Method and system for securely replicating encrypted deduplicated storages

    公开(公告)号:US11509458B2

    公开(公告)日:2022-11-22

    申请号:US16931582

    申请日:2020-07-17

    Abstract: A method and system for securely replicating encrypted deduplicated storages. Specifically, the method and system disclosed herein entail the replication and migration of encrypted data between storage systems that support deduplication. More specifically, a first encrypted data, which may have been encrypted using a first public cryptographic key and consolidated on a source storage system, may be translated into an interim (yet still encrypted) state using a first split private cryptographic key. Thereafter, using a compound conversion key, the interim state data may be further translated into a second encrypted data, which may be characterized as being encrypted by a second public cryptographic key. Therefore, substantively, the method and system disclosed herein may be directed to the translation of encrypted data from one encryption scheme to another while in-flight from a source storage system to a target storage system.

    Techniques for performing backups using hints

    公开(公告)号:US20220342766A1

    公开(公告)日:2022-10-27

    申请号:US17236757

    申请日:2021-04-21

    Abstract: Processing I/O operations may include: receiving, at a data storage system, an I/O operation from a host, wherein the I/O operation is directed to a logical address and includes an I/O tag used in connection with performing data reduction processing for first data stored at the logical address; and performing processing to back up a data set including the first data stored at the logical address. The processing may include: sending, from the data storage system to a backup application, the data set and hints regarding the first data set, wherein the hints include a first hint determined in accordance with the I/O tag from the host; performing, in accordance with the hints, data reduction processing of the data set to generate a second data set; and storing the second data set on one or more backup storage devices.

    Merkle super tree for synchronizing data buckets of unlimited size in object storage systems

    公开(公告)号:US11461362B2

    公开(公告)日:2022-10-04

    申请号:US16803918

    申请日:2020-02-27

    Abstract: Embodiments extend using sparse Merkle trees for smart synchronization of S3 buckets by overcoming fixed size limitations through creating another Merkle tree when the fixed size limit of the first tree is exceeded, and creating yet another tree when the second tree is filled up, and so on as needed. The method maintains a super Merkle tree of trees, in which each tree can be synchronized separately by keeping a strict division to trees according to generation number. The generation is passed from a source site to a target site during replication operations. Syncing between two data sites is efficient as the super Merkle tree of the source is synced with the super Merkle tree of the target using the hashes on the nodes, as in normal Merkle tree sync operations.

    OPTIMIZING CONTAINER IMAGE ENCRYPTION

    公开(公告)号:US20220092192A1

    公开(公告)日:2022-03-24

    申请号:US17025324

    申请日:2020-09-18

    Abstract: One example method includes packaging a containerized application into at least two images. The first image may include the main application and the second image includes a decryptor. Sensitive information associated with the application is encrypted and included in the second image. The decryptor operates separately from the main application. After the decryptor successfully completes, the main application is run. The main application may include a copier layer to copy any data decrypted by the decryptor into the main application.

    DYNAMIC SHARED JOURNAL
    79.
    发明申请

    公开(公告)号:US20220066665A1

    公开(公告)日:2022-03-03

    申请号:US17454442

    申请日:2021-11-10

    Abstract: A system is provided that includes multiple different consistency groups, a respective thin journal included in each of the consistency groups, and each thin journal includes a respective thin VMDK, a thin journal space that is shared by all of the consistency groups, and the journal space includes a plurality of journal blocks, and a datastore that stores blocks allocated to the thin journals, and datastore space is dynamically allocated in journal blocks to each of the respective consistency groups.

Patent Agency Ranking