Abstract: Systems and methods of the present disclosure enable the automated provisioning of security and compliance policies and onboarding to identity governance solutions. The systems and methods include processors to receive a database provisioning request associated with at least one entity and accessing at least one identity data record via an identity management mechanism associated with the at least one entity. The processors automatically access the database via a secured port; automatically cause to generate in the database, at least one privilege account and at least one access credential rule based on the at least one identity data record. The database is configured to utilize the at least one access credential rule to automatically manage access credentials for accessing the database via the at least one privilege account. The processors automatically disconnect from the secured port of the database.

Abstract: Described embodiments provide deployment of updates to multiple clients. A device may provide, to each client of a first plurality of clients, a software update to be executed at the client. The device can transmit, subsequent to providing the software update, to each of the first plurality of clients, a request to check a status of the client. The device can receive from at least one of the first plurality of clients, a response to the request indicative of operational health of the client subsequent to providing the software update to the client. The device determines an operational health statistic of the first plurality of clients subsequent to providing the software update to the first plurality of clients and provides, to each client of a second plurality of clients, the software update to be executed at each client responsive to determining that the operational health statistic satisfies a predetermined threshold.

Abstract: An apparatus of performing a vehicle over-the-air (OTA) update is provided. The apparatus includes a reception device that receives instruction information for determining a reference state of charge (SOC) value of a battery for a vehicle for performing an OTA update of the vehicle, a reference SOC value determination device that determines the reference SOC value, in response to the instruction information being received, and a generation device that generates information related to whether to perform the OTA update based on the determined reference SOC value.

Abstract: In some aspects, the techniques described herein relate to a system including a key management server (KMS) configured to generate a first unique device secret (UDS) based on a server private key stored by the KMS; and a secure device configured to: generate a second UDS based on a device private key stored by the secure device, the second UDS equal to the first UDS; compute a TCB component identifier (TCI) based on a received TCB; generate a first cryptographic key using the TCI and the second UDS; generate a first digital certificate including the first cryptographic key; transmit the first digital certificate to the KMS which validates the first digital certificate based on a second cryptographic key generated using the first UDS; receive a second digital certificate from the KMS which is signed using a second server private key; and store the second digital certificate as a device certificate.

Abstract: A deployment system can include a computing device that is configured to receive a broadcast message from a deployment device in response to the deployment device receiving an approval notification and obtain a plurality of deployment parameters via a distributed communications system. The computing device can also be configured to identify an installation time included in the plurality of deployment parameters and download application data associated with an application identifier included in the plurality of deployment parameters to a local database. The computing device can also be configured to initiate an installation of the application data from the local database at the installation time and transmit a status update to the deployment device in response to the installation being initiated.

Abstract: In one example, a method for prediction future network anomaly events is disclosed. The method includes generating a machine learning model for a computer communication network. Generation of the machine learning model can be by applying a historical set of time series data metrics of the computer communication network to train the machine learning model. The method may determine a data metric threshold that indicates a limit for future data metrics associated with the computer communication network. The method may analyze current data metrics associated with the computer communication network, and predict a future time when the data metrics associated with the computer communication network will meet or exceed the data metric threshold value. The method may flag the prediction of the future time to avoid a network anomaly.

Abstract: A failure symptom detection system includes a first storage to collect and store field data of each of a plurality of Internet of things devices, a feature extractor to acquire feature data of the field data based on a report on a failure in a service as a feeling of a user of a facility, a second storage to accumulate a failure at an occurrence of the failure associated with content of the failure as the feeling of the user, and a failure symptom detector to monitor the field data stored in the first storage, and produce, upon detecting feature data matching the feature data accumulated in the second storage, output indicating detection of a symptom of the failure associated with the feature data.

Abstract: In some examples, a computing device comprises a processing resource and a memory resource storing instructions to cause the processing resource to detect, by a basic input/output system (BIOS) of the computing device, firmware corruption in a firmware component of the computing device, generate a recovery agent based on the detected firmware corruption of the firmware component, determine a location of a back-up image of the firmware component based on the generated recovery agent, determine recovery sequence based on the determination of the location of the back-up image of the firmware component; and recover the firmware of the firmware component by executing the determined recovery sequence.

Abstract: Systems and methods are provided to perform BIOS recovery for a first information handling system that is in a no-boot state, i.e., in which the original equipment manufacturer (OEM) boot block (OBB) on the first information handling system is corrupted or damaged and thus does not properly execute. OBB BIOS recovery may be achieved using logic executing on a second and different information handling system that is wirelessly communicating with initial boot block (IBB) BIOS firmware that is executing on the first information handling system. The logic executing on the second information handling system may select and download (e.g., from a remote server) a correct uncorrupted and undamaged copy of the BIOS recovery firmware version for the first information handling system, and then wirelessly transfer the downloaded new copy of the OBB BIOS firmware version to the first information handling system via an established secure wireless connection.

Abstract: A data processing system implements managing the deployment of updates to a cloud-based service by deploying an update to one or more components of a cloud-based service according to a deployment plan. The deployment plan defines a plurality of stages in which the update is deployed to a subset of the components associated with a different subset of users of a userbase. The system implements receiving signal data that includes information regarding the performance of the update at each stage of the deployment plan; analyzing the signal data to determine whether one or more trigger conditions of halt and recovery rules associated with the update have been satisfied; and automatically halting deployment of the update to the one or more components of the cloud-based service responsive to at least one of the trigger conditions associated with the halt and recovery rules associated with the update having been satisfied.

Abstract: A communication control system includes a memory and a processor coupled to the memory. The processor is configured to according to an instruction from an external device, perform processing related to changing a network setting on a communication device, after the processing has been executed, determine whether or not communication of the communication device matches a specific communication condition, and notify an error to the external device in a case in which determination has been made that the communication of the communication device does not match the specific communication condition.

Abstract: The present disclosure provides systems, methods, and computer readable storage devices for software distribution across a hierarchical network. A method includes sending, by a first node device, a registration request message to a second node device of a first distribution group of the hierarchical network. The registration request message indicates a request for the first node device to join the hierarchical network. The method further includes receiving, by the first node device, a registration response message from the second node device. The registration response message indicates an assignment of the first node device to a second distribution group corresponding to a tier that is below a tier that includes the first distribution group. The first node device may be authorized to perform peer-to-peer (P2P) communications to receive at least a portion of one or more files from node devices in the second distribution group or the second node device.

Abstract: Edge nodes in distributed computing environments can be updated according to some aspects described herein. For example, a first node in the distributed computing environment can receive an update request from a management node. The update request can include an update file for updating a second node. In response to receiving the update request, the first node can generate a first partition and a second partition, containing the update file, within the first node. Additionally, the first node can generate a network tunnel between the first node and the second node. The first node can mount a file system for the second node onto the first partition and a copy of the file system onto the second partition of the first node via the network tunnel. The first node also can update the file system in the second partition using the update file to generate an updated file system.

Abstract: Systems and techniques are provided for testing software changes and determining a repeatability of software tests. An example method can perform software tests at different timepoints, each software test being based on a test scenario comprising a test simulation environment configured to test a software; determine one or more software tests from the software tests having a variation in test scores that exceeds a divergence threshold, the one or more software tests comprising at least one test scenario; rerun a software test a number of times, the software test configured to test changes to a code of the software, the changes to the code being associated with the software test and/or the at least one test scenario; and determine, based on test scores generated by the software test performed the number of times, a repeatability score for the software test on the changes to the code of the software.

Abstract: A method includes generating verification information based on a to-be-configured device, where an association relationship exists between the verification information and service configuration information of the to-be-configured device; sending the verification information to the to-be-configured device; receiving a registration request from the to-be-configured device, where the registration request includes the verification information; and performing verification on the to-be-configured device based on the verification information, and sending the service configuration information of the to-be-configured device to the to-be-configured device.

Abstract: Method, apparatus and computer program product embodiments are provided for distributing and installing content and settings on client devices without receiving any user input at the client devices, which limit usage of the client device a user at the client device to a first set of the usage activities. A device controller may remotely configure and control client devices by providing instructions and content for distribution to the client devices. The instructions may cause the client devices to install the content on the client devices without requiring any user input to initiate the installation or during installation of the content. The client device may be further configured to allow management of the client device by the device controller.

Abstract: An electronic apparatus installable with firmware updatable via a network includes an input unit configured to receive an operation performed by a user; and circuitry configured to display, on a display, a first screen for displaying a first function of firmware that can be installed on the electronic apparatus, and a second screen for displaying a second function of the firmware, the second function including a plurality of second functions and the second screen including a plurality of second screens prepared for each one of the plurality of second functions, enable the first function in response to an operation for the first function displayed on the first screen, and enable the second function in response to an operation for the second function displayed on the second screen. The circuitry enables the second functions selected from the plurality of second functions respectively displayed on the plurality of second screens.

Abstract: Methods, systems, and computer-readable storage media for receiving, by an application studio, user input indicating two or more artifacts of an enterprise application developed using the application studio, generating, by an enterprise application artifact composer of the application studio, an enterprise application artifact as a universal tag that provides an abstract representation of the enterprise application, and during deployment of the enterprise application: retrieving the enterprise application artifact, determining a target runtime that the enterprise application is to be deployed to, determining a set of dependencies for each artifact of the enterprise application, and for any dependency in the set of dependencies that is absent from the target runtime, retrieving binary code of the dependency from a library to deploy the dependency to the target runtime.

Abstract: A computer-implemented method includes defining a deployment pipeline for each application of a collection of applications, the deployment pipeline comprising an ordered plurality of waves of deployment wherein the ordered plurality of waves of deployment comprises a set wave of deployment and a variable wave of deployment with the set wave of deployment comprising deployment to a plurality of locations that is the same for each application in the collection of applications. For each application in the collection of applications, a list of locations selected by a respective user for the variable wave of deployment is received such that two applications of the collection of applications deploy to different locations during their respective variable wave of deployment. An indication that the build of the application has been created is received and in response, one of the plurality of waves of deployment is executed.

Abstract: A computer that dynamically maps traffic to different versions of software is described. During operation, the computer may receive first traffic from a first tenant and second traffic from a second tenant, where the first traffic and the second traffic are addressed to a common computing environment that supports multiple, different tenants. Then, the computer may identify the first tenant based at least in part on first information included in the first traffic, and may identify the second tenant based at least in part on second information included in the second traffic. Moreover, the computer may dynamically map the first traffic to a first version of software and the second traffic to a second version of the software, where the dynamic mapping occurs at runtime. Note that the computer may concurrently execute the first version of the software and the second version of the software.

Abstract: Systems and methods are disclosed for providing secure remote software updates to a cyber-physical systems (CPS) device. The method may include receiving, at a first server, data used to update software of at least one CPS device, converting the data into a first format, establishing a secure connection between the first server and a second serve, transmitting the data in the first format from the first server to the second server, identifying each CPS device that is authorized to receive a software update, encrypting a software update package to ensure that the software update is decrypted by each CPS device that is authorized to receive the software update and is not decrypted by an CPS device that is not authorized to receive the software update, and transmitting the encrypted software update package to each CPS device.

Abstract: An information processing method includes obtaining version information of an operating system to be installed at a computer apparatus; determining whether the operating system to be installed is supported by the computer apparatus according to the version information; and in response to determining that the operating system to be installed is not supported by the computer apparatus, displaying a prompt message on a current interface of the computer apparatus before an installation path of the operating system is determined, the prompt message being configured to prompt a user that the computer apparatus does not support the operating system to be installed.

Abstract: Aspects of data management are described. A cluster-level state machine may be instantiated for an update procedure for updating software for a cluster of storage nodes, where the update procedure may be configured to serially update the plurality of storage nodes. The cluster-level state machine may be configured to monitor the update procedure at a cluster level. One or more node-level state machines may be instantiated for the update procedure, where the one or more node-level state machines may be configured to monitor the performance of the update procedure at a storage node level. During an update procedure, the state of the cluster-level state machine may reflect a state of the cluster of storage nodes and the state of a node-level state machine may reflect a state of a respective one or more storage nodes.

Abstract: A device configured to identify a file in a network device, to generate a first set of block hash codes for data blocks for a first instance of the file, and to generate a second set of block hash codes for data blocks for a second instance of the file. The device is further configured to determine the first set of block hash codes matches the second set of block hash codes and to generate an entry in a file list for the instances of the file. The device is further configured to count the number of entries that are associated with the file and to determine the number of entries is greater than the redundancy threshold value. The device is further configured to delete one or more instances of the file in response to determining that the number of entries is greater than the redundancy threshold value.

Abstract: Systems and methods are provided for in-service software upgrades using centralize database versioning and migrations. The systems and methods described herein can intercept protocol messages between a client and a network device and run a first control plane comprising an origin state database and a plurality of un-migrated services. The system can generate a target state data model, wherein an origin state data model associated with the origin state database migrates to the target state data model, and copy the origin state database. The system can migrate second control plane software to the target state database and operate un-migrated services in accordance with the first control plane software and the copied origin state database while operating migrated services in accordance with the second control plane software and the target state database.

Abstract: In one embodiment, a method includes providing, to a client system of a user, a user interface for display. The user interface may include a first set of options for selecting an artificial intelligence (AI) task for integrating into a user application, a second set of options for selecting one or more devices on which the user wants to deploy the selected AI task, and a third set of options for selecting one or more performance constraints specific to the selected devices. User specifications may be received based on user selections in the first, second, and third sets of options. A custom AI model may be generated based on the user specifications and sent to the client system of the user for integrating into the user application. The custom AI model once integrated may enable the user application to perform the selected AI task on the selected devices.

Abstract: A data processing system implements obtaining policy information for an update to be deployed to one or more components of a cloud-based service identifying a plurality of rings of the cloud-based service to which the update is to be deployed; analyzing the policy information to determine configuration information for a plurality of installer instances each associated with one or more rings or one or more stages of a ring to which the update is to be deployed; obtaining payload information for each respective installer instance, the payload information indicating one or more payloads associated with the update to be deployed to the respective one or more rings or one or more stages of the ring associated with the respective installer instance; and deploying the one or more payloads for each of the one or more rings or the one or more stages of the ring associated with each installer instance.

Abstract: An update management program makes an information processing device realize functions of: acquiring updated version information on software of an engineering tool and firmware of a control device; acquiring a software version of the engineering tool installed in the information processing device; acquiring a firmware version of the firmware installed in the control device connected to the information processing device; confirming available updated versions for the software version and for the firmware version on the basis of comparison with the updated version information; creating an update screen for selecting auto-updating for the software and the firmware installed; and instructing that the software of the engineering tool and the firmware of the control device for which the auto-updating is selected on the update screen and the updated versions are confirmed be automatically updated to the updated versions.

Abstract: The described technology is generally directed towards adaptively selecting a repetition level in wireless communications, based on events to improve coverage range via the repetition level while not unnecessarily reducing throughput. One such event can include a current signal-to-noise-ratio, e.g., as reported in a channel quality indicator report from a user equipment. Another such event can comprise a number of consecutive hybrid automatic repeat request acknowledgments or negative acknowledgments (HARQ ACKS/NACKS), in which consecutive ACKs tend to indicate good signal quality, while consecutive NACKs tend to indicate poor signal quality. A combination of channel quality indicator-based adaptive repetition level and HARQ ACK/NACK-based adaptive repetition level can be employed.

Abstract: The Search Extraction Matching, Draw Attention-Fit Modality, Application Morphing, and Informed Apply Apparatuses, Methods and Systems (“SEMATFM-AMIA”) transforms inputs including new job listing introduction inputs, via SEMATFM-AMIA components (e.g., the conductor component, the resume view controller component, the XY paths handler component, the title handler component, the resume librarian component, and the job listing librarian component), into outputs including relevant resume outputs and/or augmented new job listing record outputs. It is noted that the terms “component” and “object” may be used interchangeably hereinthroughout. In one embodiment, the SEMATFM-AMIA includes an apparatus, comprising: a memory, a component collection in the memory, and a processor disposed in communication with the memory, and configured to issue a plurality of processing instructions from the component collection stored in the memory.

Abstract: Disclosed are techniques for performing a low-impact firmware update to a first microcontroller. In an aspect, a security entity communicatively coupled to the first microcontroller receives an update to firmware of the first microcontroller, authenticates the update to the firmware of the first microcontroller to prevent a security-related rollback, offloads system management tasks and interrupt handling from the first microcontroller to at least a second microcontroller communicatively coupled to the first microcontroller, coordinates installation of the update to the firmware of the first microcontroller without taking processing cycles from host software, and restores, to the first microcontroller, system management states occurring after the system management tasks and interrupt handling are offloaded from the first microcontroller.

Abstract: A method for updating software in one or more servers in a managed system includes bootstrapping of shared secrets to secure communication, using an object store with publicly accessible URLs as a mailbox system between a patch agent locally at the managed system and a patch management server located remotely. The object store provides for indirect and asynchronous communication, allowing the patch management server to manage the updates, whereas the patch agent executes the updates. The patch management server keeps track of update results, and when an update is unsuccessful it performs and supports a remediation process. Both the patch agent and the patch management server keep full logs of the update results to allow for auditing.

Abstract: A method for updating firmware of a locking device includes establishing a connection between a user device and the locking device and providing a set of firmware packages for display on a user interface of an application. The method includes receiving data indicative of a firmware package that has been selected via the user interface of the application. The method includes completing a transaction involving the firmware package. The method includes receiving, from an application server, installation data for the firmware package that has been selected. The method includes providing the installation data for the firmware package to the locking device to cause the locking device to use the installation data to update the firmware of the locking device, wherein the firmware, once installed on the locking device, allows for reconfiguration of firmware-controlled functions and operating modes of the locking device by supplementing or replacing firmware of the locking device.

Abstract: A car monitoring system includes: a sub-system to execute a predetermined function by controlling at least one instrument mounted on a railcar; and a monitoring device to monitor an operating state of the sub-system. The sub-system includes: a sub-system controller to create status data containing pieces of event information based on a signal output from the instrument and periodically transmit the status data to the monitoring device, the information informing the monitoring device of a change in state of the instrument; and a first memory to store a first event parameter file defines a data structure of an event region of the status data, the event region being a region wherein the information are stored. When the first parameter file is changed, and the sub-system controller creates the status data, the controller reconstructs the data structure of the region and resets the information in accordance with the reconstructed data structure.

Abstract: An initial risk of an electronic message is determined. Based on the initial risk, it is determined whether to modify the electronic message. In an event it is determined to modify the electronic message: the electronic message is modified; the modified electronic message is allowed to be delivered to an intended recipient of the electronic message; a secondary computer security risk assessment of the electronic message is automatically performed; and based on the secondary computer security risk assessment, the modified message is updated.

Abstract: At a first compute instance run on a virtualization host, a local instance scaling manager is launched. The scaling manager determines, based on metrics collected at the host, that a triggering condition for redistributing one or more types of resources of the first compute instance has been met. The scaling manager causes virtualization management components to allocate a subset of the first compute instance's resources to a second compute instance at the host.

Abstract: When a configuration is generated in a distributed computing system, a first group of nodes is selected for validating the configuration and the configuration is deployed on the first group of nodes. When the first nodes in the group of nodes validate the configuration, the nodes sign the configuration with a signature. When a subsequent node is to implement the configuration, the subsequent node validates the signature on the configuration to ensure that the nodes in the first group of nodes validated the configuration. If the signature is validated, the subsequent node deploys the configuration.

Abstract: Disclosed are some implementations of systems, apparatus, methods and computer program products for executing process flows. A package including flow permission metadata indicating a set of flow permissions associated with a set of flows is obtained. Upon receiving a request to initiate execution of a flow in the set of flows, the flow permission metadata is accessed. The flow includes a plurality of flow elements, where each of the flow elements represents a corresponding set of computer-readable instructions. Based upon the set of flow permissions of the flow permission metadata, it is determined whether the user is permitted to execute the flow. Execution of the flow is initiated upon determining that the user is permitted to execute the flow. During execution of the flow, flow performance data such as an identification of paths of the flow that have been traversed may be obtained, where each of the paths corresponds to one or more of the flow elements.

Abstract: In a vehicle electronic control system, a vehicle master device is configured to acquire data storage bank information including information for specifying which bank is an active bank and information for specifying software versions of an active bank and an inactive bank from a rewrite target ECU that has a non-volatile memory with a plurality of data storage banks and to transmit the data storage bank information acquired by the data storage bank information acquisition unit to a center device. The center device is configured to select update data compliant to the inactive bank on the basis of the software versions and the active bank specified by the data storage bank information received from the vehicle master device and to transmit a distribution package including the update data selected by the update data selection unit to the vehicle master device.

Abstract: A method for deploying product applications within virtual machines onto on-premises and public cloud infrastructures. Specifically, the disclosed method proposes a migration scheme of virtual machine images (configured at least with product applications and guest operating systems) from an on-premises infrastructure to a public cloud infrastructure. Further, the migration scheme considers two workflows—a normal workflow contingent on the public cloud infrastructure having up-to-date support for the guest operating systems; and an exception workflow contingent on the public cloud infrastructure lacking up-to-date support for the guest operating systems.

Abstract: An embodiment of the present invention is directed to a system and method for implementing a self-driven change detection release automation. According to an embodiment of the present invention, a software release bot may be created and installed on software running environment. The bot may further detect changes on a server environment. For example, the bot may be integrated with scheduling and other tools where the bot is programmed to wake up at predetermined time intervals, e.g., 15 minutes. According to an embodiment of the present invention, the bot may handle release activities defined in the configuration, e.g., stop, start, send notification, etc. The bot is able to save release events log for change audit.

Abstract: A software deployment method in a server includes: obtaining a software update for deployment to a plurality of media processing devices; performing a primary deployment phase by: (i) transmitting the software update to selected media processing devices according to a primary deployment rate; (ii) responsive to the transmission, for each selected media processing device, updating a status indicator representing whether deployment of the software update succeeded; and (iii) determining, based on the status indicators, whether an update promotion condition has been satisfied; in response to determining that the update promotion condition has been satisfied, performing a secondary deployment phase by: transmitting the software update to further selected media processing devices according to a secondary deployment rate exceeding the primary deployment rate.

Abstract: A control device includes a main storage device that stores a user program and program packages in a nonvolatile manner; a main memory having a package management module arranged therein; and a processor. The package management module performs a deployment process for selecting, from the program packages, a package to be deployed based on a version of the user program, and arranging, from the package to be deployed, a version of a program compatible with the version of the user program in the main memory.

Abstract: A method for performing an application upgrade includes: performing an emulation to generate an application upgrade strategy for applying a plurality of application upgrades on a client device; determining a user behavior of a user of the client device; generating an application upgrade summary list using the application upgrade strategy and the user behavior; providing the application upgrade summary list to the user of the client device; and after the providing, initiating upgrading of the client device using a reordered application upgrade strategy generated in response to feedback from the user, in which the reordered application upgrade strategy is generated based on the application upgrade strategy and the user behavior.

Abstract: Disclosed are various examples for downloading data objects by enforcing a threshold amount of allocated data. In one example, among others, an application downloads a first subset of the files from a remote file management system. A user interface displays file system entries that represent the first subset of downloaded files and a second subset of undownloaded files from the remote file management system. The application detects an event for a respective file system entry associated with a respective file from the second subset of undownloaded files. The respective file is downloaded from the remote management system.

Abstract: A vehicle control system includes a plurality of devices, a first device included in the devices including: a storage configured to store consistency information including a permitted combination of versions of software installed on each of one or more devices in association with each of the control functions; a determination unit configured to determine whether the consistency information consistent with versions of software installed on a part of the devices exists when consistency does not exist in the versions of all software installed on each of the devices; and a performance control unit configured to permit performance of a part of control functions associated with the consistency information consistent with the versions of software installed on the part of the devices when the consistency information consistent with the versions of software installed on the part of the devices exists.

Abstract: A system includes a source vehicle and a destination vehicle. The destination vehicle is configured to determine that the source vehicle and the destination vehicle are suitably close to exchange data through a wireless communications channel, compare current version numbers in the destination vehicle with approved version numbers in the source vehicle, approve an update for one or more current software components in the destination vehicle in response to one or more criteria, receive one or more approved software components at the destination vehicle from the source vehicle via the wireless communications channel in response to the current version numbers of the current software components approved for the update being different from corresponding ones of approved version numbers of the approved software components, and update the one or more current software components in the destination vehicle with the one or more approved software components received from the source vehicle.

Abstract: An information handling system downloads device drivers for recovery operation of the information handling system, and subsequently obtains first configuration information associated with each of the device drivers. The system performs an inventory of devices associated with the information handling system that includes obtaining second configuration information associated with each of the devices in the inventory, and compares the first configuration information and the second configuration information. If the particular device driver is missing, then the system downloads the particular device driver prior to boot to a service operating system.

Abstract: In one example, a method for updating an application that has multiple instances running in a distributed cloud environment is disclosed. The method may include the operation of generating a dynamic property bus interface. The method may write an application property value through the dynamic property bus interface to a database for storage and propagate the property value to the multiple instances of the application in the distributed cloud environment.

Abstract: A storage system and method of operating the storage system is described where the metadata used to access the data stored in a storage device is distributed amongst a plurality of controllers in communication with a user, with each other and with the storage device. Each controller stores at least the metadata needed to access the data relevant to the user at the time, and metadata is updated to respond to internal system activities such as device failures, snapshots, backup operations or the like. To preserve coherence of the metadata, each metadata update is communicated to the other controllers and the storage device. The update is either transmitted to the other controllers and to the storage device and each metadata location is updated, or the update is transmitted to the storage device and each of the controllers is instructed to request an update from the storage device.