Event-Based User State Synchronization in a Cloud Storage System

Abstract

Cloud storage systems and methods are described for providing event-based user state synchronization among the various cloud elements. A global user directory is maintained on a remote cloud storage system. The global user directory includes a plurality of global user definitions associated with a plurality of user accounts, where each of the user accounts has access to at least one of a remote file system (RFS) hosted by the remote cloud storage system and a local file system (LFS) hosted by a local cloud storage system. As global user definition are altered on the remote cloud storage system, user events are generated and communicated to the local cloud storage system, where they are applied to synchronize the local user definitions with the global user definitions. The invention facilitates centralized control of user definitions, near real-time event delivery to local cloud storage systems, and separation of authentication processes from customers' active directory services.

1 . In a remote file storage system, a method for synchronizing global user definitions of said remote file storage system with local user definitions of at least one local file storage system, said method comprising:
 maintaining a global user directory comprising a plurality of global user definitions associated with a plurality of user accounts, each of said user accounts having access to at least one of a remote file system (RFS) hosted by said remote file storage system and a local file system (LFS) hosted by said local file storage system;   altering a global user definition associated with a particular user account, said particular user account having access to said LFS;   generating a user event indicative of said altered global user definition; and   providing said user event to said local file storage system.   
     
     
         2 . The method of  claim 1 , further comprising:
 establishing a connection with a subscriber directory service maintained by a subscriber associated with said plurality of user accounts; and   importing at least some of said global user definitions from said subscriber directory service.   
     
     
         3 . The method of  claim 2 , wherein said step of importing at least some of said global user definitions from said subscriber directory service includes mapping user definitions of said subscriber directory service to associated global user definitions in said global user directory. 
     
     
         4 . The method of  claim 1 , wherein said step of generating said user event occurs if:
 a new global user definition indicative of a new user account is created in said global user directory;   an existing global user definition is deactivated; or   a password associated with one of said global user definitions is changed.   
     
     
         5 . The method of  claim 1 , wherein said step of generating said user event occurs only if said particular user account has access to said LFS. 
     
     
         6 . The method of  claim 1 , wherein said step of providing said user event to said local file storage system comprises:
 establishing a connection with a real time event delivery (RED) service, said RED service being configured to also establish a separate connection with said local file storage system; and   sending a message indicative of said user event to said RED service.   
     
     
         7 . A remote file storage system configured to synchronize global user definitions of said remote file storage system with local user definitions of at least one local file storage system, said remote file storage system comprising:
 a processing unit configured to execute code;   a wide area network (WAN) adapter;   memory for storing data and said code, said data and said code comprising
 a global user directory comprising a plurality of global user definitions associated with a plurality of user accounts, each of said user accounts having access to at least one of a remote file system (RFS) hosted by said remote file storage system and a local file system (LFS) hosted by said local file storage system, 
 a directory services module operative to alter a global user definition associated with a particular user account, said particular user account having access to said LFS, 
 a user state synchronizer operative to generate a user event indicative of said altered global user definition, and 
 a user event interface operative to provide said user event to said local file storage system. 
   
     
     
         8 . The system of  claim 7 , wherein said code further comprises a subscriber directory synchronizer operative to establish a connection with a subscriber directory service maintained by a subscriber associated with said plurality of user accounts and import at least some of said global user definitions from said subscriber directory service. 
     
     
         9 . The system of  claim 8 , wherein subscriber directory synchronizer is further configured to map user definitions of said subscriber directory service to associated global user definitions of said global user directory. 
     
     
         10 . The system of  claim 7 , wherein said user state synchronizer generates said user event if:
 a new global user definition indicative of a new user account is created in said global user directory;   an existing global user definition is deactivated; or   a password associated with one of said global user definitions is changed.   
     
     
         11 . The system of  claim 7 , wherein said user state synchronizer is configured to generate said user event only if said particular user account has access to said LFS. 
     
     
         12 . The system of  claim 7 , wherein:
 said user event interface is configured to establish a connection with a real time event delivery (RED) service; and   said RED service is configured to provide said user event to said local file storage system via a separate connection with said local file storage system.   
     
     
         13 .- 28 . (canceled) 
     
     
         29 . A method for synchronizing user states over a plurality of storage systems of a hybrid cloud system, said method comprising:
 maintaining a remote cloud storage system for storing a remote file system (RFS) associated with a plurality of subscribers;   deploying a first hybrid cloud application on a first local storage system associated with a particular subscriber, said first local storage system located remotely from said remote cloud storage system and hosting a first local file system (LFS);   deploying a second hybrid cloud application on a second local storage system associated with said particular subscriber, said second local storage system hosting a second LFS and being located remotely from said remote cloud storage system and said first local storage system;   synchronizing a first set of cloud user definitions stored on said remote cloud storage system and a first set of local user definitions stored on said first local storage system; and   synchronizing a second set of cloud user definitions stored on said remote cloud storage system and a second set of local user definitions stored on said second local storage system.   
     
     
         30 . The method of  claim 29 , wherein said steps of synchronizing said first set of cloud user definitions and said first set of local user definitions and synchronizing said second set of cloud user definitions and said second set of local user definitions include:
 detecting a change to at least one of said first set and said second set of cloud user definitions;   generating a user event responsive to said change; and   communicating said user event to at least one of said first local storage system and said second local storage system depending on which of said first set of cloud user definitions and said second set of cloud user definitions includes said particular cloud user definition.   
     
     
         31 . The method of  claim 30 , wherein said step of generating said user event includes generating said user event responsive to a new cloud user definition being created or an existing cloud user definition being deactivated or altered. 
     
     
         32 . The method of  claim 29 , further comprising:
 providing headquarter (HQ) user definitions to said remote cloud storage system, said HQ user definitions associated with said particular subscriber; and   generating at least some of said first and said second sets of cloud user definitions based on said HQ user definitions.   
     
     
         33 . The method of  claim 32 , further comprising creating said first and said second sets of local user definitions responsive to said first and said second sets of cloud user definitions being generated. 
     
     
         34 . The method of  claim 32 , further comprising:
 deploying user directory software to a system associated with said particular subscriber, said system storing said HQ user definitions; and wherein   said user directory software being configured to scan said HQ user definitions and provide at least some of said HQ user definitions to said remote cloud storage system.   
     
     
         35 . (canceled) 
     
     
         36 . The method of  claim 6 , wherein:
 said step of establishing said connection with said RED service includes establishing a persistent connection with said RED service;   said RED service is configured to establish a separate persistent connection with said local file storage system; and   said message indicative of said user event is sent responsive to said user event being generated.   
     
     
         37 . The system of  claim 12 , wherein:
 said connection with said RED service and said separate connection with said local file storage system are persistent connections; and   said user event interface is configured to provide said user event to said RED service responsive to said user state synchronizer generating said user event.