Data archiving system
AssigneeImation Corp.
InventorThomas F. Gosnell
Life of this patent
Estimating the term…
Abstract
An encrypted file storage solution consists of a cluster of processing nodes, external data storage, and a software agent (the “File System Watcher”), which is installed on the application servers. Cluster sizes of one node up to many hundreds of nodes are possible. There are also remote “Key Servers” which provide various services to one or more clusters. The preceding describes a preferred embodiment, though in some cases it may be desirable to “collapse” some of the functionality into a smaller number of hardware devices, typically trading off cost versus security and fault-tolerance.
Claims22
1-8. (canceled)
A computer-implemented method of archiving data, comprising:
- receiving at a data archiving computer system data files for storage from a client node;
- encrypting with the data archiving computer system each data file received for storage with a respective unique encryption key;
- storing each encrypted data file in asset storage of the data archiving computer system;
- generating with the data archiving computer system a list of one or more of the data files marked for deletion from the asset storage;
- and
- deleting the one or more data files in the list from the asset storage by deleting the respective unique encryption keys of each data file in the list.
14-19. (canceled)
A computer-implemented method of deleting files, comprising:
- generating with a data archiving computer system a list of one or more files marked for deletion from asset storage, each of the one or more files being encrypted with a respective unique encryption key and stored as an asset in the asset storage;
- and
- storing the respective unique encryption keys in a key container, the key container contained in a cached code page;
- deleting the one or more files in the list from the asset storage by deleting the respective unique encryption keys from the key container.
A data archiving system, comprising:
- an application server configured to receive data files for storage from a client node, the application server comprising asset storage and computer processor nodes configured to:
- encrypt the data files for storage as assets in the asset storage, wherein each of the data files is encrypted with a respective unique encryption key;
- generate a list of one or more of the data files for deletion from the asset storage, wherein the respective unique encryption keys are required to decrypt the files in the list;
- and
- delete the one or more files from the asset storage by deleting the respective unique encryption key of each data file on the list.
Dependencies are inferred from the claim text.