Policy-based layered filesystem management

    公开(公告)号:US10606800B1

    公开(公告)日:2020-03-31

    申请号:US15799885

    申请日:2017-10-31

    Abstract: Some embodiments provide a system that provides a filesystem in a computer system. During operation, the system obtains a policy for the filesystem and separates the filesystem into a set of layers based on the policy. Next, the system processes input/output (I/O) operations to the filesystem by directing each of the I/O operations to one of the layers based on the policy. Finally, the system periodically maintains the layers using a master image of the filesystem.

    Optimizing connections over virtual private networks

    公开(公告)号:US10425384B1

    公开(公告)日:2019-09-24

    申请号:US15949376

    申请日:2018-04-10

    Abstract: The disclosed embodiments provide a system that provides a virtual private network (VPN). The system includes a routing apparatus on a public network. The routing apparatus accepts a first connection with a client on the VPN and a second connection with a gateway in a private network extended by the VPN. Next, the routing apparatus receives a first set of packets from the client over the first connection, wherein the first set of packets is encrypted. The routing apparatus then routes the first set of packets to the gateway. The system also includes the gateway, which establishes the second connection with the routing apparatus. Next, the gateway decrypts the first set of packets and routes the decrypted first set of packets to a host in the private network.

    Protecting data in insecure cloud storage
    6.
    发明授权
    Protecting data in insecure cloud storage 有权
    保护不安全云存储中的数据

    公开(公告)号:US09390281B2

    公开(公告)日:2016-07-12

    申请号:US14143328

    申请日:2013-12-30

    Abstract: The disclosed embodiments provide a system that processes data. The system includes a first client that encrypts a first set of data, uploads the encrypted first set of data to a volume on a cloud storage system, and creates a commit record of the upload. The system also includes a synchronization server that verifies access to the volume by the first client and includes the commit record in a change set containing a set of commit records associated with the volume. The synchronization server also signs the change set and provides the change set for use in synchronizing the upload with a second client.

    Abstract translation: 所公开的实施例提供了处理数据的系统。 该系统包括加密第一组数据的第一客户端,将加密的第一组数据上传到云存储系统上的卷,并创建上传的提交记录。 该系统还包括一个同步服务器,该同步服务器验证第一个客户端对该卷的访问权限,并将该提交记录包含在一个包含与该卷关联的一组提交记录的更改集中。 同步服务器还对更改集合进行签名,并提供用于与第二客户端同步上传的更改集。

Patent Agency Ranking