公开(公告)号：US20230362133A1

公开(公告)日：2023-11-09

申请号：US18097878

申请日：2023-01-17

Applicant: Egnyte, Inc.

Inventor： Sachin Shetty ,  Amrit Jassal ,  Shishir Sharma ,  Yogesh Rai ,  Manoj Chauhan ,  Leszek Jakubowski ,  Krishanu Lahiri

IPC: H04L9/40 ,  H04L9/08 ,  G06F21/62 ,  H04L9/32 ,  H04L67/10 ,  G06F16/174 ,  H04L67/1097 ,  G06F16/182

CPC classification number: H04L63/0281 ,  H04L9/0822 ,  G06F21/6218 ,  H04L9/0897 ,  H04L9/3263 ,  H04L63/0471 ,  H04L67/10 ,  G06F16/1748 ,  H04L67/1097 ,  G06F16/182 ,  H04L63/0209 ,  H04L2463/062 ,  H04L63/0272

Abstract: Methods in a cloud object store facilitate strong data encryption, customer-management of object (encryption) keys, reductions in latency, globally-distributed object storage, and handling of streamed uploads. A method for encrypting objects stored in a cloud includes encrypting each object with a unique encryption (object) key. The plaintext object keys are generated in advance of uploads. The plaintext object keys can be stored in an object database in the cloud. Alternatively, the plaintext object keys can be provided to a customer's HSM, encrypted, and returned to the cloud, such that encrypted object keys, encrypted by the customer, are stored in the cloud. The cloud can alternatively encrypt the customer's object keys with a master key for the customer, which is then encrypted by the customer's HSM before being stored in the cloud. Proxies are also deployed for efficiently communicating with customer security modules.

公开(公告)号：US11449596B2

公开(公告)日：2022-09-20

申请号：US15808425

申请日：2017-11-09

Applicant: Egnyte, Inc.

Inventor： Shishir Sharma ,  Debjit Bhattacharjee ,  Amrit Jassal ,  Kalpesh Patel ,  Deepak Mehta ,  Przemek Grzedzielski ,  Sachin Shetty ,  Krzysztof Gardo ,  Daniil Iaitskov ,  Harikesavan Krishnan ,  Manish Marathe

IPC: G06F21/45 ,  G06F16/27

Abstract: Cloud storage systems and methods provide event-based user state synchronization among the various cloud elements. A global user directory is maintained on a remote cloud storage system. The global user directory includes a plurality of global user definitions associated with a plurality of user accounts, where each of the user accounts has access to one of a remote file system (RFS) hosted by the remote cloud storage system and a local file system (LFS) hosted by a local cloud storage system. As global user definition are altered on the remote cloud storage system, user events are generated and communicated to the local cloud storage system, where they are applied to synchronize the local user definitions with the global user definitions. The invention facilitates centralized control of user definitions, near real-time event delivery to local cloud storage systems, and separation of authentication processes from customers' active directory services.

公开(公告)号：US10853475B2

公开(公告)日：2020-12-01

申请号：US15884442

申请日：2018-01-31

Applicant: Egnyte, Inc.

Inventor： Shishir Sharma ,  Debjit Bhattacharjee ,  Amrit Jassal ,  Kalpesh Patel ,  Deepak Mehta ,  Przemek Grzedzielski ,  Sachin Shetty ,  Krzysztof Gardo ,  Daniil Iaitskov ,  Harikesavan Krishnan ,  Manish Marathe

IPC: G06F21/45

Abstract: Cloud storage systems and methods are described for providing event-based user state synchronization among the various cloud elements. A global user directory is maintained on a remote cloud storage system. The global user directory includes a plurality of global user definitions associated with a plurality of user accounts, where each of the user accounts has access to at least one of a remote file system (RFS) hosted by the remote cloud storage system and a local file system (LFS) hosted by a local cloud storage system. As global user definition are altered on the remote cloud storage system, user events are generated and communicated to the local cloud storage system, where they are applied to synchronize the local user definitions with the global user definitions. The invention facilitates centralized control of user definitions, near real-time event delivery to local cloud storage systems, and separation of authentication processes from customers' active directory services.

公开(公告)号：US10601782B2

公开(公告)日：2020-03-24

申请号：US15476488

申请日：2017-03-31

Applicant: Egnyte, Inc.

Inventor： Sachin Shetty ,  Amrit Jassal ,  Krishanu Lahiri ,  Yogesh Rai ,  Manoj Chauhan ,  Leszek Jakubowski

IPC: H04L29/06 ,  H04L9/08 ,  G06F21/62 ,  H04L9/32 ,  H04L29/08 ,  G06F16/174 ,  G06F16/182

Abstract: Methods in a cloud object store facilitate strong data encryption, customer-management of object (encryption) keys, reductions in latency, globally-distributed object storage, and handling of streamed uploads. A method for encrypting objects stored in a cloud includes encrypting each object with a unique encryption (object) key. The plaintext object keys are generated in advance of uploads. The plaintext object keys can be stored in an object database in the cloud. Alternatively, the plaintext object keys can be provided to a customer's HSM, encrypted, and returned to the cloud, such that encrypted object keys, encrypted by the customer, are stored in the cloud. The cloud can alternatively encrypt the customer's object keys with a master key for the customer, which is then encrypted by the customer's HSM before being stored in the cloud. Proxies are also deployed for efficiently communicating with customer security modules.

公开(公告)号：US20180241821A1

公开(公告)日：2018-08-23

申请号：US15956596

申请日：2018-04-18

Applicant: Egnyte, Inc.

Inventor： Sachin Shetty ,  Krishna Sankar ,  Amrit Jassal ,  Kalpesh Patel ,  Shishir Sharma

IPC: H04L29/08 ,  G06F11/14 ,  G06F17/30

CPC classification number: H04L67/1097 ,  G06F11/1402 ,  G06F11/142 ,  G06F11/1453 ,  G06F11/1464 ,  G06F11/2023 ,  G06F11/2094 ,  G06F11/2097 ,  G06F11/3409 ,  G06F16/162 ,  G06F16/182 ,  G06F16/183 ,  G06F16/188 ,  G06F16/951 ,  G06F16/955 ,  G06F2201/80 ,  G06F2201/815 ,  H04L67/02 ,  H04L67/10 ,  H04L67/1002 ,  H04L67/1095 ,  H04L67/141

Abstract: A method for storing objects in an object storage system includes the steps of establishing a network connection with a client over an inter-network, receiving an upload request indicating an object to be uploaded by the client, selecting at least two storage nodes on which the object will be stored, receiving the object from the client via the network connection, and streaming the object to each of the selected storage nodes such that the object is stored on each of the selected storage nodes. The method can also include writing an object record associating the object and the selected storage nodes to a shard of an object database and generating a Universally Unique Identifier (UUID). The UUID indicates the shard and the object ID of the object record, such that the object record can be quickly retrieved. Object storage infrastructures are also disclosed.

公开(公告)号：US09614912B2

公开(公告)日：2017-04-04

申请号：US14824824

申请日：2015-08-12

Applicant: Egnyte, Inc.

Inventor： Sachin Shetty ,  Krishna Sankar ,  Amrit Jassal ,  Kalpesh Patel ,  Shishir Sharma

IPC: G06F15/173 ,  H04L29/08 ,  G06F17/30 ,  G06F11/14

CPC classification number: H04L67/1097 ,  G06F11/1402 ,  G06F11/142 ,  G06F11/1464 ,  G06F17/30117 ,  G06F17/30194 ,  G06F17/30203 ,  G06F17/30233 ,  G06F17/30864 ,  G06F17/30876 ,  G06F2201/80 ,  H04L67/02 ,  H04L67/10 ,  H04L67/1002 ,  H04L67/1095 ,  H04L67/141

Abstract: A method for storing objects in an object storage system includes the steps of establishing a network connection with a client over an inter-network, receiving an upload request indicating an object to be uploaded by the client, selecting at least two storage nodes on which the object will be stored, receiving the object from the client via the network connection, and streaming the object to each of the selected storage nodes such that the object is stored on each of the selected storage nodes. The method can also include writing an object record associating the object and the selected storage nodes to a shard of an object database and generating a Universally Unique Identifier (UUID). The UUID indicates the shard and the object ID of the object record, such that the object record can be quickly retrieved. Object storage infrastructures are also disclosed.

公开(公告)号：US11907359B2

公开(公告)日：2024-02-20

申请号：US17890654

申请日：2022-08-18

Applicant: Egnyte, Inc.

Inventor： Shishir Sharma ,  Debjit Bhattacharjee ,  Amrit Jassal ,  Kalpesh Patel ,  Deepak Mehta ,  Przemek Grzedzielski ,  Sachin Shetty ,  Krzysztof Gardo ,  Daniil Iaitskov ,  Harikesavan Krishnan ,  Manish Marathe

IPC: G06F16/27 ,  G06F21/45

CPC classification number: G06F21/45 ,  G06F16/27

Abstract: Cloud storage systems and methods are described for providing event-based user state synchronization among the various cloud elements. A global user directory is maintained on a remote cloud storage system. The global user directory includes a plurality of global user definitions associated with a plurality of user accounts, where each of the user accounts has access to at least one of a remote file system hosted by the remote cloud storage system and a local file system hosted by a local cloud storage system. As global user definition are altered on the remote cloud storage system, user events are generated and communicated to the local cloud storage system, where they are applied to synchronize the local user definitions with the global user definitions. The invention facilitates centralized control of user definitions, near real-time event delivery to local cloud storage systems, and separation of authentication processes from customers' active directory services.

公开(公告)号：US10812452B2

公开(公告)日：2020-10-20

申请号：US15476223

申请日：2017-03-31

Applicant: Egnyte, Inc.

Inventor： Sachin Shetty ,  Amrit Jassal ,  Krishanu Lahiri ,  Yogesh Rai ,  Manoj Chauhan ,  Leszek Jakubowski ,  Shishir Sharma

IPC: G06F21/60 ,  H04L29/06 ,  H04L9/08 ,  G06F21/62 ,  H04L9/32 ,  H04L29/08 ,  G06F16/174 ,  G06F16/182

Abstract: Methods in a cloud object store facilitate strong data encryption, customer-management of object (encryption) keys, reductions in latency, globally-distributed object storage, and handling of streamed uploads. A method for encrypting objects stored in a cloud includes encrypting each object with a unique encryption (object) key. The plaintext object keys are generated in advance of uploads. The plaintext object keys can be stored in an object database in the cloud. Alternatively, the plaintext object keys can be provided to a customer's HSM, encrypted, and returned to the cloud, such that encrypted object keys, encrypted by the customer, are stored in the cloud. The cloud can alternatively encrypt the customer's object keys with a master key for the customer, which is then encrypted by the customer's HSM before being stored in the cloud. Proxies are also deployed for efficiently communicating with customer security modules.

公开(公告)号：US10003650B2

公开(公告)日：2018-06-19

申请号：US14824931

申请日：2015-08-12

Applicant: Egnyte, Inc.

Inventor： Sachin Shetty ,  Krishna Sankar ,  Amrit Jassal ,  Kalpesh Patel ,  Shishir Sharma

IPC: G06F15/16 ,  H04L29/08 ,  G06F17/30 ,  G06F11/14

CPC classification number: H04L67/1097 ,  G06F11/1402 ,  G06F11/142 ,  G06F11/1453 ,  G06F11/1464 ,  G06F11/2023 ,  G06F11/2094 ,  G06F11/2097 ,  G06F11/3409 ,  G06F16/162 ,  G06F16/182 ,  G06F16/183 ,  G06F16/188 ,  G06F16/951 ,  G06F16/955 ,  G06F2201/80 ,  G06F2201/815 ,  H04L67/02 ,  H04L67/10 ,  H04L67/1002 ,  H04L67/1095 ,  H04L67/141

Abstract: A method for storing objects in an object storage system includes the steps of establishing a network connection with a client over an inter-network, receiving an upload request indicating an object to be uploaded by the client, selecting at least two storage nodes on which the object will be stored, receiving the object from the client via the network connection, and streaming the object to each of the selected storage nodes such that the object is stored on each of the selected storage nodes. The method can also include writing an object record associating the object and the selected storage nodes to a shard of an object database and generating a Universally Unique Identifier (UUID). The UUID indicates the shard and the object ID of the object record, such that the object record can be quickly retrieved. Object storage infrastructures are also disclosed.

公开(公告)号：US20180150632A1

公开(公告)日：2018-05-31

申请号：US15884442

申请日：2018-01-31

Applicant: Egnyte, Inc.

Inventor： Shishir Sharma ,  Debjit Bhattacharjee ,  Amrit Jassal ,  Kalpesh Patel ,  Deepak Mehta ,  Przemek Grzedzielski ,  Sachin Shetty ,  Krzysztof Gardo ,  Daniil Iaitskov ,  Harikesavan Krishnan ,  Manish Marathe

IPC: G06F21/45

CPC classification number: G06F21/45

Abstract: Cloud storage systems and methods are described for providing event-based user state synchronization among the various cloud elements. A global user directory is maintained on a remote cloud storage system. The global user directory includes a plurality of global user definitions associated with a plurality of user accounts, where each of the user accounts has access to at least one of a remote file system (RFS) hosted by the remote cloud storage system and a local file system (LFS) hosted by a local cloud storage system. As global user definition are altered on the remote cloud storage system, user events are generated and communicated to the local cloud storage system, where they are applied to synchronize the local user definitions with the global user definitions. The invention facilitates centralized control of user definitions, near real-time event delivery to local cloud storage systems, and separation of authentication processes from customers' active directory services.