Multi-tenant secure data deduplication using data association tables

A method for processing a data read request to a multi-tenant secure data deduplication using data association tables system, the method comprising:

• a. submitting a data read request for data having a direct object identification (“DOID”) [DOID] and an associated volume ID from a storage hypervisor to a storage manager in a multi-tenant secure data deduplication using data association tables system;
• b. validating the DOID and associated volume ID of the data read request against an association table in the storage manager;
• and
• c. returning either the data of a validated data read request to a storage hypervisor, or an access error of a non-validated data read request to a storage hypervisor;
• wherein dual parameters of the DOID and the associated volume ID in the association tables system affords a secure means by which to verify storage of and access to data by a user or an application and data of the data read request can only be read to a volume or an application that directly wrote the data.

A method for processing a data delete request to a multi-tenant secure data deduplication using data association tables system, the method comprising:

• a. submitting a data delete request for data having a direct object identification (“DOID”) [DOID] and an associated volume ID from a storage hypervisor to a storage manager in a multi-tenant secure data deduplication using data association tables system;
• b. validating the DOID and associated volume ID of the data delete request against an association table in the storage manager;
• and
• c. deleting the volume ID associated with the DOID of a valid data delete request from the association table in the storage manager, or returning an access error of a non-validated data delete request to a storage hypervisor;
• wherein dual parameters of the DOID and the associated volume ID in the association tables system affords a secure means by which to verify storage of and access to data by a user or an application and the volume ID associated with the DOID of the data delete request can only be deleted from the association table in the storage manager by a volume or an application that directly wrote the data.

A method for processing a write request to a multi-tenant secure data deduplication using data association tables system, the method comprising:

• a. creating written data by writing data to a volume in a multi-tenant secure data deduplication using data association tables system, further wherein the volume has a volume ID;
• b. comparing the written data to existing data in the volume;
• c. deduplicating the written data within the volume;
• d. containerizing the written data into a data object;
• e. creating a direct object identification (“DOID”) [DOID] for the data object;
• further wherein the DOID is created by creating a content hash for the data object and assigning the content hash to the data object;
• f. submitting the DOID and the data object to a storage manager in the system for data storage;
• and
• g. entering the DOID and associated volume ID in an association table in the system.