Abstract: Data storage is improved by combining content indexing and data reduction in text-containing files by using common word elimination. Raw data is processed by finding words in selected files, creating an index of found words, and replacing the words in the raw data with pointers to the corresponding words in the index. Each word appears only once in the index. Consequently, the index is relatively small and the procedure is completely reversible. In particular, the index is small relative to other methods because the data is transformed in place, and the transformed data and index are used together to capture the total information about the data.

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage.

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage. The encryption device is operable in response to signaling from the file server, including an indication of a range of blocks of data, to cause encryption of the range of blocks with an encryption key that is unique within the physical storage. The encryption device includes nested tables mapping block ranges to encryption keys. Consequently, undesirable key sharing across files, file systems, and other units can be avoided down to the block level.

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage. The encryption device is operable in response to signaling from the file server, including an indication of a range of blocks of data, to cause encryption of the range of blocks with an encryption key that is unique within the physical storage. The encryption device includes nested tables mapping block ranges to encryption keys. Consequently, undesirable key sharing across files, file systems, and other units can be avoided down to the block level.

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage. The encryption device is operable in response to signaling from the file server to cause encryption of data being moved into the physical storage, and decryption of data being retrieved from storage. Two logical paths are provided for I/O operations. A first path is reserved for use by a first type of requestor, such as file owners. Data retrieved via the first path is decrypted by the encryption device, and Writes via the first path are allowed. A second path is employed for others than the owners, e.g., administrators. Data retrieved via the second path is not decrypted by the encryption device, and attempted Writes via the second first path are denied.

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage. The encryption device is operable in response to signaling from the file server, including an indication of a range of blocks of data, to cause encryption of the range of blocks with an encryption key that is unique within the physical storage. The encryption device includes nested tables mapping block ranges to encryption keys. Consequently, undesirable key sharing across files, file systems, and other units can be avoided down to the block level.

Abstract: A data storage architecture for networked access by clients includes a file server capable of communication with the clients via the network, physical storage organized as a plurality of logical volumes, and an encryption device in communication with both the file server and the physical storage. The encryption device is operable in response to signaling from the file server to cause encryption of data being moved into the physical storage, and decryption of data being retrieved from storage. Two logical paths are provided for I/O operations. A first path is reserved for use by a first type of requestor, such as file owners. Data retrieved via the first path is decrypted by the encryption device, and Writes via the first path are allowed. A second path is employed for others than the owners, e.g., administrators. Data retrieved via the second path is not decrypted by the encryption device, and attempted Writes via the second first path are denied.

Abstract: A system and method for interconnecting a plurality of network components to form a local area network (LAN) include a wiring manager having at least one port module connected to a controller via a data signal bus on a passive backplane. Each port module includes a plurality of ports which can be programmed to electrically couple selected sets of the plurality of network components without physically rerouting network cabling. A LAN management system provides a graphical user interface to communicate with the wiring manager and provide network status information and control the wiring manager to configure the network.

Abstract: A system and method for interconnecting a plurality of network components to form a local area network (LAN) include a wiring manager having at least one port module connected to a controller via a data signal bus on a passive backplane. Each port module includes a plurality of ports which can be programmed to electrically couple selected sets of the plurality of network components without physically rerouting network cabling. A LAN management system provides a graphical user interface to communicate with the wiring manager and provide network status information and control the wiring manager to configure the network.

Abstract: A wiring hub for interconnecting a plurality of network components to form a local area network, the wiring hub including a data signal bus and a programmable switching mechanism connected to the data signal bus. The switching mechanism includes a plurality of ports each of which can be electrically coupled to a different one of the plurality of network components so as to pass communications signals to and receive communications signals from the network component to which it is coupled. The programmable switching mechanism interconnects a selectable set of the plurality of ports together through the data signal bus and in any user selectable ordered sequence.

Abstract: A wiring hub for interconnecting a plurality of network components to form a local area network, the wiring hub including a data signal bus and a programmable switching mechanism connected to the data signal bus. The switching mechanism includes a plurality of ports each of which can be electrically coupled to a different one of the plurality of network components so as to pass communications signals to and receive communications signals from the network component to which it is coupled. The programmable switching mechanism interconnects a selectable set of the plurality of ports together through the data signal bus and in any user selectable ordered sequence.

Abstract: An encryption service in a manager encrypts network management information with a secret key that can be recognized by an agent to which the message is directed. The encryption service invokes an SNMP message transmission service in the manager to form a secure SNMP message having an apparent Object ID (OID) that identifies a decryption service in the agent and having an apparent Value that includes the encryption result. The SNMP message transmission service invokes a communication protocol service in the manager to send the secure SNMP message to the agent. A communication protocol service in the agent receives the secure SNMP message, and passes the received message to an SNMP message reception service in the agent.

Abstract: A method and apparatus for managing a network attached storage system is presented which includes a web based user interface. The interface allows for the execution of many different commands on several different storage system attributes without loss of context between command execution. The interface is HTML based and provides dynamic construction of Javascript object lists based on a database read by a CGI program executing on an HTTP server. The interface eliminates the hierarchical structure of menu navigation associated with other interfaces.