Hierarchical key management for cross-region replication
AssigneeOracle International Corporation
InventorsVikram Singh Bisht, Satish Kumar Kashi Visvanathan, Haoran Qi, Viggnesh Venugopal
Life of this patent
Estimating the term…
Abstract
Novel techniques are described for performing hierarchical key management involving an end-to-end file storage replication between different cloud infrastructure regions. The novel hierarchical key management comprises three different keys, a first security key for the source region, a session key, valid only for a session, for the transfer of data between two different regions, and a second security key for the target region. Novel techniques are also described for using different file keys for different files of a file system in each region.
Claims20
A method, comprising:
- generating, by a computing device, a first security key associated with a source file system, the source file system being configured to send a snapshot delta during a replication process, and the snapshot delta being associated with two snapshots of the source file system;
- generating, by the computing device, a second security key associated with a target file system, the target file system being configured to receive the snapshot delta during the replication process;
- and
- generating, by the computing device, a session key for protecting the snapshot delta transferred between the source file system and the target file system during the replication process.
A non-transitory computer-readable medium storing computer-executable instructions that, when executed by one or more processors of a computing device, cause the one or more processors to perform operations comprising:
- generating, by the computing device, a first security key associated with a source file system, the source file system being configured to send a snapshot delta during a replication process, and the snapshot delta being associated with two snapshots of the source file system;
- generating, by the computing device, a second security key associated with a target file system, the target file system being configured to receive the snapshot delta during the replication process;
- and
- generating, by the computing device, a session key for protecting the snapshot delta transferred between the source file system and the target file system during the replication process.
A computing device, comprising:
- one or more processors;
- and
- one or more non-transitory computer readable media storing computer-executable instructions that, when executed by the one or more processors, cause the computing device to perform:
- generating, by the computing device, a first security key associated with a source file system, the source file system being configured to send a snapshot delta during a replication process, and the snapshot delta being associated with two snapshots of the source file system;
- generating, by the computing device, a second security key associated with a target file system, the target file system being configured to receive the snapshot delta during the replication process;
- and
- generating, by the computing device, a session key for protecting the snapshot delta transferred between the source file system and the target file system during the replication process.
Dependencies are inferred from the claim text.