Content aware hierarchical encryption for secure storage systems

    公开(公告)号:US10223544B1

    公开(公告)日:2019-03-05

    申请号:US15222435

    申请日:2016-07-28

    Abstract: In one embodiment, in response to a request received from a client for retrieving a data object stored in a storage system, a root key is obtained from the request. The data object is represented by metadata in a hierarchical structure having a plurality of levels. Each level includes a plurality of nodes and each node being one of a root node, a leaf node and an intermediate node. The hierarchical structure of metadata associated with the data object is traversed in a top-down approach to decrypt each of a plurality of nodes in the hierarchical structure using a key provided from its parent node, starting from the root node to the leaf nodes, including decrypting the root node using the root key. Decrypted data associated with the plurality of nodes is transmitted to the client.

    Method to optimize random IOS of a storage device for multiple versions of backups using incremental metadata

    公开(公告)号:US10055420B1

    公开(公告)日:2018-08-21

    申请号:US14788598

    申请日:2015-06-30

    Abstract: Methods, systems, and apparatus for optimizing a cache memory device of a storage system are described. In one embodiment, a first base segment tree representing a first full backup including data and metadata describing the data is cached in a cache memory device. Subsequently, a plurality of incremental segment trees representing incremental backups to the first full backup are cached in the cache memory device. Each of incremental segment trees corresponding to the changes to the first full backup, without modifying the first base segment tree in response to the changes. At least two of the incremental segment trees are merged into an updated incremental segment tree to reduce a storage space of the cache memory device to store the incremental segment trees. The updated incremental segment tree comprises data and metadata represented by two or more incremental segment trees.

    Sparse segment trees for high metadata churn workloads

    公开(公告)号:US09996426B1

    公开(公告)日:2018-06-12

    申请号:US14788184

    申请日:2015-06-30

    Abstract: Methods, systems, and apparatus for providing data storage services of a storage system are described. In one embodiment, a first file representing a first full backup including data and metadata describing the data is cached as a first segment tree having a plurality of layers of nodes in a tree hierarchy. A second file representing an incremental backup of the first full backup is cached as a second segment tree in the cache memory device. The second segment tree describes changes of the data and the metadata of the incremental backup in view of the data and the metadata of the first full backup without caching any of nodes of the first segment tree again. The first and second segment trees are collectively used to represent a second full backup based on the incremental backup and the first full backup.

    Content aware hierarchical encryption for secure storage systems
    5.
    发明授权
    Content aware hierarchical encryption for secure storage systems 有权
    用于安全存储系统的内容感知分层加密

    公开(公告)号:US09432192B1

    公开(公告)日:2016-08-30

    申请号:US14229364

    申请日:2014-03-28

    CPC classification number: H04L9/0836 H04L9/0891 H04L9/0894 H04L2209/60

    Abstract: In one embodiment, metadata of a data object to be stored in a storage system is received, where the metadata is in a hierarchical structure having multiple levels, each level having multiple nodes and each node being one of a root node, a leaf node and an intermediate node. Each leaf node represents a deduplicated segment associated with the data object. The hierarchical structure is traversed to encrypt each of the nodes in a bottom-up approach, starting from leaf nodes, using different keys. A child key for encrypting content of a child node is stored in a parent node that references the child node, and the child key is encrypted by a parent key associated with the parent node. The encrypted content of the nodes are then stored in one or more storage units of the storage system in a deduplicated manner.

    Abstract translation: 在一个实施例中,接收要存储在存储系统中的数据对象的元数据,其中元数据处于具有多个级别的分层结构中,每个级别具有多个节点,并且每个节点是根节点,叶节点和 一个中间节点。 每个叶节点表示与数据对象相关联的重复数据删除段。 遍历层次结构以自下而上的方式加密每个节点,从叶节点开始,使用不同的密钥。 用于加密子节点的内容的子密钥存储在引用子节点的父节点中,并且子密钥由与父节点相关联的父密钥加密。 然后将节点的加密内容以重复数据删除的方式存储在存储系统的一个或多个存储单元中。

Patent Agency Ranking