Secure cloud-based storage of data shared across file system objects and clients
AssigneeEMC IP Holding Company LLC
InventorsThomas Manville, Julio Lopez, Rajiv Desai, Nathan Rosenblum
Life of this patent
Estimating the term…
Abstract
A combined object associated with a data chunk included in a request file is determined. An encryption key associated with the combined object and a corresponding chunk hash value associated with the data chunk are used to determine a corresponding chunk key associated with the data chunk. At least a locator to be used to retrieve the combined object and the corresponding chunk key associated with the data chunk are provided to a requesting system.
Claims18
A method, comprising:
- determining a combined object associated with a data chunk included in a requested file;
- using an encryption key associated with the combined object and a corresponding chunk hash value associated with the data chunk to determine a corresponding chunk key associated with the data chunk;
- providing to a requesting system at least a locator to be used to retrieve the combined object and the corresponding chunk key associated with the data chunk;
- and
- using a metadata table to identify a plurality of chunks comprising the requested file, wherein the data chunk is identified using the metadata table.
A system, comprising:
- a processor configured to:
- determine a combined object associated with a data chunk included in a request file;
- use an encryption key associated with the combined object and a corresponding chunk hash value associated with the data chunk to determine a corresponding chunk key associated with the data chunk;
- and
- provide to a requesting system at least a locator to be used to retrieve the combined object and the corresponding chunk key associated with the data chunk;
- use a metadata table to identify a plurality of chunks comprising the requested file, wherein the data chunk is identified using the metadata table;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A computer program product, the computer program product being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- determining a combined object associated with a data chunk included in a request file;
- using an encryption key associated with the combined object and a corresponding chunk hash value associated with the data chunk to determine a corresponding chunk key associated with the data chunk;
- providing to a requesting system at least a locator to be used to retrieve the combined object and the corresponding chunk key associated with the data chunk;
- and
- using a metadata table to identify a plurality of chunks comprising the requested file, wherein the data chunk is identified using the metadata table.
Dependencies are inferred from the claim text.