Resilient deterministic encryption extension using associated metadata structures
AssigneeInternational Business Machines Corporation
InventorGlen Alan Jaquette
Life of this patent
Estimating the term…
Abstract
Deterministic encryption of data is provided that facilitates subsequent data deduplication. An input data block is read. A compressibility of the input data block is determined. The data block is compressed when the compressibility exceeds a predetermined threshold. The data block is encrypted based on a keyed hash. The encrypted data block is provided with associated metadata, the associated metadata comprising an indication of the compressibility and the keyed hash.
Claims20
A method of data encryption, comprising:
- reading an input data block;
- determining a compressibility of the input data block;
- compressing the data block when the compressibility exceeds a predetermined threshold;
- encrypting the data block based on a keyed hash;
- and
- providing the encrypted data block with associated metadata, the associated metadata comprising an indication of the compressibility and the keyed hash.
A system comprising:
- a computing node comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor of the computing node to cause the processor to perform a method comprising:
- reading an input data block;
- determining a compressibility of the input data block;
- compressing the data block when the compressibility exceeds a predetermined threshold;
- encrypting the data block based on a keyed hash;
- and
- providing the encrypted data block with associated metadata, the associated metadata comprising an indication of the compressibility and the keyed hash.
A computer program product for data encryption, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method comprising:
- reading an input data block;
- determining a compressibility of the input data block;
- compressing the data block when the compressibility exceeds a predetermined threshold;
- encrypting the data block based on a keyed hash;
- and
- providing the encrypted data block with associated metadata, the associated metadata comprising an indication of the compressibility and the keyed hash.
Dependencies are inferred from the claim text.