公开(公告)号：US20250077295A1

公开(公告)日：2025-03-06

申请号：US18241075

申请日：2023-08-31

Applicant: Pure Storage, Inc.

Inventor： Luis Pablo Pabón ,  Taher Vohra ,  Naveen Neelakantam ,  Tyler Wayne Power ,  Christopher Holtz

IPC: G06F9/50 ,  G06F8/65 ,  G06F8/71

Abstract: An illustrative method includes a global control plane managing a plurality of local control planes that manage a respective plurality of distributed computing environments, each of the plurality of local control planes configured to manage its respective computing environment in accordance with a mode of operation that is selected from a plurality of modes of operation based on a respective connectivity status with the global control plane, wherein managing the plurality of local control planes comprises selectively deploying an update to one or more local control planes of the plurality of local control planes based on the connectivity statuses of the plurality of local control planes with the global control plane. In some embodiments, the global control plane receives log data associated with the update and deploys, based on the log data, a second update to the one or more local control planes.

公开(公告)号：US10936191B1

公开(公告)日：2021-03-02

申请号：US16210879

申请日：2018-12-05

Applicant: Pure Storage, Inc.

Inventor： Sitaraman Suthamali Lakshminarayanan ,  Christopher Holtz ,  Jonathan McLachlan ,  Li Zhao ,  David M'Raihi ,  Yu Tan

IPC: G06G3/06 ,  G06F3/06

Abstract: An exemplary access control system controls access to a computing system such as a data storage system. For example, the exemplary access control system includes a remote management system that receives a request to operate on an element of the computing system and generates a message based on the request and a first token for the remote management system that is associated with the request. The message includes data representative of a second token for the remote management system. The remote management system signs the message and transmits the signed message to the computing system, which is configured to verify and use the signed message, including the second token included in the signed message, to obtain and use a local access token to access and operate on the element in accordance with the request.