Using INQ to optimize end-to-end encryption management with backup appliances
AssigneeEMC IP Holding Company LLC
InventorsJehuda Shemer, Arieh Don, Krishna Deepak Nuthakki
Life of this patent
Estimating the term…
Abstract
One example method includes receiving, by a backup appliance, a request concerning a dataset, performing, by the backup appliance, an inquiry to determine if end-to-end encryption is enabled for a volume of a target storage array, receiving, by the backup appliance, confirmation from the storage array that end-to-end encryption is enabled for the volume, and based on the confirmation that end-to-end encryption is enabled for the volume, storing the dataset in the volume without performing encryption, compression, or deduplication, of the dataset prior to storage of the dataset in the volume.
Claims20
A computer system comprising:
- one or more processors;
- and
- one or more non-transitory hardware storage devices that store instructions that are executable by the one or more processors to cause the computer system to:
- receive, from a requestor by a backup appliance, a request concerning a backed up dataset;
- and
- either:
- when the backup appliance has a decryption key:
- notify, by the backup appliance, a target array that the backed up dataset is an end-to-end (EEE) dataset;
- and
- transmit, by the backup appliance to the target array, the backed up dataset;
- or
- when the backup appliance does not have the decryption key:
- inform, by the backup appliance and in response to the request, the requestor that access to the backed up dataset is denied because the backed up dataset is encrypted and the backup appliance does not possess the decryption key required to access data in the backed up dataset;
- and
- transmit, by the backup appliance to the target array, the backed up dataset.
A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
- receiving, from a requestor by a backup appliance, a request concerning a backed up dataset;
- and
- either:
- when the backup appliance has a decryption key:
- notifying, by the backup appliance, a target array that the backed up dataset is an end-to-end (EEE) dataset;
- and
- transmitting, by the backup appliance to the target array, the backed up dataset;
- or
- when the backup appliance does not have the decryption key:
- informing, by the backup appliance and in response to the request, the requestor that access to the backed up dataset is denied because the backed up dataset is encrypted and the backup appliance does not possess the decryption key required to access data in the backed up dataset;
- and
- transmitting, by the backup appliance to the target array, the backed up dataset.
Dependencies are inferred from the claim text.