Abstract: Protected data is divided into a plurality of segments. For each segment in the plurality of segments, a fingerprint is generated. The plurality of fingerprints is grouped into group(s) of fingerprints and for each group of fingerprints, a group fingerprint is generated. It is determined if the group fingerprint being processed is stored in a cache and if so, the group fingerprint being processed is flagged as one for which a virtual copy will be performed.

Abstract: Backup objects, native security descriptors that describe access rights to the backup objects, and object metadata are received from platforms where each backup object has corresponding object metadata. Each native security descriptor is transformed into a platform independent security descriptor. A partitioned structure is generated, including by associating each platform independent security descriptor with those object metadata that correspond to the plurality of backup objects for which that platform independent security descriptor describes access rights to.

Abstract: Techniques for deduplicating a backup stream with ACL data embedded therein are described. According to one embodiment, a storage system receives a backup stream from a client, where the backup stream includes multiple data streams to be stored in the storage system. Each data stream represents a file or a directory of one or more files of a file system associated with the client. The storage system is to scan the backup stream to recognize an access control list (ACL) marker associated with at least one of the data streams, where the ACL marker identifies ACL data representing an ACL of the at least one data stream. The storage system is to chunk using a predetermined chunking algorithm the ACL data into a plurality of ACL data chunks to be stored in the storage system in a deduplicated manner.

Abstract: A data storage system including at least one network-accessible storage device capable of storing data. A plurality of network-accessible devices are configured to implement storage management processes. A communication system enables the storage management processes to communicate with each other. The storage management processes comprise processes for storing data on the at least one network-accessible device.