Deduplication of data encrypted with multiple keys

The method allows deduplication of encrypted data using multiple client keys by transmitting key and deduplication information to a storage system, addressing the inefficiencies of traditional methods and ensuring data confidentiality, thus enhancing deduplication efficiency.

JP7763236B2Active Publication Date: 2025-10-31INTERNATIONAL BUSINESS MACHINE CORPORATION
4 Cites 0 Cited by

Patent Information

Application Number
JP2023504299
Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
Priority Date
2020-07-24
Filing Date
2021-07-06
Publication Date
2025-10-31
Estimated Expiration
2041-07-06

AI Technical Summary

Technical Problem

Traditional data reduction techniques, such as deduplication and compression, fail to provide meaningful reductions when applied to encrypted data, especially when different encryption algorithms are used, and do not ensure sufficient data confidentiality between clients and storage systems.

Method used

A method and system for deduplicating data chunks encrypted with multiple client keys by transmitting key group information and deduplication information to a storage system without revealing the decryption keys, using client-specific keys for encryption and fingerprinting, ensuring data confidentiality and enabling deduplication across multiple encryption keys.

Benefits of technology

Enables deduplication of encrypted data across multiple keys without the storage system having access to the encryption keys, maintaining data confidentiality and improving deduplication efficiency compared to traditional methods.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

A computer-implemented method includes sending key group information to a storage system. The key group information includes key ID information for client data keys in the key group. The client data keys enable deduplication of data chunks encrypted with any of the client data keys in the key group. The method also includes generating deduplication information. The deduplication information includes a fingerprint associated with the chunk of client data. The method also includes encrypting the data chunks using one of the client data keys, wherein a decryption key corresponding to the encrypted data chunks is unavailable to the storage system. The method includes sending the deduplication information to the storage system for use in a deduplication process by the storage system and sending the encrypted data chunks to the storage system.
Need to check novelty before this filing date? Find Prior Art