Abstract: A method, computer program and apparatus are disclosed that include accessing client data records, such as, medical records. The method for may include, for example, receiving a data file at a file server comprising client records information. The method may also include forwarding the file to a database and adding the file to a record in the database, creating a database file and storing the database file on the file server, and scheduling a call to at least one client, the call including a portion of the information included in the received data file. The method may further provide performing the call, monitoring the call, and may also include updating the client records information stored in the database based on the additional information provided by the at least one client.

Abstract: A computer-implemented method for controlling the expression of a block of data from a sensitive data storage device, the method including the steps of receiving from a software application a request to transfer the block of data from the source sensitive data storage device for expression at a destination device, determining a data mask indicator for the block of data, applying a limited expression format based upon the data mask indicator, and expressing the block of data at the destination device in the limited expression format, such as to facilitate protecting or masking sensitive data. The method may further include allowing a user to request revelation of a masked portion of the block of data, recording in a memory log user activity relating to such revelation request(s) of the user, and providing regular reports and/or administrative alerts relating to such logged user activity.

Abstract: Methods, non-transitory computer readable media, and computing devices that facilitate copy-free data migrations across filesystems. In a first step with this technology, a first set of filesystem metadata associated with a first filesystem is received. At least a portion of the first set of filesystem metadata is retrieved from a first data structure associated with the first filesystem. The first set of filesystem metadata includes a first identifier and a physical location associated with user data. A second identifier, associated with a second filesystem having a different addressing scheme than the first filesystem, is generated from at least the first identifier. A second set of filesystem metadata including the second identifier and the physical location is stored such that at least the second identifier is stored in a second data structure associated with the second filesystem.

Abstract: According to an aspect of the present disclosure, a digital processing system, in response to identifying multiple files opened with write permission by a process, creates a corresponding backup copy of each of the opened files. The system computes a frequency of opening of the files with write permission by the process, and then determines whether the computed frequency is greater than a threshold. If the frequency is determined to be greater than the threshold, the system provides control to a user to recover any of the files (opened by the process) based on the corresponding backup copy (previously created in response to opening). Thus, the execution of a ransomware in the system may be potentially detected and the associated maladies (such as unavailability of personal data, requirement to make payment for recovering the personal data, etc.) may be avoided.

Abstract: Intelligent snapshot tiering facilitates efficient management of snapshots and efficient restore of snapshots. For intelligent snapshot tiering, a storage appliance can limit cross-tier migration to invalidated data blocks of a snapshot instead of an entire snapshot. Based on a policy, a storage appliance can identify a snapshot to be migrated to another storage tier and then determine which data blocks are invalidated by an immediately succeeding snapshot. This would limit network bandwidth consumption to the invalidated data blocks and maintain the valid data blocks at the faster access storage tier since the more recent snapshots are more likely to be restored.

Abstract: An information management system for detecting not only a set of management target data which has been changed but also another set of management target data which is affected by that change among a plurality of sets of management target data. The present system includes a dependency manager for managing the association of one set of management target data with another set of management target data which depends on the former set of management target data; and an inspector for detecting a set of management target data which is affected by a change in another set of management target data.

Abstract: Methods and systems for implementing a network-backed file system are disclosed. Data indicative of a plurality of subscriptions by a plurality of clients to respective subsections of a file system is stored. The subscriptions comprise one or more read subscriptions and one or more write subscriptions. The read subscriptions are fulfilled by sending modified file chunks of subsections to subscribing clients. The write subscriptions are fulfilled by modifying file chunks of subsections based on write requests submitted by subscribing clients.

Abstract: A computerized system and method for data management that packages data in the inherent folder hierarchy of the operating system, and layers a virtual folder/file hierarchy and directory system atop the inherent folder hierarchy. The virtual folder/file hierarchy provides non-hierarchical HTML search and indexing on top of the existing Windows® file systems. HTML scripts tag files with keywords indicating topic, subtopic, and levels, and provide an HTML-based user interface that searches known paths by tags. The versatility of complete, customized streamlining, full detail, and multiple levels of detail in between, is also delivered.

Abstract: A filesystem includes a pool of data blocks and a pool of index blocks. Non-overlapping subpools of data blocks, including a first subpool of data blocks and a second subpool of data blocks, are identified within the pool of data blocks. Likewise, non-overlapping subpools of index blocks, including a first subpool of index blocks and a second subpool of index blocks, are identified within the pool of index blocks. A first file group is mounted within a global namespace on a first mount point on the filesystem. A second file group is also mounted within the global namespace on a second mount point on the filesystem. The first subpool of data blocks and the first subpool of index blocks are allocated to the first mounted file group, and the second subpool of data blocks and the second subpool of index blocks are allocated to the second mounted file group.

Abstract: According to one embodiment, a tiered storage system includes a first storage device, a second storage device and a storage controller. The storage controller determines, when a range of an access request to a logical unit extends over some of logical extents in the logical unit, that these logical extents are correlated with each other. The storage controller transfers data of a set of the correlated logical extents as one extent group collectively in units of physical extents between the first storage device and the second storage device.

Abstract: A computer program product, system, and method for generating coded fragments comprises intercepting I/O writes between a host and a logical unit (LU), sending the I/O writes from a first site to a second site, writing the I/O writes to one or more journal files within a deduplicated storage system at the second site, generating a snapshot of the LU within a deduplicated storage system at the first site, and replicating the snapshot from the deduplicated storage system at the first site to the deduplicated storage system at the second site.

Abstract: In particular embodiments, a method comprising, by one or more computing devices, installing an application on a portion of a physical disk system of a first platform, virtualizing the portion of the physical disk system into a virtual disk system, comprising, storing data in the portion of the physical disk system in a database of the virtual disk system, providing an interface to access the data stored in the database, and providing a plurality sets of drivers for a plurality of platforms, wherein each set of drivers supports native operations with respect to the portion of the physical disk system on a different one of the plurality of platforms, mounting the virtual disk system on a second platform, and executing the application on the second platform, wherein all operations in connection with executing the application are contained within the virtual disk system mounted on the second platform.

Abstract: A technique for managing metadata in a data storage system designates block pointers as either sources or copies, where sources contribute to reference counts of pointed-to structures but copies do not. The technique maintains parent-child relationships between parent BPSs (block pointer sets) and child BPSs, where each BPS includes an array of block pointers. Each child BPS is created as a copy of a parent BPS and has block pointers initially designated as copies. The technique performs a metadata-merge operation to merge the block pointers of the parent BPS into those of a child BPS by promoting attributes of block pointers in the child BPS from copy to source, avoiding any need to perform reference count updates on structures pointed to by promoted block pointers.

Abstract: A directed graph and a semantic ontology are simultaneously employed to enable tagging of data. Tags from the directed graph contain special properties linking them to a semantic ontology such that activating a node on the graph, will provide specific actions relating to one or more ontologies. Humans or machine executable algorithms can use the directed graph as a classification system, which enables a decision making process to occur, one step at a time. Such an approach enables complex problems sets to be broken down into smaller directed graph processes. Each process can then be either automated using computer executed algorithms, manual using humans, or a combination of both. In this way an n-tiered workflow system can be developed that enables large scale asynchronous and distributed tagging.

Abstract: Techniques are provided for computing data and metadata layout prior to storage in a storage system using a processing platform. An exemplary processing platform comprises one or more of a compute node and a burst buffer appliance. The processing platform communicates with a plurality of the compute nodes over a network, wherein a plurality of applications executing on the plurality of compute nodes generate a plurality of data objects; computes erasure metadata for one or more of the data objects on at least one of the compute nodes; and provides the erasure metadata with the corresponding one or more data objects to a storage system. The processing platform optionally determines a full set of the data objects to be stored and queries the storage system to determine an anticipated layout of the full set of the data objects to be stored. The anticipated layout allows special handling, for example, for small files and large files that are identified based on predefined criteria.

Abstract: A media storage device includes a media security controller and a memory to store data that relates to a media item to be rendered by a rendering device. The media security controller sends a message in response to the rendering device reading an authorization file. The message being for the rendering device to read a portion of data from the memory and to provide the portion of data to the media security controller. The media security controller receives the portion of the data from the rendering device, trans forms the portion of the data, and sends the transformed portion of the data to the rendering device.

Abstract: In one example, a project build tool may allow a developer device implementing a package manager to manage a superset of packages of software code across a wide variety of projects. A package manager may automatically install a superset of packages of reusable program code that are dependencies of a set of projects. A project build tool may provide to the package manager a configuration describing the superset of packages. A project build tool may install in a common folder the superset of packages in conformance with the package manager having a package resolution model that implements a hierarchical structure optimized for parental search. The developer device may store in a project folder for a project a set of symbolic links to a subset of dependency packages for the project contained in the common folder.

Abstract: A technique for managing storage in a data storage system sends a write from a second file system to a first file system at block-level granularity of the first file system and provides a set of flags that identify which flash-page-size portion(s) of a block are being changed. If the write is directed to a data block that is not shared, such that no write split is required, the improved technique checks the set of flags and proceeds to overwrite the data block in the first file system with only the flash-page-size portion(s) that have changed. The improved technique thus performs the overwrite in flash-page-size increments, avoiding writes to flash pages that remain unchanged.

Abstract: A method is used in managing reclaiming storage space in file systems. Characteristics of a file system and a data service executing upon the file system are evaluated. Based on the evaluation, reclamation of storage space from the file system is affected based on a set of policies.

Abstract: A computer-implemented method for controlling the expression of a block of data from a sensitive data storage device, the method including the steps of receiving from a software application a request to transfer the block of data from the source sensitive data storage device for expression at a destination device, determining a data mask indicator for the block of data, applying a limited expression format based upon the data mask indicator, and expressing the block of data at the destination device in the limited expression format, such as to facilitate protecting or masking sensitive data. The method may further include allowing a user to request revelation of a masked portion of the block of data, recording in a memory log user activity relating to such revelation request(s) of the user, and providing regular reports and/or administrative alerts relating to such logged user activity.

Abstract: For defragmentation-less deduplication using a processor device, holes are punched in a file in a data deduplication process for avoiding the use of defragmenting by allowing a file system to use the punched holes for reclaiming the free space for adding to a free space pool of the file system.

Abstract: A technique for replicating a file from a source data storage system (source) to a destination data storage system (destination) includes receiving, by the destination from the source, (i) file data for multiple logical extents of the file and (ii) respective tiering metadata for those logical extents. The destination selects, based on the tiering metadata, one or more storage tiers available on the destination. The destination updates a local replica of the file by placing the logical extents on the selected tier or tiers.

Abstract: Description files and web service protocols for actuating things on Internet of things (IoT) are proposed. Essentials of every thing on IoT (‘IoT thing’) are defined in a description file. The description file is lightweight, versatile and standardized for web services. Thus, the IoT thing can be communicated through its protocol described in the description file. Therein, a keyword replacement method is used. In a command sent by a user at a client end, a specific keyword is used to replace an essential in the description file. Then, a complete message based on the protocol is generated to control the IoT thing. The present invention uniformly uses the same way for operating and managing IoT things of all brands and solving heterogeneity. The present invention significantly reduces development cost and may work out an automatic, high-performance and interoperable IoT ecosystem with applications.

Abstract: Techniques are disclosed for managing a file stored in an enterprise content management (ECM) repository. In response to a check-out request from a client machine for a file stored in the ECM repository, a management application for an ECM system identifies ECM-related metadata associated with the file. The management application stores the ECM-related metadata into the file (or an associated file) prior to sending the file to the client. At check-in for the file, the management application identifies the location of the corresponding file in the ECM repository using the metadata previously stored in the file sent to the client.

Abstract: A storage device, a directory entry lookup method for the storage device, and a host running the method can provide a quick directory entry lookup. The host includes an interface for exchanging data with the storage device which stores a multi-level hash table comprising directory entries of each directory, and a file system module receiving a file lookup command designating a target directory and a target filename, calculating a hash value which reflects the target filename and a lookup level, and searching for a directory entry which comprises the target filename in a bucket corresponding to the hash value from among buckets at the lookup level which are included in a multi-level hash table of the target directory. If the search for the directory entry fails, the file system module increases the lookup level and again calculates the hash value and searches for the directory entry for the target filename.

Abstract: A storage system comprises a controller; a memory; and one or more objects each including content data and metadata. The metadata is used to construct user-defined content properties, each content property providing an ability to extract a specific metadata field from the objects by referring to a user-defined content property name of the content property. The content properties are organized into user-defined content classes, each content class grouping a set of content properties into a named category under a user-defined content class name. The controller is operable to index the content properties of the content classes to create an index. The content properties being indexed are identified by the content property names. In some embodiments, the controller is operable to de-dupe the index, for content properties having same values expressed differently in different metadata formats, by directing the differently expressed values to same index field under same content property name.

Abstract: Provided are a computer program product, system, and method for generating a configuration page for rendering in a graphical user interface (GUI) for managing provisioning of storage resources in a storage system. A determination is made of allocation commitment certainties for virtual storage ranges to allocate from the storage system based on physical capacity in the storage system and an estimated data reduction rate. Each of the allocation commitment certainties indicates a likelihood that a corresponding of the virtual storage ranges will be available for allocation in the storage system. Visual representation of a plurality of user selectable storage spaces indicating the allocation commitment certainties for the virtual storage ranges in the user selectable storage spaces are rendered in the configuration page. A user selection graphic that when selected provisions a selected of the user selectable storage spaces in the storage system is rendered in the configuration page.

Abstract: Methods, apparatus are articles of manufacture are disclosed to re-direct detected access requests in a modularized virtualization topology using virtual hard disks. An example method includes detecting, with a processor, a request to access a software asset at a first path location on a first virtual hard disk. The example method also includes determining, with the processor, whether the first path location is mapped to a second path location in a virtual computing environment, the second path location corresponding to a second virtual hard disk encapsulating a functionality originally associated with the first path location. The example method also includes, when the first path location is mapped to the second path location, re-directing, with the processor, the request to the second virtual hard disk.

Abstract: A method includes (a) receiving a command to create an upper-deck filesystem of a specified size, the upper-deck filesystem residing within a logical volume expressed from a container file of a lower-deck filesystem, (b) provisioning a plurality of storage provisioning units (SPUs) from a storage pool of the data storage system to the container file in an order reflecting proximity of the SPUs within storage devices of the data storage system, the plurality of SPUs providing storage for the entire container file, and (c) subsequent to provisioning the plurality of SPUs to the container file, executing a plurality of threads in parallel to write metadata of the upper-deck filesystem to the plurality of SPUs, representing the upper-deck filesystem. Other embodiments are directed to a system, a computerized apparatus, and a computer program product for performing methods similar to that described above.

Abstract: Described are techniques for creating windows of free blocks in a file system selected in accordance with trigger conditions. A first slice is selected, in accordance with slice selection criteria, from a plurality of slices of storage provisioned for use by the file system. First processing is performed on the first slice that creates at least one window of free blocks in the first slice for use by the file system. It is determined, in accordance with termination criteria, whether to process one or more additional slices of the file system to create additional windows of free blocks for use by the file system. Such processing to create free windows may be subject to various limits of resource consumption.

Abstract: The disclosed computer-implemented method for backing up heterogeneous virtual environments may include (1) identifying a request to back up a virtual machine executing on a host system, (2) creating a storage map of a virtual storage environment of the virtual machine by (a) identifying, from the host system, a virtual disk file that stores data for the virtual machine and (b) identifying, from a guest system operating within the virtual machine, one or more virtual storage devices that store data for the virtual machine, and (3) creating a unified backup of the virtual machine based on the storage map of the virtual storage environment by coordinating a backup operation of the virtual disk file with a backup operation of the virtual storage device. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: Embodiments herein are directed to efficient crash recovery of persistent metadata managed by a volume layer of a storage input/output (I/O) stack executing on one or more nodes of a cluster. Volume metadata managed by the volume layer is organized as a multi-level dense tree, wherein each level of the dense tree includes volume metadata entries for storing the volume metadata. When a level of the dense tree is full, the volume metadata entries of the level are merged with the next lower level of the dense tree. During a merge operation, two sets of generation IDs may be used in accordance with a double buffer arrangement: a first generation ID for the append buffer that is full (i.e., a merge staging buffer) and a second, incremented generation ID for the append buffer that accepts new volume metadata entries. Upon completion of the merge operation, the lower level (e.g., level 1) to which the merge is directed is assigned the generation ID of the merge staging buffer.

Abstract: Different types of soft-lockout policies can be associated with different organizations (or groups) in an identity management system. Each soft-lockout policy can indicate different parameters such as a number of login attempts allowed and an amount of time that a user account will be locked-out if the maximum allowed attempts are exceeded unsuccessfully. Users can be associated with the different organizations. For each user, the soft-lockout policies for the organization with which that user is associated are applied to that user when that user attempts to log in. Thus, different groups of users can be handled with different security behaviors regarding unsuccessful login attempts. If, for example, a user were to become moved from one organization to another, then the soft-lockout policies associated with the user's new organization would become applicable to that user.

Abstract: A computing device that is configured for remotely invoking dynamic classes is described. The computing device includes a processor, memory in electronic communication with the processor and instructions stored in the memory. The computing device deploys one or more assemblies, which are used by an unreferenced derived class. A byte array that includes the unreferenced derived class is received from a remote node. The unreferenced derived class includes an implementation of a common base class. The computing device further receives a class name and one or more assembly names from the remote node. The computing device decodes the byte array to reconstitute the unreferenced derived class and calls the implementation of the common base class. One or more operations may be performed with the unreferenced derived class.

Abstract: Presented are a method, apparatus, and computer-readable medium for data exchange. The method includes specifying, by a user equipment (UE), a first data, and creating, by the UE, a rule set, the rule set governing access to the first data. The method further includes uploading, by the UE, the first data with the rule set to a user selected server, the first data being accessible at the user selected server based on the rule set.

Abstract: Systems and methods for managing data, such as metadata. In one exemplary method, metadata from files created by several different software applications are captured, and the captured metadata is searched. The type of information in metadata for one type of file differs from the type of information in metadata for another type of file. Other methods are described and data processing systems and machine readable media are also described.

Abstract: Controlling resource access, a first device responsive to a request for access to a resource, determines whether to grant the access to the resource, based on an identity of a requestor requesting the access to the resource. The resource is provided by a second device that is separate from the first device. The first device customizes an access token with an access constraint to control the access to the resource, the access token is generated responsive to the first device determining that, based on the identity of the requestor requesting the access to the resource, the access to the resource is granted.

Abstract: The present invention aims to address the issue of deploying costly hardware by proposing a content protection layer with an easy distribution capability to clients. The aim is achieved by an network device for descrambling an access controlled audio/video content stream, said network device being configured to be connected to a network router comprises a memory to store a unique address UA specific to the network device, an network input/output interface, a descrambler to descramble the audio/video content stream, and a watermark engine configured to watermark the descrambled audio/video content stream by applying the unique address. A further object of the invention is a method to access scrambled audio/video content stream in a local or roaming mode by a multimedia reception device connected via an IP network to a network router having an IP port connected to the network device.

Abstract: A method in a backup engine is described. The method includes receiving a data access request for a data element in a logical storage volume for one of a read or write operation, determining an affinity group associated with the data element based on an affinity group list indicating a physical storage volume for the data element based on the data address range for the data element, determining a first frontend adapter identifier (ID) from the first affinity group associated with the data element, the first frontend adapter ID identifying a first frontend adapter associated with a first physical storage volume, and transmitting the data access request to the first frontend adapter based on the first frontend adapter ID to execute the data access request on the first physical storage volume.

Abstract: A method is used in managing data relocation in storage systems. A request is received to write to a slice of storage tier in a data storage system where the slice is being relocated. The relocation of the slice includes copying data of the slice to another slice in the data storage system. Location within the slice at which the request to write to the slice has been received is determined. Based on the determination, relocation of the slice of the storage tier is effected.

Abstract: A technique for managing file systems that support block sharing places a source/copy attribute in each block pointer. The source/copy attribute identifies the respective block pointer as either a source-block pointer or a copy-block pointer. A reference count on each data block maintains a count of the number of source-block pointers pointing to the data block but excludes the number of copy-block pointers pointing to the data block. Block pointers are arranged in block pointer sets (BPSs), and sharing relationships are formed among BPSs and copies of BPSs. The sharing relationships generally keep most block sharing information at the BPS level, with reference counts on data blocks tracking only the number of source-block pointers, which is typically small, often being equal to one.

Abstract: A write instruction which affects original data is received via a virtual file system; the original data is read-only on a remote device. The original data is received from the remote device and the write instruction is applied to the original data in order to obtain changed data. The changed data is stored in a buffer in the virtual file system. The changed data is copied from the buffer to a differencing file, where deletion of the changed data from the buffer is independent of completion of copying from the buffer to the differencing file.

Abstract: In some examples, a plurality of content properties may be used for managing indexing of object data, such as a plurality of files. Each content property may include an expression for extracting data values from specific data fields in the object data. Further, each content property may include a name that may be used for indexing the objects using the extracted data values. For instance, multiple content properties may have the same name, but may each have different expressions for extracting different data values from different data fields. Accordingly, the content properties may be used to extract desired data values from the objects for indexing. When a search query is received including a content property name and a specified value, one or more of the objects that are indexed with the specified value may be searched.

Abstract: In one embodiment, a solution is provided wherein a volume hierarchy may be received at a network device in a storage area network. Once the network device is ready to apply the volume hierarchy, a message so indicating may be sent. Later, a command to apply the volume hierarchy may be received and the volume hierarchy may be applied so that the network device processes IOs using the volume hierarchy.

Abstract: An information processing apparatus which makes it possible to easily find a page on which a desired content is allocated when many contents are displayed separately on a plurality of pages. Contents are classified into a plurality of groups based on attribute information on the contents. One tab is selected from among a displayed plurality of tabs corresponding to the groups. Contents in a group corresponding to the selected tab are displayed in a predetermined display area. The attribute information on the contents is displayed near the plurality of tabs. First attribute information on a first content in a first group corresponding to a first tab and second attribute information on a second content in a second group corresponding to a second tab displayed next to the first tab are compared, and based on a comparison result, the second attribute information is displayed near the second tab.

Abstract: A method is used in recovering from metadata inconsistencies in storage systems. A metadata inconsistency is detected in a portion of a file system. The file system is managed by upper-layer component. The portion of the file system is recovered. Lower-layer component recovers the portion of the file system. The portion of the file system is validated. The upper-layer component validates the portion of the file system.

Abstract: A computer implemented method, computer program product, and system for providing, via a storage provisioning engine, a scalable objects store enabled to store objects across multiple heterogeneous file arrays; wherein file arrays are enabled to be actively added to the object store without pausing the file arrays; and wherein data representing the objects enabled to be balanced across the heterogeneous file arrays based.

Abstract: An operation method for application program preview interface which is stored in a storage unit and executed in a computer system. The operation method includes the steps of: displaying a plurality of operation modes on a first display area; selecting one of the operation modes in accordance with a first indicating signal; and displaying at least one selectable object on a second display area, wherein the selectable object is an application program opened or executed in the selected operation mode.

Abstract: A processor in described having an interface to non-volatile random access memory and logic circuitry. The logic circuitry is to identify cache lines modified by a transaction which views the non-volatile random access memory as the transaction's persistence storage. The logic circuitry is also to identify cache lines modified by a software process other than a transaction that also views said non-volatile random access memory as persistence storage.

Abstract: Disclosed is a method of merging a first set of data objects and a second set of data objects for displaying on a display screen, the method comprising: retrieving a first identifier associated with a first memory location, the first memory location for storing the first set of data objects; retrieving a second identifier associated with a second memory location, the second memory location for storing the second set of data objects; comparing the first identifier and the second identifier; and grouping one or more first data objects from the first set of data objects and one or more second data objects from the second set of data objects based on the comparison.