Backup Data Decryption in Low Bandwidth Cloud Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems for data backup and recovery over cloud computing networks face inefficiencies due to high latency and low bandwidth, particularly when dealing with large, encrypted data streams, which slows down data transfer and reduces the benefits of cloud computing solutions.
Innovation Solution
A computing system that aligns cryptography segment and sub-segment sizes with backup segment and sub-segment sizes for efficient data transfer over low-bandwidth networks, allowing for decryption using prior encrypted sub-segments, and sends only smaller-sized blocks for restoration requests, optimizing data transfer and decryption processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data streams are encrypted for protection, then data security is improved, but data transfer speed deteriorates due to decryption overhead
Solution Approach 1:
The patent divides encrypted data streams into smaller segments (e.g., 4KB segments) rather than handling entire data streams at once. This segmentation allows the decryption process to proceed in parallel with data transfer, reducing the cumulative decryption overhead and improving overall transfer speed while maintaining security through encryption of each segment.
Solution Approach 2:
The patent implements preliminary encryption where data is encrypted before storage in the cloud. The encryption keys are derived from the data itself using a deterministic algorithm, allowing the decryption process to be prepared in advance. This preliminary encryption action ensures that data remains secure during transfer while the segmented approach enables efficient decryption without significant speed penalty.
2Productivity
If large data streams are transferred to minimize catalog burden, then backup efficiency is improved, but network bandwidth consumption increases
Solution Approach 1:
The patent segments large data streams into smaller manageable units (4KB segments) that can be transferred efficiently over the network. This segmentation reduces the immediate bandwidth consumption for each transfer operation while maintaining the ability to process large datasets. The segmented approach allows for better network management and reduced cumulative overhead.
Solution Approach 2:
The patent implements dynamic adjustment of segment sizes based on network conditions and data characteristics. The system can adapt the segment size to optimize both backup efficiency and bandwidth consumption, using larger segments when network bandwidth is available and smaller segments when constraints exist. This dynamic approach balances productivity requirements with network resource consumption.
3Ease of operation
If encryption keys are stored with data, then data accessibility is improved, but data security deteriorates
Solution Approach 1:
The patent extracts the encryption key information from the data storage and stores it separately in a secure key management system. The data itself contains only encrypted content, while the keys are stored in a dedicated secure location with access controls. This separation maintains data accessibility through proper authentication while significantly improving security by preventing simultaneous access to both data and keys.
Solution Approach 2:
The patent introduces a key management system as an intermediary between data storage and decryption operations. This intermediary system handles key distribution, storage, and access control, allowing data to remain encrypted while providing secure access when needed. The key management system acts as a mediator that balances accessibility requirements with security constraints.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system and method for efficient transfer of encrypted data over a low-bandwidth network. A backup server and a client computer are coupled to one another via a first network. The backup server is coupled to a remote data storage via another network, such as the Internet, also referred to as a cloud. The backup server encrypts received data for backup from the client computer. Cryptography segment and sub-segment sizes may be chosen that are aligned on a byte boundary with one another and with selected backup segment and sub-segment sizes used by backup software on the remote data storage. A selected cryptography algorithm has a property of allowing a given protected sub-segment with the cryptography sub-segment size to be decrypted by initially decrypting an immediate prior protected sub-segment that has the same cryptography sub-segment size. Therefore, the size of data transmitted via the cloud may be smaller than the cryptography segment size.