Zero-knowledge protection for side channels in data protection to the cloud
AssigneeEMC IP Holding Company LLC
InventorsAmos Zamir, Jehuda Shemer, Kfir Wolfson
Life of this patent
Estimating the term…
Abstract
Masking a data rate of transmitted data is disclosed. As data is transmitted from a production site to a secondary site, the data rate is masked. Masking the data rate can include transmitting at a fixed rate, a random rate, or an adaptive rate. Each mode of data transmission masks or obscures the actual data rate and thus prevents others from gaining information about the data or the data owner from the data transfer rate.
Claims10
A method for protecting a side channel associated with data, the method comprising:
- determining a rate for transferring data between a production site and a secondary site;
- transferring the data at the determined rate, wherein the transferred data is padded with extra data when there is insufficient data to achieve the determined rate and wherein the transferred data is queued when the data cannot be transmitted at the determined rate, wherein the determined rate is a fixed rate;
- and
- tuning the determined rate based on a recovery point objective.
A method for protecting a side channel associated with data, the method comprising
- determining a rate for transferring data between a production site and a secondary site;
- transferring the data at the determined rate, wherein the transferred data is padded with extra data when there is insufficient data to achieve the determined rate and wherein the transferred data is queued when the data cannot be transmitted at the determined rate, wherein the determined rate is a random rate;
- setting the random rate for a specific time period and changing the rate for a next specific time period, wherein the random rate for the next specific time period is different from the random rate for the specific time period, wherein the random rate is configured to appear as normal system behavior.
A method for protecting a side channel associated with data, the method comprising:
- determining a rate for transferring data between a production site and a secondary site;
- transferring the data at the determined rate, wherein the transferred data is padded with extra data when there is insufficient data to achieve the determined rate and wherein the transferred data is queued when the data cannot be transmitted at the determined rate, wherein the determined rate is an adaptive rate;
- and
- repeatedly:
- sending raw metric data from a cloud storage driver to a discretization engine;
- performing a discretization process by the discretization engine based on the raw metric data and an allowed frequency;
- predicting a new rate;
- and
- transmitting the data at the new rate.
Dependencies are inferred from the claim text.