Patent ID: 11909418
Assignee: PURE STORAGE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 11:
12. A method for execution by one or more modules of one or more computing devices of a dispersed or storage network, the method comprising:
receiving a memory access request for a data object stored within the storage network, wherein the data object is segmented into a plurality of data segments, wherein a data segment of the plurality of data segments is dispersed error encoded in accordance with dispersed error encoding parameters to produce a set of encoded data slices, wherein the set of encoded data slices are distributedly stored among a plurality of storage units (SUs), wherein a decode threshold number of encoded data slices are needed to recover the data segment;
determining a realm for the memory access request, wherein a realm indicates an affiliation with one or more users;
determining an authorization service for the realm, wherein the authorization service includes a third-party, wherein the third party is configured to provide authorization information for the realm; and
for each storage unit of the plurality of storage units:
generating an authorization request for the memory access request;
transmitting the authorization request to an authorization service;
receiving an authorization request response from the authorization service;
determining, based on the authorization request response, whether the memory access request is authorized; and
in response to a determination that the memory access request is authorized, processing the memory access request.