Using ciphertext to deduplicate data using wide-block encryption
AssigneeInternational Business Machines Corporation
InventorGlen Alan Jaquette
Life of this patent
Estimating the term…
Abstract
A computer-implemented method, according to one embodiment, includes: compressing an uncompressed instance of data to create a compressed instance of data. In response to determining that a size of the compressed instance of data is outside a predetermined range, the uncompressed instance of the data is encrypted utilizing wide-block encryption to create a ciphertext string. Moreover, a predetermined subset of the encrypted uncompressed instance of data in the ciphertext string is used to perform deduplication at a data storage server.
Claims21
(canceled)
The computer-implemented method of claim 3, comprising:
- receiving a stream of data at the data storage server;
- determining whether the stream of data includes data instances that are configured to implement data reduction accommodating persistent encryption;
- and
- in response to determining that the stream of data includes a subset of data instances that are configured to implement data reduction accommodating persistent encryption, compressing a first of the subset of data instances to create the compressed instance of data.
A computer-implemented method, comprising:
- compressing an uncompressed instance of data to create a compressed instance of data;
- in response to determining that a size of the compressed instance of data is outside a predetermined range, encrypting the uncompressed instance of the data utilizing wide-block encryption to create a ciphertext string;
- and
- using a predetermined subset of the encrypted uncompressed instance of data in the ciphertext string to perform deduplication at a data storage server,
- wherein the deduplication is performed at the data storage server without calculating a hash value at the data storage server.
A computer program product, comprising a computer readable storage medium having program instructions embodied therewith, the program instructions readable by a processor, executable by the processor, or readable and executable by the processor, to cause the processor to:
- compress an uncompressed instance of data to create a compressed instance of data;
- in response to determining that a size of the compressed instance of data is outside a predetermined range, encrypt the uncompressed instance of the data utilizing wide-block encryption to create a ciphertext string;
- and
- use a predetermined subset of the encrypted uncompressed instance of data in the ciphertext string to perform deduplication at a data storage server,
- wherein the deduplication is performed at the data storage server without calculating a hash value at the data storage server.
A system, comprising:
- a data storage server;
- and
- logic integrated with the data storage server, executable by the data storage server, or integrated with and executable by the data storage server, the logic being configured to:
- compress an uncompressed instance of data to create a compressed instance of data;
- in response to determining that a size of the compressed instance of data is outside a predetermined range, encrypt the uncompressed instance of the data utilizing wide-block encryption to create a ciphertext string;
- and
- use a predetermined subset of the encrypted uncompressed instance of data in the ciphertext string to perform deduplication at a data storage server,
- wherein the deduplication is performed at the data storage server without calculating a hash value at the data storage server.
Dependencies are inferred from the claim text.