# Patent

## Title
Multi-factor probe triggers

## Abstract

A method, article of manufacture, and apparatus for efficiently backing up information are disclosed. In an embodiment, this may comprise receiving information about a computer system from at least one probe, selecting data to be backed up, and backing up the selected data. Boolean and/or conditional logic may be applied to the information received from the probes, and data backed up based on the logic analysis. A probe frequency may be determined and used for polling probes, and the probe frequency may be adjusted based on factors such as the received information, server utilization, and network utilization. A modular approach may be used in which a probe determines whether a condition has been met, and transmits that determination to a backup server.

## Background
CROSS-REFERENCE TO RELATED APPLICATIONS
This application is related to co-pending U.S. patent application Ser. No. 12/347,930 for PROBE BASED BACKUP and filed concurrently herewith, which is incorporated herein by reference for all purposes; co-pending U.S. patent application Ser. No. 12/347,936 for PROBE BASED GROUP SELECTION and filed concurrently herewith, which is incorporated herein by reference for all purposes; and co-pending U.S. patent application Ser. No. 12/347,939 for MODULAR PROBE BACKUP and filed concurrently herewith, which is incorporated herein by reference for all purposes.
FIELD OF THE INVENTION
The present invention relates generally to information backup systems, and more particularly, to systems and methods of efficiently backing up information.
BACKGROUND OF THE INVENTION
Backup applications take in data from sources and store copies of the data in different locations. Backing up data is important because it enables users of data to access data in the event an original copy of data is lost or destroyed.
Typically, backing up data is automated based on time. Backup applications perform a defined number of backups during a defined time interval. For example, a backup application may perform a backup once every week.
Though automated backups based on time may provide some efficiency in backing up data, such backups do not consider to what extent data has changed during a defined time interval.
There is a need, therefore, for an improved method, article of manufacture, and apparatus for backing up information.



BRIEF DESCRIPTION OF THE DRAWINGS
The present invention will be readily understood by the following detailed description in conjunction with the accompanying drawings, wherein like reference numerals designate like structural elements, and in which:
FIG. 1 is a diagram of an embodiment of a backup system in accordance with the invention.
FIG. 2 is a diagram of an embodiment of a backup system in accordance with the invention.
FIG. 3 is a flowchart of a method to backup information in accordance with the invention.
FIG. 4 is a flowchart of a method to backup information in accordance with the invention.
FIG. 5 is a flowchart of a method to backup information in accordance with the invention.
FIG. 6 is a flowchart of a method to backup information in accordance with the invention.



DETAILED DESCRIPTION
A detailed description of one or more embodiments of the invention is provided below along with accompanying figures that illustrate the principles of the invention. While the invention is described in conjunction with such embodiment(s), it should be understood that the invention is not limited to any one embodiment. On the contrary, the scope of the invention is limited only by the claims and the invention encompasses numerous alternatives, modifications, and equivalents. For the purpose of example, numerous specific details are set forth in the following description in order to provide a thorough understanding of the present invention. These details are provided for the purpose of example, and the present invention may be practiced according to the claims without some or all of these specific details. For the purpose of clarity, technical material that is known in the technical fields related to the invention has not been described in detail so that the present invention is not unnecessarily obscured.
It should be appreciated that the present invention can be implemented in numerous ways, including as a process, an apparatus, a system, a device, a method, or a computer readable medium such as a computer readable storage medium containing computer readable instructions or computer program code, or as a computer program product, comprising a computer usable medium having a computer readable program code embodied therein. In the context of this disclosure, a computer usable medium or computer readable medium may be any medium that can contain or store the program for use by or in connection with the instruction execution system, apparatus or device. For example, the computer readable storage medium or computer usable medium may be, but is not limited to, a random access memory (RAM), read-only memory (ROM), or a persistent store, such as a mass storage device, hard drives, CDROM, DVDROM, tape, erasable programmable read-only memory (EPROM or flash memory), or any magnetic, electromagnetic, infrared, optical, or electrical means system, apparatus or device for storing information. Alternatively or additionally, the computer readable storage medium or computer usable medium may be any combination of these devices or even paper or another suitable medium upon which the program code is printed, as the program code can be electronically captured, via, for instance, optical scanning of the paper or other medium, then compiled, interpreted, or otherwise processed in a suitable manner, if necessary, and then stored in a computer memory. Applications, software programs or computer readable instructions may be referred to as components or modules. Applications may be hardwired or hard coded in hardware or take the form of software executing on a general purpose computer or be hardwired or hard coded in hardware such that when the software is loaded into and/or executed by the computer, the computer becomes an apparatus for practicing the invention. Applications may also be downloaded in whole or in part through the use of a software development kit or toolkit that enables the creation and implementation of the present invention. In this specification, these implementations, or any other form that the invention may take, may be referred to as techniques. In general, the order of the steps of disclosed processes may be altered within the scope of the invention.
An embodiment of the invention will be described with reference to a backup system in the form of a storage system configured to store files, but it should be understood that the principles of the invention are not limited to data storage systems. Rather, they are applicable to any system capable of storing and handling various types of objects, in analog, digital, or other form. Although terms such as document, file, object, etc. may be used by way of example, the principles of the invention are not limited to any particular form of representing and storing data or other information; rather, they are equally applicable to any object capable of representing information.
Disclosed herein are a method and system to efficiently backup information. Generally, backups are performed automatically based on defined time intervals. However, such backups do not take into account to what extent data has changed since a previous backup. For example, if a backup application was set to perform a backup of a source (client) every week, but there was no change in the client for a week, two consecutive backups would have identical information. This lowers the efficiency and usefulness of a backup system. Not only would a backup system have to transmit twice as much data as necessary, but a backup system may also unnecessarily create client downtime. Furthermore, in backup systems which store a set number of backup points, having two backup points which are identical or very similar reduces the usefulness of having multiple backup points.
The present invention allows for backup systems to automatically perform backups based on user-defined conditions. In some embodiments, user-defined conditions may include state of a backup server, network traffic, level of activity which has occurred on a client since previous backup, etc. By backing up data based on user-defined conditions, problems of time-only based backups are alleviated, and greater efficiency is achieved.
FIG. 1 illustrates an embodiment of the current invention. A backup system 10 comprises clients 100, probe groups 102, backup servers 104, probes 106, and probe manager 108. Clients 100 are the sources of backup data, and may be transitory or non-transitory. Transitory clients are clients in which data is moving, such as network traffic. Non-transitory clients are clients in which data is not moving, such as a disk drive or CD-ROM. Backup servers 104 are servers which perform backups of Clients 100. It should be understood that although an embodiment is being described as being used with disk drives, any type of storage may be used, such as tape drives, content addressable storage, flash memory, optical drives, CD-Recordable drives, DVD-Recordable drives, non-volatile storage, etc.
Probes are used to detect changes in their respective host. As shown by various Probes 106 in FIG. 1, Probes 106 may reside in a client or a backup server. In some embodiments, a client-based probe may review a database. For example, a script may be used to generate a log of activity taking place in a database. A probe may monitor characteristics of a log(such as size, etc.). If a monitored characteristic reaches a user-defined criteria (such as a log reaching 1 GB in size), a probe may indicate that a backup is needed or allowed to proceed. In some embodiments, a server-based probe may evaluate how much traffic is on a backup server. In some embodiments, probes may reside inside a client directory specified by a user. Furthermore, in some embodiments, multiple probes may reside in a single host.
Probes are also pluggable, meaning that a first probe may be replaced with a second probe configured to obtain information. The backup server does not have to know the details of what the probes are monitoring, and may be configured to receive only an indication of whether a condition has been met. This allows for a modular framework. In some embodiments, the second probe may be configured to obtain information different than the first probe.
FIG. 2 illustrates an embodiment of the current invention in NetWorker, a product developed by EMC Corporation. NetWorker system 200 comprises NetWorker Manager Console 200, Remote Access Protocol (RAP) 202, Jobsdb 204, Nsrd 206, Savegrp 208, Nsrjobd 210, and Probes 212. RAP 202 is a database which allows for NetWorker configuration information and interface with the rest of NetWorker system 200. Jobsdb 204 is a database of jobs (backup operations). Nsrd 206 is the main NetWorker server daemon. Savegrp 208 is a helper function to nsrjobd that defines time based schedules for jobs. Savegrp 208 requests execution of Probes 212, reports their results, and decides whether to proceed with the backup. Nsrjobd 210 is the daemon that controls the execution of jobs within Networker system 200, and knows which client directory Probes 212 reside in.
Probe groups 102 are used to group Probes 106 together. Probe groups are defined by the user and are very customizable. As shown in FIG. 1, in some embodiments, probe groups may be based on a probe's location. Client-based probes belong to a probe group, while server-based probes belong to a different probe group. In some embodiments, probes may be grouped together based on what they probe, not necessarily where they probe. For example, a probe group may consist of probes monitoring remaining disk space. This group would be independent of location, (e.g., a probe monitoring disk space can be in a client or a backup server).
A modular framework may be implemented using probe groups, although a modular frame work may be implemented without using probe groups. Probe groups separate probes from backup servers, so backup servers do not know what probes are doing. In some embodiments, probes send to probe groups an affirmative or a negative (e.g. proceed with a backup, or do not proceed with a backup). Probe groups may then send an affirmative or a negative to a probe manager, which in turn may send an affirmative or negative to a backup server.
FIG. 4 illustrates a flowchart illustrating one embodiment of the present invention utilizing a modular framework. In step 400, a probe is used to obtain information about a computer system. In step 402, information obtained from the probe is used to determine whether a condition has been met. In step 404, the determination of whether the condition has been met is transmitted to a backup server. In step 406, the backup server is caused to backup data based on whether the condition has been met.
The Probe manager 108 receives the results from Probe groups 102. In some embodiments, depending on a user's preferences, Probe manager 108 will instruct Backup servers 104 to perform a backup of Clients 100. In some embodiments, a user may require that a backup be performed only if there has been sufficient activity on clients since the most recent backup, and if the network is not too busy. Following the above example, if three out of five client-based probes detected a requisite level of activity, its probe group would report an affirmative signal to a probe manager to perform a backup. However, if there was another probe group consisting of server-based probes, and server based probes did not detect a requisite level of bandwidth available on backup servers, its probe group would report a negative signal to a probe manager. In this example, a user required an affirmative signal from both probe groups, so a probe manager would not inform backup servers to perform a backup.
As illustrated above, probe managers and probe groups allow for great flexibility in backup systems. The above example used only one layer of logic, involving only a logical function “AND.” However, users are not limited to one layer or one logical function. Users may apply a wide variety of logic, including use of logical functions “AND,” “OR,” “NOT,” Boolean operations, “IF,” “THEN,” “ELSE,” “WHILE” etc. Depending on a user's needs, the level of logic required to determine when to perform a backup may be quite sophisticated.
FIG. 3A illustrates a flowchart for backing up information in one embodiment of the invention. In step 300, information about a computer system is received from a plurality of probes. In step 302, data is backed up based on a negative result from at least one of the plurality of probes.
FIG. 3B illustrates a flowchart for backing up information in one embodiment of the invention. In step 304, information about a computer system is received from a first probe. In step 306, based on the information from the first probe, information about a computer system is received from a second probe. In step 308, data is backed up based on the information from the second probe.
It should be understood that one need not follow the examples given above. In some embodiments, probes may send more detailed information to a probe group. Such detailed information may include the date and time which a database was modified, the importance of data (e.g. an important accounting excel sheet compared to an outdated marketing document), etc. Probe groups may use information obtained from probes to perform its own analysis to whether or not a backup should proceed. In some embodiments, probe groups may not analyze information obtained from probes and instead pass it directly to a probe manager. The process for determining whether a condition has been met may be done on a backup server, on a client being probed, or on a different client. The level of customization may be quite high. Furthermore, information obtained from probes may be used to select what kind of data to backup. For example, if a probe detected that a hard disk may be in danger of failing, a backup server may backup critical data on the hard disk.
FIG. 5 is a flowchart illustrating a method for backing up data in one embodiment of the present invention. In step 500, information about a computer system is received from at least one probe. In step 502, data is selected based on the information. In step 504, the selected data is backed up.
Furthermore, in some embodiments, it may be preferable to have probes report directly to probe managers, and not utilize probe groups. This may be the case in which there are a small number of probes. Similarly, it may be preferable to have probe groups report directly to a backup server, without utilizing a probe manager.
In some embodiments, probe groups are used to decide whether a user-defined condition has been met. For example, in a system with five clients and their respective probes, a user may set that a condition will be met if three out of five client probes detects that there has been a sufficient amount of data activity. In some embodiments, all of the probes in a probe group must detect a condition before a backup will be performed. In some embodiments, some of the probes in a probe group must detect a condition before a backup will be performed. In some embodiments, only one probe needs to detect a condition before a backup will be performed. In some embodiments, conditions must be detected by some probes and other conditions must not be detected by other probes before a backup will be performed. Users may decide how many probes need to detect a condition before a backup will be performed.
Backup systems may consist of many clients and servers, so it may not be feasible for probes to constantly report back to probe groups or probe managers. In some embodiments, it may be preferable that probes report during set time intervals, such as when polled by backup systems, and the frequency of polling may be referred to as probe frequency. For example, a user may program probes to wake up, monitor conditions (e.g. client activity, network traffic, etc.) for thirty minutes, and then sleep for an hour before a next wake-up. In some embodiments, users may define a start time and an end time for probes to poll their host.
In some embodiments, users may define a time interval or probe frequency. In some embodiments, a backup system can use previous probe results to determine the length of the next time interval. For example, if a probe returned a negative signal (e.g. do not backup) ten times consecutively, a backup system may “learn” that the probe does may not need to be probing as often and may increase the probe's time interval or lower the probe's probe frequency. Similarly, if a probe returned a positive signal (e.g. do perform a backup) ten times consecutively, a backup system may learn that the probe may need to be probing more often and decrease the probe's time interval or increase the probe's probe frequency.
Furthermore, in some embodiments, a probe interval may be adjusted according to information obtained from another probe. For example, if a first probe obtained information that a backup server was overloaded (e.g. did not have any bandwidth to perform additional functions), a backup system could increase other probes' time intervals so that the load on a backup server would be reduced. In some embodiments, modifying probes' time intervals may be universal (e.g. all probes' time intervals may be increased 20%). In some embodiments, modifying probes' time intervals may be variable (e.g. time intervals of probes monitoring legal documents may be unchanged, while time intervals of probes monitoring CPU usage may be increased). This may be the case where different data classifications or priorities exist. For example, legal documents are in a classification that is different than marketing documents. Recent financial statements may have a higher priority than ten year old financial statements.
FIG. 6 illustrates a method to backup data in one embodiment of the present invention. The first step, step 600, is to determine a probe frequency. In step 602, polling of probes at the probe frequency is done to obtain information about a computer system. In step 604, data is backed up based on the information.
A backup system may also use relationships between databases to determine time interval adjustments. For example, if a backup system reduced a time interval of a probe monitoring accounting records, a backup system may accordingly reduce a time interval of a probe monitoring financial records since both types of records have a close correlation (e.g. if accounting records change, financial records are very likely to change).
For the sake of clarity, the processes and methods herein have been illustrated with a specific flow, but it should be understood that other sequences may be possible and that some may be performed in parallel, without departing from the spirit of the invention. Additionally, steps may be subdivided or combined. As disclosed herein, software written in accordance with the present invention may be stored in some form of computer-readable medium, such as memory or CD-ROM, or transmitted over a network, and executed by a processor.
Though the above has been described with reference to the term “backup” for illustrative purposes, the present invention is equally applicable to all forms of data duplication. These forms of data duplication include replication and archiving, among others.
All references cited herein are intended to be incorporated by reference. Although the present invention has been described above in terms of specific embodiments, it is anticipated that alterations and modifications to this invention will no doubt become apparent to those skilled in the art and may be practiced within the scope and equivalents of the appended claims. More than one computer may be used, such as by using multiple computers in a parallel or load-sharing arrangement or distributing tasks across multiple computers such that, as a whole, they perform the functions of the components identified herein; i.e. they take the place of a single computer. Various functions described above may be performed by a single process or groups of processes, on a single computer or distributed over several computers. Processes may invoke other processes to handle certain tasks. A single storage device may be used, or several may be used to take the place of a single storage device. The present embodiments are to be considered as illustrative and not restrictive, and the invention is not to be limited to the details given herein. It is therefore intended that the disclosure and following claims be interpreted as covering all such alterations and modifications as fall within the true spirit and scope of the invention.

## Claims

1. A process for backing up data, comprising:
receiving information about a computer system from a client probe group comprising a plurality of client probes, wherein information from the client probe group indicates if a first condition has been met;
based on the information from the client probe group, receiving information from a server probe group comprising a plurality of server probes, wherein information from the server probe group indicates if a second condition has been met, and wherein a first probe in the client probe group monitors a log file size, and wherein the first probe resides in a client directory specified by a user;
wherein receiving the information from the client probe group and the server probe group includes receiving the information simultaneously;
transmitting an affirmative or a negative to a backup server by a probe manager, wherein the affirmative or the negative is received from at least one of the client probe group and the server probe group, wherein the client probe group and the server probe group monitor different types of information;

backing up data based on the affirmative or the negative received by the backup server from the probe manager.

2. The process as recited in claim 1, wherein backing up data includes backing up data associated with the computer system.

3. The process as recited in claim 1, wherein backing up data includes backing up data associated with another computer system.

4. The process as recited in claim 1 further comprising, performing a Boolean operation, wherein the Boolean operation includes performing a NAND, NOR, or XOR operation.

5. The process as recited in claim 1, further comprising performing conditional logic on information received from the client probe group and the server probe group.

6. A method for backing up data comprising:
receiving information about a computer system from a client probe group comprising a plurality of client probes, wherein information from the client probe group indicates if a first condition has been met;
based on the information from the client probe group, receiving information from a server probe group comprising a plurality of server probes, wherein information from the server probe group indicates if a second condition has been met, and wherein a first probe in the client probe group monitors a log file size, and wherein the first probe resides in a client directory specified by a user;
wherein receiving the information from the client probe group and the server probe group includes receiving the information simultaneously;
transmitting an affirmative or a negative to a backup server by a probe manager, wherein the affirmative or the negative is received from at least one of the client probe group and the server probe group, wherein the client probe group and the server probe group monitor different types of information;
backing up data based on the affirmative or the negative received by the backup server from the probe manager.

7. The method as recited in claim 6, wherein receiving information from the client probe group includes receiving information about the computer system.

8. The method as recited in claim 6, wherein receiving information from the server probe group includes receiving information about a second computer system.

9. The method as recited in claim 6 further comprising, wherein performing a Boolean operation, wherein the Boolean operation includes performing a NAND, NOR, or XOR operation.

10. A computer program product for backing up data, comprising a non-transitory computer readable medium having program instructions embodied therein for:
receiving information about a computer system from a client probe group comprising a plurality of client probes, wherein information from the client probe group indicates if a first condition has been met;
based on the information from the client probe group, receiving information from a server probe group comprising a plurality of server probes, wherein information from the server probe group indicates if a second condition has been met, and wherein a first probe in the client probe group monitors a log file size, and wherein the first probe resides in a client directory specified by a user;
wherein receiving the information from the client probe group and the server probe group includes receiving the information simultaneously;
transmitting an affirmative or a negative to a backup server by a probe manager, wherein the affirmative or the negative is received from at least one of the client probe group and the server probe group, wherein the client probe group and the server probe group monitor different types of information;
backing up data based on the affirmative or the negative received by the backup server from the probe manager.