US 12,386,532 B2
Protecting data from unprivileged processes
Arieh Don, Newton, MA (US); Efi Levi, Beer Sheba (IL); and Lior Benisty, Beer Sheva (IL)
Assigned to Dell Products L.P., Round Rock, TX (US)
Filed by Dell Products, L.P., Round Rock, TX (US)
Filed on Apr. 17, 2023, as Appl. No. 18/301,851.
Prior Publication US 2024/0345752 A1, Oct. 17, 2024
Int. Cl. G06F 3/06 (2006.01)
CPC G06F 3/064 (2013.01) [G06F 3/0659 (2013.01); G06F 3/0665 (2013.01); G06F 3/0685 (2013.01); G06F 3/0607 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
transmitting, by a host computing device comprising a processor to a storage array, an initial application configuration, comprising an application identifier corresponding to a configured application configured to be executed by the host computing device;
executing, by the host computing device, the configured application to result in an executing application, wherein the executing application corresponds to the application identifier;
generating, by the host computing device, an application-identified block command message, corresponding to the executing application, comprising a data field and a metadata field, wherein the data field comprises application information and wherein the metadata field comprises the application identifier; and
transmitting, by the host computing device to the storage array, the application-identified block command message, wherein the application identifier inserted into the metadata field is to be used by the storage array to determine, before performing an operation corresponding to the application information transmitted in the data field, that the initial application configuration comprises the application identifier transmitted in the metadata field of the application-identified command block message,
wherein the initial application configuration comprises an association between the configured application configured to be executed by the host computing device and at least one logical volume corresponding to the storage array;
requesting, by the host computing device from the storage array, a volume-specific process allowance report indicative of performance of the operation corresponding to the application information transmitted in the data field of the application-identified command block message; and
receiving, from the storage array, the volume-specific process allowance report indicative of the performance of the operation corresponding to the application information transmitted in the data field of the application-identified command block message with respect to the at least one logical volume corresponding to the storage array.