Abstract: A resource permission processing method and apparatus, a storage medium, and a chip are disclosed, to update a resource label in a terminal device based on a first resource permission configuration file when a system software version in the terminal device is upgraded. The first resource permission configuration file covers only path information in which a label changes before and after the system software version is upgraded. Therefore, in a process of updating the resource label stored in the terminal device, a matching amount is greatly reduced when path information that matches traversal path information of a resource is searched for in the first resource permission configuration file, and therefore time consumed for labeling the stored resource can be reduced. The reduced time for labeling the stored resource improves labeling efficiency, reduces time consumed for the system software version upgrade, and improves efficiency of the system software version upgrade.

Abstract: A virtual storage appliance receives a request to increase its total storage capacity, and processes the request by performing a resize operation on all backend virtual volumes that are attached to the virtual storage appliance while efficiently considering constraints of the cloud computing platform and its own system constraints. The resize operation increases a size of each one of the backend virtual volumes, e.g., by the same amount. In response to detecting that the resize operation has been completed on all the backend virtual volumes, the virtual storage appliance indicates that a new, increased total storage capacity of the virtual storage appliance is available for use. The resize operation is performed without moving any previously stored contents of the backend virtual volumes, and without changing the total number of backend virtual volumes that are attached to the virtual storage appliance.

Abstract: A method at a computing device for data management between a publisher and at least one subscriber, the method including receiving, at a system element, memory requirements from the publisher; creating a memory allocation of a pool of data objects for the publisher based on the received memory requirements; receiving, at the system element, consumption criteria from each of the at least one subscriber; and adjusting the memory allocation of the pool of data objects based on the consumption criteria received from the at least one subscriber.

Abstract: A display control device has display setting information including setting information of a layer structure of display objects on a terminal screen and setting information of a group to which the display objects belong, display state information indicating a display state of the display object, and operation setting information defining which setting content a combination of an operation target and operation content on a screen indicate for a layer structure and a group of display objects for each combination of the operation target and the operation content. The display control device specifies the setting content to the display object based on the combination of the operation target and the operation content, the display state information, and the operation setting information when an operation on the display object occurs.

Abstract: An apparatus controller includes a first communication module, a storage module, a data processing module, and a controller. The first communication module receives from each of one or more apparatuses, operation information indicating the operation state of the apparatus. The storage module stores the operation information in a cumulative manner. The data processing module combines, when values indicated by a plurality of operation information pieces successively received from the apparatus by the first communication module are equal to each other, the plurality of operation information pieces, thereby producing combined operation information. The controller causes, when the data processing module produces the combined operation information, the storage module to store the combined operation information instead of the plurality of operation information pieces.

Abstract: A method includes receiving, an operation from a container to synchronize container data from memory to a file system mounted by the container and determining whether the file system indicates that the operation is to be ignored. The method further includes, in response to determining that the file system indicates that the operation is to be ignored, preventing, by the operating system kernel executing on the processing device, performance of the operation.

Abstract: A first correspondence table indicates a correspondence relation between logical blocks of a first file and physical blocks of a physical storage. A second correspondence table indicates a correspondence relation between logical blocks of a second file and the logical blocks of the first file. An access request receiving section receives an access request for the second file. A block conversion section refers to the second correspondence table, identifies a logical block of the first file associated with the logical block of the second file that is subject to the access request, and then refers to the first correspondence table to identify a physical block of the physical storage associated with the identified logical block of the first file. An accessing section accesses the identified physical block.

Abstract: Embodiments are directed to a database configured to store digital versions of physical or electronic items received at a controlled-environment facility. Each of the digital versions associated with a unique identifier. A digital network portal is configured to provide remote access to the database. A production system is configured to create physical or electronic copies of selected ones of the stored digital versions. The physical or electronic copy comprises an image of the original physical or electronic item and a two-dimensional barcode. The two-dimensional barcode comprises a network address for the digital network portal and the unique identifier. The two-dimensional barcode may comprise a Quick Response (QR) code.

Abstract: Methods, systems, and computer-readable media for content importing with discovery in a collaborative environment are disclosed. A content sharing system retrieves a document from a data source using a connector associated with the data source. The document is retrieved using one or more credentials associated with a user. The content sharing system retrieves metadata associated with a plurality of additional documents stored by the data source. The metadata is retrieved using the one or more credentials associated with the user. The content sharing system determines, based at least in part on the metadata associated with the plurality of additional documents, one or more of the additional documents that are anticipated to be relevant to the user. Data descriptive of the one or more of the additional documents is presented to the user via a user interface.

Abstract: Examples implementations relate to journals for metadata changes. An example includes detecting, by a storage controller, metadata changes associated with a container index of a deduplication storage system; recording, by the storage controller, the detected metadata changes in a journal associated with the container index, where the journal is included in a journal group comprising a plurality of journals; determining, by the storage controller, whether a filled amount of the journal exceeds a fill threshold; and, in response to a determination that the filled amount of the journal does not exceed the fill threshold, writing the journal group from memory to persistent storage.

Abstract: A method for labeling object of operating system is adapted to a target object of a target operating system, wherein the target object has a target attribute. The method comprises: generating a default label by a labeling tool according to the target attribute; obtaining a reference object of a reference operating system, wherein the reference object has a reference attribute and a reference label; comparing whether the target attribute and the reference attribute are identical and generating a comparison result; and labeling the target object with the default label, the reference label, or one of a plurality of candidate labels according to the comparison result and a type of the target object.

Abstract: Particular embodiments described herein provide for a system that can be configured to determine an identification (ID) of a computer processing unit (CPU) using one or more tests and/or measurements, intercept the result of a query from a process to determine the ID of the CPU, replace the result of the query if the result of the query does not match the determined ID of the CPU, and communicate the result of the query that includes the determined ID of the CPU to the process. In an example, the query is a CPUID opcode and the results of the query are intercepted after passing through a hypervisor.

Abstract: Architectures and techniques for providing persistent volume functionality are disclosed. A storage container having a virtual storage volume to be persisted across multiple applications is created. The multiple applications hosted in one or more application containers. The storage container is placed within a virtual machine object. The virtual machine object containing the storage container is stored in a computer-readable memory as a persistent virtual storage volume.

Abstract: A process in a system can monitor available free storage space on a storage device, and, based on preset log file parameters, can act upon log files being stored on or written to the storage device to keep the storage device from running out of storage space due to excessive logging. The process monitors the device free space as reported by the file system to determine space utilization. A threshold of free space can be specified as a parameter. A log file action can also be specified as a parameter and is an action designed to reduce the space being used by a log file or log files. Once the process recognizes that the free space is under the threshold it will perform the configured action.

Abstract: A system for handling Implicit transactions in a hybrid cloud cache. The hybrid cloud cache maintains folders in a metadata file system that includes a hierarchy of cached folders, and maintains a meta-file containing metadata of files and folders. The system obtains a meta-file from a cloud platform and compares that to a meta-file obtained from the hybrid cloud cache. An object associated with an Implicit metadata transaction is transferred to an internal namespace of the hybrid cloud cache if the comparison indicates that certain conditions are met. The system may perform a bottom-up traversal of the namespace and may abort the traversal if an outstanding explicit transaction for the object is present or the object exists in the cloud platform. An object may be moved to a temporary storage location if there is no explicit transaction on it and the object does not exist in the cloud platform.

Abstract: Embodiments of the present disclosure provide a hybrid approach to performing a lazy pull of a container image. A file system in user space (FUSE) is utilized to lazy pull the container image, and manage file requests from the container while the container image is being fetched locally. During the retrieving, the FUSE may receive from the container, one or more file requests, and may temporarily block each of the one or more file requests until it can process them. Once the container image is fully fetched locally, the overlay structure of the container image expected by a file system in the kernel (e.g., Overlay FS) is created and control is passed to the file system in the kernel. The FUSE may then unmount itself, to expose the container to the underlying mount point.

Abstract: Disclosed herein are embodiments for committing changes of an image of a virtual machine-based container running on a host computer system. A starting image for a container is obtained from a guest starting folder, and while the container runs the starting image changes to the image made by the running container are captured in a guest folder that is union mounted with the guest starting folder. Another union folder, which is the union of a new host folder and the starting folder, contains the changed image which can be used for the container or transferred to a different container.

Abstract: Systems and methods relating to fragmenting content based on metadata are disclosed. In one embodiment, metadata is obtained from data that is accessible from an interface. A content descriptor, based on at least a portion of the metadata, may be utilized to determine fragment size. The content descriptor value may be derived from multiple forms of metadata, such as for example, genre, sub-genre, presence of live media, and combinations thereof. The fragments may be either virtual or physically discrete segments or files. In one aspect, the value may be the sole basis for determining the fragment lengths. In another aspect of the embodiment, the division of the content is conducted such that each resultant fragment comprises a single frame type.

Abstract: A plurality of computing devices are communicatively coupled to each other via a network, and each of the plurality of computing devices is operably coupled to one or more of a plurality of storage devices. The computing devices may use local caches and storing snapshots in a coherent manner when accessing the plurality of storage devices spread across multiple data centers.

Abstract: A provider system is connected to one or more readers corresponding to one or more access points. A secure local connection is established between the user device and the provider system via one reader. The provider system receives from the user device a request for user access via one access point corresponding to the one reader, the provider system sends to the user device a request for identification information of the user, and the user device sends user information associated with a first mobile identification credential (MIC) which the user device received from an authorizing party system (APS), the user having consented to release the user information to the provider system, and the user information having been verified. The provider system uses the verified user information associated with the first MIC to verify or not verify the identity of the user before granting or denying the request to the user.

Abstract: Described are systems and methods for storing a variable number of instances of data objects (e.g., 1, 2, 3, or up to N?1 instances, where N is the number of instances of the data object included in primary data) in secondary storage across a data storage network. In some examples, a system for storing a variable number of instances of data objects includes, one or more computing devices storing a set of data objects and multiple storage devices distinct from the one or more computing devices. Each of the multiple storage devices is configured to store at least a single instance of a data object. The system also includes a database configured to store information associated with the data objects. This information includes substantially unique identifiers for the data objects and, for each of the data objects, a number of instances of the data object stored on the multiple storage devices.

Abstract: Techniques are disclosed for content storage in a way that facilitates consistent and concurrent read/write processing of stored documents. An example methodology implementing the techniques includes segmenting the contents of a document into a plurality of content segments and storing the plurality of content segments within a data structure, the data structure including storage blocks having storage portions and buffer portions. The storage of the plurality of content segments includes storage of content segments within a storage portions of the storage blocks of the data structure. The method also includes receiving at least one change to the content and utilizing a buffer portion of at least one storage block to store the at least one change to the content.

Abstract: Computerized systems and methods facilitate searches by identifying instances in which search input is an ambiguous query and resolving the ambiguous query. The search system identifies ambiguous queries by querying a common data store prior to querying a patient database. More particularly, when the search system receives search input entered into a search tool, the search system queries the common name data store before querying the patient database to determine if the search input matches a common name and is an ambiguous query. If so, the search system may provide a notification to the user to indicate the search input is an ambiguous query with a common name and prompt the user to enter additional search criteria. In some instances, the search system may prevent a search from being performed on the patient database if the search input matches a common name until additional search criteria is entered.

Abstract: A search apparatus (1) coupled to a database, the apparatus (1) comprising: a processor configured to execute instructions; a memory storing instructions which, when executed by the processor, cause the processor to: search the database for items containing a search term, wherein items containing the search term are matched items; identify fields corresponding to attributes of the matched items; define a range of values for each field; divide the range of values for each field into a plurality of ranged field buckets; distribute the matched items between the ranged field buckets based on attributes of the matched items that are within the range of values for each ranged field bucket; calculate an effectiveness value for each field based on the number of matched items in each of the ranged field buckets; select one or more top fields, each top field having an effectiveness value that is greater than a predetermined effectiveness value; and provide an effectiveness indicator output which is indicative of the ef

Abstract: Images of the plurality of document pages are scanned to generate image data with one scanning instruction. A single folder named with a received character string is determined as a storage destination of image data corresponding to the plurality of document pages generated with the scanning instruction.

Abstract: Disclosed herein are system, method, and computer program product embodiments for storing a large object (LOB) in a database. An embodiment operates by identifying the LOB to be stored in an on-disk store of the database and determining the size of the LOB. Thereafter, an index vector for the on-disk store to include an identifier corresponding to the LOB is created. Additionally, a dictionary for the on-disk store to include a copy of the identifier and corresponding LOB data is also created. The LOB data corresponds to the LOB itself or a LOB location inside of the on-disk store based on the LOB's size.

Abstract: A recording apparatus that is capable of preventing degradation of a writing speed of management information under recording without increasing the recording preparation time when a plurality of files are recorded simultaneously. The recording apparatus includes a memory and a processor that function as a recording unit that records a file in a recording medium, and a controller that controls so as to record a directory entry of a file in a designated sector in the recording medium. The recording medium consists of blocks each of which includes a plurality of pages, allows to write data in a page unit, allows to erase data in a block unit, and allows to access a page corresponding to a sector designated by a sector number. When a plurality of files will be recorded, the controller controls so that directory entries of the plurality of files will be recorded in a same sector.

Abstract: A method for managing processing power in a storage system is provided. The method includes providing a plurality of blades, each of a first subset having a storage node and storage memory, and each of a second, differing subset having a compute-only node. The method includes distributing authorities across the plurality of blades, to a plurality of nodes including at least one compute-only node, wherein each authority has ownership of a range of user data.

Abstract: An abstraction layer communicates with a plurality of applications executing on a multi-application platform. The abstraction exposes a standard interface for the plurality of applications to communicate content status information. An indication is received that a new content item will be generated. A record is generated that is immutably associated with the new content item. The record is updated with information received from the application associated with the content item, the information pertaining to a changed status of the content item. In response to a command to delete the content item, it is determined whether to confirm deletion of the content item based on one or more data retention policies. The record is updated to indicate a reason for granting or denying the deletion and a source of the delete command.

Abstract: The present disclosure discloses a NVM-based method for performance acceleration of containers. The method comprises classifying each image layer of mirror images as either an LAL (Layer above LDL) or an LBL (Layer below LDL) during deployment of containers; storing the LALs into a non-volatile memory and selectively storing each said LBL into one of the non-volatile memory and a hard drive; acquiring hot image files required by the containers during startup and/or operation of the containers and storing the hot image files required by the containers into the non-volatile memory; and sorting the mirror images in terms of access frequency according to at least numbers of times of access to the hot image files so as to release the non-volatile memory currently occupied by the mirror image having the lowest access frequency when the non-volatile memory is short of storage space.

Abstract: Systems and methods are provided for use in authenticating a software artifact, including target applications for a payment network. One exemplary computer-implemented method includes retrieving metadata and a stage log for an artifact from a stage of a pipeline, the metadata including a result of the stage. A keyword count is generated of the stage log, and a checksum for the stage log is generated based on a hashing function. A stage record is compiled for the artifact and the stage. The stage record includes the checksum, a representation of the keyword count, and the result, but not the stage log. The stage record is stored in at least two different data structures. The artifact is authenticated based on the stage records for the artifact in each of the at least two data structures, prior to releasing the artifact into production.

Abstract: In an example, a computer system includes a hardware platform and a hypervisor executing on the hardware platform. The hypervisor includes a kernel and a plurality of user-space instances within a user-space above the kernel. Each user-space instance is isolated from each other user-space instance through namespaces. Each user-space instance includes resources confined by hierarchical resource groups. The computer system includes a plurality of virtual hypervisors, where each virtual hypervisor executes in a respective user-space instance of the plurality of user-space instances.

Abstract: Protecting data stored on a storage system through the use of different storage levels, including: creating a snapshot of a dataset stored on a storage system, wherein the snapshot includes user data and metadata, and wherein the metadata describes the storage layout of the dataset, offloading the snapshot to a first storage level storage system, and migrating, in accordance with a lifecycle policy, the snapshot from the first storage level storage system onto a second storage level storage system.

Abstract: A system and method for content management, may include receiving content created by a creator; creating a container to contain the created content and storing the created content in the container; determining a content type for the content; based on the determined content type, identifying items of metadata specified for the content type (name metadata; support data; corresponding; determining whether an identified item of specified metadata corresponding to the content is missing from the container; and prompting a user to supply identified missing metadata corresponding to the container.

Abstract: Disclosed is a folder management apparatus including a memory and a processor electrically connected to the memory. The processor is configured to detect access of a user terminal and to display at least one folder permitted to be accessed by the user terminal along with a folder badge corresponding to the folder, wherein, when update histories including modification and new generation with respect to the folder permitted to be accessed by the user terminal are generated, the folder badge indicates the number of update histories which have not been yet read by the user terminal among the update histories.

Abstract: Methods and apparatus are described for facilitating the client-side caching of media content based on one or more properties of the media content. Information relating to the cacheability of different types of content is communicated to the media player on a client device in the manifest or playlist employed by the media player to request fragments of the media content. The media player uses this information to make decisions about how to cache the corresponding content.

Abstract: A memory system includes a nonvolatile memory apparatus, and a write-same manager configured to perform a write-same operation on the nonvolatile memory apparatus, wherein the write-same manager merges a first write-same operation and a second write-same operation by comparing first operation information of the first write-same operation and second operation information of the second write-same operation.

Abstract: The disclosure herein describes mounting a shared data store, remote from a client cluster, as a remote data store on the client cluster. An abstraction interface of the remote data store on the client cluster is configured to receive data operations that are in a local data store-based format. A control path interface is established between the server cluster and the client cluster, and network location data associated with the shared data store is received by the client cluster via the established control path interface. Based on the network location data, a data path interface is established between the client cluster and the shared data store of the server cluster, whereby data operations directed to the abstraction interface of the remote data store on the client cluster are routed to the shared data store of the server cluster via the established data path interface.

Abstract: Occurrence of a RAID double failure in a slice of a RAID protection group (failed slice) renders data stored in the back-end tracks of the failed slice vulnerable to loss. When a RAID double failure is detected, a new slice is added to the RAID protection group. Front-end tracks that map to the good back-end tracks of the failed slice are moved from the back-end tracks of the failed slice to the back-end tracks of the newly added slice. Any front-end tracks that mapped to the bad back-end tracks of the failed slice are made to be write pending and written to corresponding back-end tracks of the newly added slice. Front-end tracks that map to the bad back-end tracks may be made to be write-pending in connection with a host write operation, by reading the front-end tracks from a local backup, or from a remote backup location.

Abstract: A method, system and computer program product for detecting sensitive personal information in a storage device. A block delta list containing a list of changed blocks in the storage device is processed. After identifying the changed blocks from the block delta list, a search is performed on those identified changed blocks for sensitive personal information using a character scanning technique. After identifying a changed block deemed to contain sensitive personal information, the changed block is translated from the block level to the file level using a hierarchical reverse mapping technique. By only analyzing the changed blocks to determine if they contain sensitive personal information, a lesser quantity of blocks needs to be processed in order to detect sensitive personal information in the storage device in near real-time. In this manner, sensitive personal information is detected in the storage device using fewer computing resources in a shorter amount of time.

Abstract: Data in a storage system is deduplicated after receiving from at least one writing entity requests for a plurality of write operations for a corresponding plurality of data blocks in a storage object. The received blocks are buffered and sorted in order and a sequence of clumps is created from the buffered blocks, where each clump comprises a grouping of at least one of the sorted, buffered blocks. A boundary is determined between at least one pair of clumps based at least in part on the content of at least one of the buffered blocks, and it is then determined whether at least one of the clumps is a duplicate of a previously stored clump.

Abstract: A data storage system implements aggregation, bifurcation, and/or reduction techniques to improve the efficiency of processing data storage requests. Data storage requests and/or their associated payloads may be aggregated based on one or more parameters. Data to be the stored and the associated commands may be separated so as to optimize a system's throughput and latency for each. Furthermore, extraneous commands and requests may be reduced or eliminated based on heuristics associated with the requests and the data.

Abstract: Embodiments are disclosed for a method for a tape library in hierarchical storage. The method includes receiving a recall request for a recall file having two copies stored in two tape libraries that are performing two migrations of two sets of files. The method also includes determining two migration progress values corresponding to the two migrations. Additionally, the method includes assigning the recall request to one of the two tape libraries having a greater value of the two migration progress values.

Abstract: Particular embodiments described herein provide for a system that can be configured to determine an identification (ID) of a computer processing unit (CPU) using one or more tests and/or measurements, intercept the result of a query from a process to determine the ID of the CPU, replace the result of the query if the result of the query does not match the determined ID of the CPU, and communicate the result of the query that includes the determined ID of the CPU to the process. In an example, the query is a CPUID opcode and the results of the query are intercepted after passing through a hypervisor.

Abstract: A data storage method includes the following steps: storing data to be stored into a mutable table, the mutable table being located in a RAM. If a storage content of the mutable table is greater than or equal to a preset storage content threshold, modifying the mutable table into an immutable table and stopping receiving storage of the data to be stored; if a storage content of a lowest level in a disk is greater than or equal to a storage content threshold of a present level, and next level higher in the disk is stored with columnar format, storing data of the lowest level to the next level in the columnar format; and if the lowest level is stored with row format, storing data in the immutable table to the lowest level in the row format.

Abstract: Disclosed are systems and methods for encryption of an ephemeral layer of one or more containers. An exemplary method comprises detecting a container starting execution in an operating system, generating a temporary encryption key and storing the temporary encryption key in memory of a kernel of the operating system, creating an encrypted area as the ephemeral layer in a storage device, the encrypted area accessible only by the container, providing to the container access to the encrypted area, and responsive to stopping execution of the container, destroying the temporary encryption key.

Abstract: Techniques are disclosed for querying for members in multiple groups. A list of unique members in the multiple groups may be received in response to the query. An example methodology implementing the techniques may include generating a group contexts dictionary and a job stack. The group contexts dictionary may include group context objects, each group context object associated with a group within a domain. The job stack may include one or more group context hashset keys, wherein a group context hashset key identifies a group context object. The method may include retrieving one or more group context hashset keys from the job stack and, for each retrieved group context hashset key, traversing a group associated with a group context object identified by a group context hashset key to determine membership information of the group, and generating a list of unique members by removing duplicate entries in the membership information.

Abstract: Techniques for creating snapshots of data storage objects that can perform certain operations (e.g., flushing dirty data, setting up extent pointers, allocating block storage space, etc.) during background (or deferred) processing. The disclosed techniques employ one or more extent copy trackers that can be created during processing of a transaction, while I/O request from host computers are suspended. The extent copy trackers are configured to perform some or all of the certain operations in the background, after the transaction has been committed and/or the processing of the transaction has been completed. By performing such operations during background processing, a processing time required to complete the snapshot transaction is reduced, thereby reducing latency in the resumption of the I/O requests from the host computers.

Abstract: In accordance with the present disclosure, files may be deduplicated in a distributed storage system having a plurality of storage volumes. A uniqueness metric for each file may indicate a degree of deduplication of the respective data files in the given storage volume. The uniqueness metric may be used to identify files for rebalancing in the distributed storage system. The uniqueness metric may be efficiently calculated with enough accuracy using a sampling methodology.

Abstract: Systems and method of the present invention are directed to data transfer systems and methods. Embodiments enable a user to access an electronic file to ascertain certain attribute data associated with one or more files, and allow the user to modify certain elements of the subject attributes file during the course of transferring the one or more files from a source location to a target or destination location.