Selective Encrypted File Restoration from Virtual Machine Images
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing backup systems face challenges in efficiently restoring individual encrypted files from virtual machine images due to operating system security restrictions, often requiring a full image restore, which is time-consuming and resource-intensive.
Innovation Solution
The method involves aggregating encrypted sectors from a virtual machine image, storing them as a temporary file, and writing it as a single restored encrypted file, which can then be decrypted, allowing for selective restoration of encrypted files without restoring the entire image, and enabling access for security and data management applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If individual encrypted files are restored directly from backup image, then restoration time and resource usage are reduced, but operating system security restrictions prevent successful restoration
Solution Approach 1:
The patent introduces a temporary file as an intermediary medium. Encrypted sectors are first written to a temporary file in the same directory as the target encrypted file, then the temporary file is renamed to replace the original encrypted file. This intermediary approach bypasses operating system security restrictions that would otherwise prevent direct restoration of encrypted files from backup images.
2Reliability
If full virtual machine image is restored, then all files including encrypted files are recovered, but time and system resources are wasted restoring unnecessary data
Solution Approach 1:
The patent extracts only the necessary encrypted sectors required to reconstruct the specific encrypted file from the virtual machine image, rather than restoring the entire image. By identifying and extracting only the relevant data portions and writing them to a temporary file that is then renamed to replace the original file, the system recovers the needed file without the time and resource overhead of a full image restoration.
3Productivity
If encrypted sectors are aggregated and written as consecutive data stream, then file restoration efficiency is improved, but compatibility with encrypted file system requirements must be maintained
Solution Approach 1:
The patent applies local quality by writing aggregated encrypted sectors as a consecutive data stream specifically to a temporary file located in the same directory as the target encrypted file. This localized approach maintains compatibility with encrypted file system requirements while improving restoration efficiency, as the consecutive data stream is written only where needed rather than through complex system-wide operations.
Data Source
AI summary
Various techniques, including a method, system and computer program product for restoring encrypted files are disclosed. The method includes accessing a file table record for an encrypted file. The file table record includes an encrypted file stream and extent information identifying a location of one or more portions of the encrypted file in a virtual machine image. In response to accessing the file table record a consecutive data stream is stored. Storing the consecutive data stream includes encapsulating the encrypted file stream and the one or more portions of the encrypted file.