Performing deduplication on multi-tenancy dataset
AssigneePure Storage, Inc.
InventorsRonald Karr, Constantine Sapuntzakis, John Colgrove
Life of this patent
Estimating the term…
Abstract
End-to-end encryption in a storage system with multi-tenancy, includes: performing deduplication on a first tenant dataset, the first tenant dataset including data encrypted using a first storage system encryption key; and performing deduplication on a second tenant dataset, the second tenant dataset including data encrypted using a second storage system encryption key, where deduplication is not performed between the first and second tenant datasets.
Claims20
A method implemented by a storage system comprising a processor and a memory, the method comprising:
- deduplicating, by the processor of the storage system, different decrypted datasets of a particular tenant of a plurality of tenants storing datasets in the storage system, wherein the different decrypted datasets were previously encrypted with different storage system encryption keys for the particular tenant, wherein deduplication data for a decrypted dataset includes limiting deduplication processes to data within a same decrypted dataset;
- and
- storing, within the storage system, the deduplicated tenant datasets.
A storage system, comprising:
- a memory;
- and
- a processing device, operatively coupled to the memory, configured to:
- deduplicate, by the processing device of the storage system, different decrypted datasets of a particular tenant of a plurality of tenants storing datasets in the storage system, wherein the different decrypted datasets were previously encrypted with different storage system encryption keys for the particular tenant, wherein deduplication data for a decrypted dataset includes limiting deduplication processes to data within a same decrypted dataset;
- and
- store, within the storage system, the deduplicated tenant datasets.
A non-transitory computer readable storage medium storing instructions which, when executed, cause a processor of a storage system to:
- deduplicate, by the processor of the storage system, different decrypted datasets of a particular tenant of a plurality of tenants storing datasets in the storage system, wherein the different decrypted datasets were previously encrypted with different storage system encryption keys for the particular tenant, wherein deduplication data for a decrypted dataset includes limiting deduplication processes to data within a same decrypted dataset;
- and
- store, within the storage system, the deduplicated tenant datasets.
Dependencies are inferred from the claim text.