System and method for netbackup data decryption in a high latency low bandwidth environment

A computing system comprising:

• a backup server computer;
• a client computer coupled to the backup server computer via a first network;
• and
• a remote server computer coupled to the backup server computer via a second network;
• wherein the backup server computer is configured to:
• receive from the client computer a backup request to backup first data;
• in response to the backup request:
• encrypt the first data as one or more encrypted segments, each having an encrypted segment size;
• and
• convey the one or more encrypted segments to the remote server computer for storage on the storage medium;
• receive a restore request from the client computer for second data which corresponds to a given encrypted segment of the first data, the second data having a size less than the encrypted segment size;
• in response to the restore request:
• request the remote server computer to transmit only a portion of the given encrypted segment, wherein the given encrypted segment has a beginning and an end, wherein the requested portion does not include one or more encrypted sub-segments at the end of the given encrypted segment.

A non-transitory computer-readable storage medium storing program instructions, wherein the program instructions are executable by a backup server computer to cause the backup server computer to:

• receive a backup request from a client computer for first data;
• in response to the backup request:
• encrypt the first data as one or more encrypted segments, each having an encrypted segment size;
• and
• convey the one or more encrypted segments to a remote server computer for storage on a storage medium;
• and
• receive a restore request from the client computer for second data which corresponds to a given encrypted segment of the first data, the second data having a size less than the encrypted segment size;
• in response to the restore request:
• request the remote server computer to transmit only a portion of the given encrypted segment, wherein the given encrypted segment has a beginning and an end, wherein the requested portion does not include one or more encrypted sub-segments at the end of the given encrypted segment.