Deduplication-based data security
AssigneeIntel Corporation
InventorDavid R. Cheriton
Life of this patent
Estimating the term…
Abstract
Providing data security includes: in response to a request to write data content to a storage, generating encrypted data content based on the data content; attempting to obtain a reference to the encrypted data content in the storage; in the event that the reference to the encrypted data content is obtained, modifying a translation line to refer to the reference to the encrypted data content in the storage; and in the event that the reference to the encrypted data content is not obtained: storing the encrypted data content at a new location; obtaining a reference to the encrypted data content stored at the new location; and modifying the translation line to refer to the reference to the encrypted data content stored at the new location.
Claims24
A system comprising:
- a storage;
- and
- a memory controller coupled to the storage, to:
- in response to a request to write data content to the storage, generate encrypted data content based at least in part on the data content, wherein the data content is associated with a particular domain of a plurality of domains and the encrypted data content generation is in accordance with a particular encryption key associated with the particular domain;
- attempt to obtain a reference to the encrypted data content in the storage;
- in an event that the reference to the encrypted data content is obtained, modify a translation line to refer to the reference to the encrypted data content in the storage;
- and
- in an event that the reference to the encrypted data content is not obtained:
- store the encrypted data content at a new location;
- obtain a reference to the encrypted data content stored at the new location;
- and
- modify the translation line to refer to the reference to the encrypted data content stored at the new location.
A method comprising:
- in response to a request to write data content to a storage, generating encrypted data content based on the data content, wherein the data content is associated with a particular domain of a plurality of domains and the encrypted data content generation is in accordance with a particular encryption key associated with the particular domain;
- attempting to obtain a reference to the encrypted data content in the storage;
- in an event that the reference to the encrypted data content is obtained, modifying a translation line to refer to the reference to the encrypted data content in the storage;
- and
- in an event that the reference to the encrypted data content is not obtained:
- storing the encrypted data content at a new location;
- obtaining a reference to the encrypted data content stored at the new location;
- and
- modifying the translation line to refer to the reference to the encrypted data content stored at the new location.
A computer program product for providing data security, the computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instruction, wherein in response to execution of the computer instruction by one or more processors of a computer, the computer is caused to:
- in response to a request to write data content to a storage, generate encrypted data content based on the data content, wherein the data content is associated with a particular domain of a plurality of domains and the encrypted data content generation is in accordance with a particular encryption key associated with the particular domain;
- attempt to obtain a reference to the encrypted data content in the storage;
- in an event that the reference to the encrypted data content is obtained, modify a translation line to refer to the reference to the encrypted data content in the storage;
- and
- in an event that the reference to the encrypted data content is not obtained:
- store the encrypted data content at a new location;
- obtain a reference to the encrypted data content stored at the new location;
- and
- modify the translation line to refer to the reference to the encrypted data content stored at the new location.
Dependencies are inferred from the claim text.