# US 2019/0245891 A1 · Optimizing data reduction, security and encryption requirements in a network environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0245891 A1 - Document ID: US20190245891A1 - Status: Published application - Kind: A1 - Application number: 16/381,944 - Filed: 2019-04-11 - Published: 2019-08-08 - Earliest claimed: 2017-02-21 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Nathan B. Best; Mikael H. Lindström; Kurt A. Rybczyk; Daniela Kern Mainieri Trevisan - Web page: https://patentgrep.com/patent/US20190245891A1 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 16/2365: {Ensuring data consistency and integrity} - G06F 16/24578: {using ranking} - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A specification of a target network environment including target devices is received. The specification includes an identity of each of the target devices and a compression feature requirement, a deduplication feature requirement, and an encryption feature requirement of the target network environment. A performance parameter corresponding to each of the requirements is computed based on the specification. Possible combinations of the target devices and enabled features in the target devices are determined to meet the specification. Each possible combination is compared to a knowledge base to determine a performance reduction for each of the enabled features based upon the performance parameters. A desired combination of the enabled features is determined from the possible combinations for each target device based upon the comparison. The desired combination includes a combination having a performance reduction that does not exceed a threshold value for data reduction in one or more enabled features. ## Claims ### Claim 1 A method comprising: receiving a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and at least a deduplication feature requirement of the target network environment; computing, using a processor and a memory, a performance parameter corresponding to the deduplication feature requirement based on the specification of the target network environment; determining possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature; comparing each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters; and generating an instruction to configure a target device according to a desired combination of the enabled features from the possible combinations for the target device based upon the comparison, wherein the desired combination of enabled features for the target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in an enabled feature in the target device. ### Claim 2 (depends on 1) The method of claim 1, further comprising: configuring the target device according to the determined desired combination. ### Claim 3 (depends on 1) The method of claim 1, wherein the desired combination is based upon at least one of implications of enabling each feature on each combination of target devices, dependencies between each of the target devices, and data reduction threshold values for each feature. ### Claim 4 (depends on 1) The method of claim 1, further comprising: ranking each possible combination by one or more of a data reduction capacity for the possible combination. ### Claim 5 (depends on 1) The method of claim 1, further comprising: ranking each possible combination by the performance hit for each of the enabled features for the possible combination. ### Claim 6 (depends on 1) The method of claim 1, wherein the knowledge base includes historical information of a plurality of previously deployed devices of a previously deployed network environment. ### Claim 7 (depends on 6) The method of claim 6, wherein the historical information includes an identity of the plurality of previously deployed network devices and performance data related to one or more of a compression feature, a deduplication feature, and an encryption feature that are enabled for each previously deployed device. ### Claim 8 (depends on 7) The method of claim 7, wherein the historical information includes data reduction threshold values for each of the deployed devices. ### Claim 9 (depends on 1) The method of claim 1, wherein the specification further includes a compression feature requirement and an encryption feature requirement of the target network environment. ### Claim 10 (depends on 1) The method of claim 1, wherein the computing the performance parameter further comprises computing the performance parameter corresponding to the compression feature requirement and the encryption feature requirement. ### Claim 11 A computer usable program product comprising one or more computer-readable storage devices, and program instructions stored on at least one of the one or more storage devices, the stored program instructions comprising: program instructions to receive a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and at least a deduplication feature requirement of the target network environment; program instructions to compute, using a processor and a memory, a performance parameter corresponding to the deduplication feature requirement based on the specification of the target network environment; program instructions to determine possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature; program instructions to compare each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters; and program instructions to generate an instruction to configure a target device according to a desired combination of the enabled features from the possible combinations for the target device based upon the comparison, wherein the desired combination of enabled features for the target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in an enabled feature in the target device. ### Claim 12 (depends on 11) The computer usable program product of claim 11, further comprising: program instructions to configure the target device according to the determined desired combination. ### Claim 13 (depends on 11) The computer usable program product of claim 11, wherein the desired combination is based upon at least one of implications of enabling each feature on each combination of target devices, dependencies between each of the target devices, and data reduction threshold values for each feature. ### Claim 14 (depends on 11) The computer usable program product of claim 11, further comprising: program instructions to rank each possible combination by one or more of a data reduction capacity for the possible combination. ### Claim 15 (depends on 11) The computer usable program product of claim 11, further comprising: program instructions to rank each possible combination by the performance hit for each of the enabled features for the possible combination. ### Claim 16 (depends on 11) The computer usable program product of claim 11, wherein the knowledge base includes historical information of a plurality of previously deployed devices of a previously deployed network environment. ### Claim 17 (depends on 16) The computer usable program product of claim 16, wherein the historical information includes an identity of the plurality of previously deployed network devices and performance data related to one or more of a compression feature, a deduplication feature, and an encryption feature that are enabled for each previously deployed device. ### Claim 18 (depends on 119) The computer usable program product of claim 119, wherein the computer usable code is stored in a computer readable storage device in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system. ### Claim 19 (depends on 11) The computer usable program product of claim 11, wherein the computer usable code is stored in a computer readable storage device in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a computer readable storage device associated with the remote data processing system. ### Claim 20 A computer system comprising a processor, a computer-readable memory, and a computer-readable storage device, and program instructions stored on the storage device for execution by the processor via the memory, the stored program instructions comprising: program instructions to receive a specification of a target network environment including a plurality of target devices, the specification including an identity of each of the plurality of target devices and at least a deduplication feature requirement of the target network environment; program instructions to compute, using the processor and the memory, a performance parameter corresponding to the deduplication feature requirement based on the specification of the target network environment; program instructions to determine possible combinations of the plurality of target devices and enabled features in the plurality of target devices to meet the specification, the enabled features including one or more of a compression feature, a deduplication feature, and an encryption feature; program instructions to compare each possible combination to a knowledge base to determine, for each possible combination, a performance reduction for each of the enabled features based upon the performance parameters; and program instructions to generate an instruction to configure a target device according to a desired combination of the enabled features from the possible combinations for the target device based upon the comparison, wherein the desired combination of enabled features for the target device includes a combination having a performance reduction that does not exceed a threshold value for data reduction in an enabled feature in the target device.