates new clients to determine client status and whether the client supports the public key/private key certificate. If it does, the backup server uses key values from the client decrypted using its private key to generate encryption keys which are employed in an algorithm for securely communicating with the client to log the client into a backup database. Otherwise, the backup server uses a password entered by a user in the client for generating the encryption keys. Additionally, the method enables backup software and public keys to be automatically push installed on the clients.