Encrypted Memory Reduplication via Location-Independent Cryptography
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In virtualized computer systems, data deduplication and reduplication processes are hindered by the need for unencrypted data access, which compromises security and storage management, especially when dealing with encrypted data across different storage locations.
Innovation Solution
The implementation of location-independent encryption allows for deduplication and reduplication of encrypted data without accessing it in unencrypted form, using a kernel to convert between location-dependent and location-independent cryptographic inputs, enabling secure data migration and modification while maintaining encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted using location-dependent cryptographic input, then security is improved, but data deduplication and reduplication cannot be performed
Solution Approach 1:
The patent introduces location-independent cryptographic input as an intermediary that enables both security and deduplication. By encrypting data with a cryptographic input that does not depend on storage location, the system allows encrypted data to be compared and deduplicated while maintaining security. The location-independent cryptographic input acts as a mediator between the security requirement (location-dependent encryption) and the deduplication requirement (ability to compare encrypted data).
Solution Approach 2:
The patent changes the cryptographic parameter from location-dependent to location-independent. This parameter change allows the encrypted data to maintain security properties while enabling comparison operations necessary for deduplication. By modifying the cryptographic input parameter to be independent of storage location, the system resolves the contradiction between security and deduplication capability.
2Ease of operation
If encrypted data is accessed in unencrypted form for reduplication, then data modification capability is improved, but security is compromised
Solution Approach 1:
The kernel acts as an intermediary that performs reduplication operations on encrypted data without exposing the plaintext. The system uses the location-independent cryptographic input to enable comparison and copying of encrypted data blocks, allowing modification capability to be maintained while keeping the data encrypted throughout the process.
Solution Approach 2:
The patent implements copying of encrypted data blocks directly without decryption. By using location-independent cryptographic input, the system can identify duplicate encrypted blocks and create references to them, enabling reduplication while maintaining encryption. This copying approach allows data modification capability without compromising security.
3Reliability
If location-dependent encryption is used, then security is enhanced, but data cannot be migrated or duplicated across storage locations
Solution Approach 1:
The patent changes the cryptographic parameter from location-dependent to location-independent, enabling data to be migrated across storage locations while maintaining security. The location-independent cryptographic input allows encrypted data to be moved or duplicated without requiring re-encryption, as the cryptographic properties remain valid regardless of storage location.
Solution Approach 2:
The location-independent cryptographic input provides universal functionality across different storage locations. The same cryptographic input can be used regardless of where the data is stored or migrated to, making the encryption scheme adaptable and versatile across multiple storage locations while maintaining security.
Data Source
AI summary
Systems and methods for performing data duplication on data that was previously consolidated (e.g., deduplicated or merged). An example method may comprise: receiving, by a processing device, a request to modify a storage block comprising data encrypted using a location dependent cryptographic input; causing the data of the storage block to be encrypted using a location independent cryptographic input corresponding to a first storage location; copying the data encrypted using the location independent cryptographic input from the first storage location to a second storage location; causing data at the second storage location to be encrypted using a location dependent cryptographic input corresponding to the second storage location; and updating a reference of the storage block from the first storage location to the second storage location.