US6006018A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Distributed file system translator with extended attribute support
Assignee: Snap Inc
•
Filing: 1995-10-03
•
Granted: 1999-12-21
•
Expires: 2015-10-03
Abstract
Abstract A translation gateway for a distributed computing environment including a source computer system and a target computer system, each of which has at least one client, one server and a distributed file system, and wherein the server associated with the source computer system preferably runs on a client of the target computer system. A method for providing authenticated access to files stored in the target distributed file system in response to file requests originating from clients associated with the source distributed file system begins by mapping credentials associated with incoming client requests from the source distributed file system into enhanced credentials containing authentication information associated with an authentication model of the target distributed file system. At least one enhanced credential is then augmented with one or more attributes whose values may be extracted and used in the processing of the filesystem request by the target file system. The source computer system's server then makes file system requests using the enhanced credentials so that each file request appears to the target computer client as if it were made by an authenticated process with equivalent attributes.
Inventors
- 👤 Rodney Carlton Burnett
- 👤 Jean Elvira Pehkonen
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 19:08
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6236; G06F21/30; G06F21/31
Claims Analysis
Total Claims: 28
Claim 1
Independent Claim
139 words
A method for providing authenticated access to files stored in a target distributed file system in response to a file request originating from a client associated with a source distributed file system, each of the distributed file systems having at least one client and one server associated therewith, comprising the steps of: mapping a credential associated with the file request to the source distributed file system into an enhanced credential containing authentication information that establishes a principal's authentication for accessing the target distributed file system; determining whether there is any additional attribute pertaining to the file request, the attribute associated with a variable that defines information for use in processing the file request; and if there is any additional attribute, retrieving the variable associated therewith and using the enhanced credential and the information to carry out the file request.
Claim 2
Independent Claim
139 words
A method for providing authenticated access to files stored in a target distributed file system in response to a file request originating from a client associated with a source distributed file system, each of the distributed file systems having at least one client and one server associated therewith, comprising the steps of: mapping a credential associated with the file request to the source distributed file system into an enhanced credential containing authentication information that establishes a principal's authentication for accessing the target distributed file system; determining whether there is any additional attribute pertaining to the file request, the attribute associated with a variable that defines information for use in processing the file request; and if there is any additional attribute, retrieving the variable associated therewith and using the enhanced credential and the information to carry out the file request.
Claim 3
Dependent Claim
26 words
The method as described in claim 1 wherein the target distributed file system is Open Systems Foundation (OSF) Distributed Computing Environment (DCE) Distributed File Services (DFS).
Claim 4
Dependent Claim
19 words
The method as described in claim 2 wherein the source distributed file system is a Network File System (NFS).
Claim 5
Dependent Claim
26 words
The method as described in claim 1 wherein users of the source distributed file system are not authenticated with respect to the target distributed file system.
Claim 6
Dependent Claim
33 words
The method as described in claim 1 wherein the file request originating from the client associated with a source distributed file system includes an internet protocol (ip) address and user identifier (uid) pair.
Claim 7
Dependent Claim
27 words
The method as described in claim 5 wherein the enhanced credential includes an authentication tag derived from the internet protocol (ip) address and user identifier (uid) pair.
Claim 8
Dependent Claim
178 words
In a distributed computing environment including a source computer system and a target computer system, each of which has at least one client, one server and a distributed file system, and wherein the server associated with the source computer system runs on a client of the target computer system, a method for providing authenticated access to files stored in the target distributed file system in response to file requests originating from clients associated with the source distributed file system, comprising the steps of: mapping credentials associated with incoming client requests from the source distributed file system into enhanced credential, an enhanced credential containing authentication information that establishes a principal's authentication for accessing the target distributed file system; augmenting at least one enhanced credential with an attribute associated with a variable that defines a path to the server of the target distributed file system; and having the source computer system's server make file system requests using the enhanced credentials so that each file request appears to the target computer client as if it were made by an authenticated process.
Claim 9
Dependent Claim
178 words
In a distributed computing environment including a source computer system and a target computer system, each of which has at least one client, one server and a distributed file system, and wherein the server associated with the source computer system runs on a client of the target computer system, a method for providing authenticated access to files stored in the target distributed file system in response to file requests originating from clients associated with the source distributed file system, comprising the steps of: mapping credentials associated with incoming client requests from the source distributed file system into enhanced credential, an enhanced credential containing authentication information that establishes a principal's authentication for accessing the target distributed file system; augmenting at least one enhanced credential with an attribute associated with a variable that defines a path to the server of the target distributed file system; and having the source computer system's server make file system requests using the enhanced credentials so that each file request appears to the target computer client as if it were made by an authenticated process.
Claim 10
Dependent Claim
26 words
The method as described in claim 7 wherein the target distributed file system is Open Systems Foundation (OSF) Distributed Computing Environment (DCE) Distributed File Services (DFS).
Claim 11
Dependent Claim
27 words
The method as described in claim 8 wherein the users of the source distributed file system are not authenticated with respect to the target distributed file system.
Claim 12
Dependent Claim
33 words
The method as described in claim 7 wherein a file request originating from the client associated with the source distributed file system includes an internet protocol (ip) address and user identifier (uid) pair.
Claim 13
Dependent Claim
27 words
The method as described in claim 10 wherein the enhanced credential includes an authentication tag derived from the internet protocol (ip) address and user identifier (uid) pair.
Claim 14
Dependent Claim
147 words
In a distributed computing environment including a Network File System (NFS) client, an NFS server and a NFS distributed file system, and a Distributed File Services (DFS) client, a DFS server and a DFS distributed file system, wherein the NFS server runs on the DFS client, a method for managing NFS file requests to the DFS distributed file system, comprising the steps of: maintaining a set of NFS to DFS mappings in an authenticator; intercepting incoming NFS client requests destined for the DFS client; calling the authenticator to transform at least one NFS credential into a transformed NFS credential that contains authentication information necessary for authenticated DFS access; and having the NFS server make a file system request to the DFS distributed file system using the transformed NFS credential so that file request appears to the DFS client as if it were made by an authenticated process.
Claim 15
Dependent Claim
147 words
In a distributed computing environment including a Network File System (NFS) client, an NFS server and a NFS distributed file system, and a Distributed File Services (DFS) client, a DFS server and a DFS distributed file system, wherein the NFS server runs on the DFS client, a method for managing NFS file requests to the DFS distributed file system, comprising the steps of: maintaining a set of NFS to DFS mappings in an authenticator; intercepting incoming NFS client requests destined for the DFS client; calling the authenticator to transform at least one NFS credential into a transformed NFS credential that contains authentication information necessary for authenticated DFS access; and having the NFS server make a file system request to the DFS distributed file system using the transformed NFS credential so that file request appears to the DFS client as if it were made by an authenticated process.
Claim 16
Dependent Claim
24 words
The method as described in claim 12 wherein the NFS server makes the file system request through the DFS client's virtual filesystem switch (VFS).
Claim 17
Dependent Claim
21 words
The method as described in claim 12 wherein the NFS credential is transformed by including a Process Authentication Group (PAG) code.
Claim 18
Dependent Claim
169 words
In a distributed computing environment including a source computer system and a target computer system, each of which has at least one client, once server an a distributed file system, and wherein the server associated with the source computer systems runs on a client of the target computer system, a method for providing authenticated access to files stored in the target distributed file system in response to file requests originating from clients associated with the source distributed file system, comprising the steps of: using an authenticating translator to map a credential associated with an incoming client request from a source distributed file system into an enhanced credential, the enhanced credential including authentication information that establishes a principal's authentication for accessing the target distributed file system; determining whether the authenticating translator stores additional attributes for the enhanced credential; and if the authenticating translator stores additional attributes for the enhanced credential, providing at least one method back to the client to enable the client to obtain values associated with those attributes.
Claim 19
Dependent Claim
169 words
In a distributed computing environment including a source computer system and a target computer system, each of which has at least one client, once server an a distributed file system, and wherein the server associated with the source computer systems runs on a client of the target computer system, a method for providing authenticated access to files stored in the target distributed file system in response to file requests originating from clients associated with the source distributed file system, comprising the steps of: using an authenticating translator to map a credential associated with an incoming client request from a source distributed file system into an enhanced credential, the enhanced credential including authentication information that establishes a principal's authentication for accessing the target distributed file system; determining whether the authenticating translator stores additional attributes for the enhanced credential; and if the authenticating translator stores additional attributes for the enhanced credential, providing at least one method back to the client to enable the client to obtain values associated with those attributes.
Claim 20
Dependent Claim
195 words
In a distributed computing environment including a source computer system and a target computer system, each of which has at least one client, at least one server and one or more distributed file systems, and wherein the server associated with the source computer system runs on a client of the target computer system, the improvement comprising: authenticator means including first and second remote attribute managers each having a set of source to target file system mappings, wherein the first remote attribute manager is associated with a first distributed file system and wherein the second remote attribute manager is associated with a second distributed file system; a remote attribute interface located between the client of the target computer system and the authenticator means, wherein the first and second remote attribute managers are registered with the remote attribute interface; and means responsive to a file request originating from a client of the source computer system for passing a handle from the authentication means through the remote attribute interface to the client of the target computer system, wherein the handle defines at least operation that is called to obtain additional information for use in completing the file request.
Claim 21
Dependent Claim
195 words
In a distributed computing environment including a source computer system and a target computer system, each of which has at least one client, at least one server and one or more distributed file systems, and wherein the server associated with the source computer system runs on a client of the target computer system, the improvement comprising: authenticator means including first and second remote attribute managers each having a set of source to target file system mappings, wherein the first remote attribute manager is associated with a first distributed file system and wherein the second remote attribute manager is associated with a second distributed file system; a remote attribute interface located between the client of the target computer system and the authenticator means, wherein the first and second remote attribute managers are registered with the remote attribute interface; and means responsive to a file request originating from a client of the source computer system for passing a handle from the authentication means through the remote attribute interface to the client of the target computer system, wherein the handle defines at least operation that is called to obtain additional information for use in completing the file request.
Claim 22
Dependent Claim
32 words
In the distributed computing environment as described in claim 16 wherein the additional information includes one or more attributes whose values are extracted and used in the processing of the file request.
Claim 23
Dependent Claim
133 words
A computer system, comprising: a client associated with a target distributed file system; a server running on the client, the server associated with a source distributed file system; and means for managing source distributed file system requests to the target distributed file system, comprising: means for maintaining a set of mappings from the source distributed files system to the target distributed file system; means for intercepting incoming file requests destined for the client associated with the target distributed file system; means responsive to the intercepting means for transforming at least one source distributed file system credential to include authentication information necessary for authenticated access to the target distributed file system; and means for controlling the server associated with the source distributed file system to make a file system request using the transformed credential.
Claim 24
Dependent Claim
133 words
A computer system, comprising: a client associated with a target distributed file system; a server running on the client, the server associated with a source distributed file system; and means for managing source distributed file system requests to the target distributed file system, comprising: means for maintaining a set of mappings from the source distributed files system to the target distributed file system; means for intercepting incoming file requests destined for the client associated with the target distributed file system; means responsive to the intercepting means for transforming at least one source distributed file system credential to include authentication information necessary for authenticated access to the target distributed file system; and means for controlling the server associated with the source distributed file system to make a file system request using the transformed credential.
Claim 25
Dependent Claim
26 words
The computer system as described in claim 18 wherein the means for managing further includes means for augmenting the transformed credential with at least one attribute.
Claim 26
Dependent Claim
18 words
The computer system as described in claim 19 wherein the means for augmenting includes a remote attribute interface.
Claim 27
Dependent Claim
106 words
A computer product in computer-readable media for managing file system requests from a source distributed file system to a target distributed file system, comprising: means for maintaining a set of mappings from the source distributed file system to the target distributed file system; means for intercepting incoming file requests destined for the target distributed file system; means responsive to the intercepting means for transforming at least one credential associated with a file request originating with the source distributed file system to include authentication information necessary for authenticated access to the target distributed file system; and means for augmenting the transformed credential with at least one attribute.
Claim 28
Dependent Claim
106 words
A computer product in computer-readable media for managing file system requests from a source distributed file system to a target distributed file system, comprising: means for maintaining a set of mappings from the source distributed file system to the target distributed file system; means for intercepting incoming file requests destined for the target distributed file system; means responsive to the intercepting means for transforming at least one credential associated with a file request originating with the source distributed file system to include authentication information necessary for authenticated access to the target distributed file system; and means for augmenting the transformed credential with at least one attribute.
References Cited (Backward Citations)
US4780821A
Cited
US5007082A
Cited
US5113519A
Cited
US5333266A
Cited
US5235642A
Cited
US5349643A
Cited
US5604490A
Cited
US5617568A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-12-20 | 2003-06-21 | 2003-12-21 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-12-20 | 2007-06-21 | 2007-12-21 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-12-20 | 2011-06-21 | 2011-12-21 | $7700.00 | Window Closed / Lapsed |