Global File Server ID Mapping for Collision-Free Replication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional systems assign local user identifiers that are unique only to a specific file server and domain, leading to potential ID collisions during replication, migration, or disaster recovery, making it difficult to determine user access and permissions accurately across multiple domains.

Innovation Solution

A virtualized file server identifies trusted domains, allocates a range of global identifiers (GIDs) to each domain, and stores a mapping between local user security identifiers (SIDs) and GIDs, providing this mapping to replication targets to ensure consistent and unique user identification across distributed file servers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If local user identifiers are assigned by individual file servers within a domain, then each file server can independently manage user access and permissions, but ID collisions occur during replication and migration when multiple file servers use the same local user ID

Engineering Contradiction:

ImproveIndependent user access managementVSAvoidUser identification consistency

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent introduces a centralized directory service as an intermediary that mediates between multiple file servers and user accounts. The directory service stores and manages user identifiers, security identifiers, and access permissions centrally, allowing file servers to independently manage local access while maintaining global uniqueness through the intermediary's centralized registry

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system segments user identification into two distinct parts: local user identifiers that are unique to each file server and domain, and security identifiers that are globally unique and stored in the centralized directory service. This segmentation allows local independence while ensuring global uniqueness through the combination of both identifier types

Inventive Principle:

Principle #1Segmentation

2Productivity

If file servers use locally unique user identifiers, then each server can efficiently manage its own user access, but ID collisions prevent correct determination of user access rights during replication and failover

Engineering Contradiction:

ImproveUser access management efficiencyVSAvoidUser access right determination accuracy

Core Design Contradiction:

ProductivityVSMeasurement precision

Solution Approach 1:

The centralized directory service acts as an intermediary that provides authoritative resolution for user access rights. During replication and failover, the directory service is queried to determine the correct user access rights based on globally unique security identifiers, ensuring accurate measurement and determination of permissions even when local identifiers collide

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system adds an additional dimension to user identification by introducing security identifiers that exist in a global namespace separate from local user identifiers. This dimensional addition allows the system to maintain efficient local access management while enabling accurate global user access right determination through the extra identifier layer

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

3Reliability

If a centralized directory service manages user identifiers across the domain, then global uniqueness is achieved, but the system complexity increases compared to decentralized file server management

Engineering Contradiction:

ImproveUser identifier uniquenessVSAvoidSystem architecture complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The centralized directory service is designed to perform multiple functions: storing user accounts, managing security identifiers, controlling access permissions, and supporting replication and failover operations. By consolidating these diverse functions into a single universal system, the patent reduces overall system complexity compared to having separate mechanisms for each function

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS12619754B2Systems and methods for generating consistent global identifiers within a distributed file server environment including examples of global identifiers across domains

Publication Date: 2026.05.05 NUTANIX INC

AI summary

Examples described herein are generally directed towards generating, allocating, and assigning consistent file server user identifiers (IDs) (also described herein as a global identifier (GID)) domains subscribed to by file server(s) within a distributed file server environment. In operation, a virtualized file server of a distributed file server system may scan for and identify a trusted domain subscribed to by the virtualized file server. The virtualized file server may allocate to the trusted domain a range of file server user IDs. The virtualized file server may store a mapping between local user security identifiers (SIDs) in the trusted domain and a respective file server user IDs within the allocated range. The virtualized file server may provide the mapping to a replication target, such as during a replication, migration, and/or a disaster recovery event.