| CPC G06F 21/565 (2013.01) | 21 Claims |

|
1. A method for automatically provisioning a data backup and recovery system by a storage vault controller, the method comprising:
receiving specification of a number of end points to use for storing user data in one or more cloud-based storage systems;
receiving a distinct name for each of the end points;
receiving cloud storage credentials for a plurality of pre-configured cloud storage buckets;
receiving a mapping of the end points to the pre-configured cloud storage buckets;
mounting the end point names;
automatically associating each end point with a corresponding pre-configured cloud storage bucket and cloud storage credentials in accordance with the mapping wherein user data written to a mounted end point name is automatically written securely to the corresponding cloud storage bucket; and
generating a plurality of successive immutable incremental snapshots of the data in the cloud storage buckets, wherein the storage vault controller is configured to only accept user data from one or more trusted endpoints internal to a private user network, and wherein the storage vault controller is configured to communicate securely with the one or more cloud-based storage systems via a user private core routing firewall through an interface that will not accept any externally sourced connections other than authorized secure vault administrator connections.
|