Data Reduction in Encrypted Volumes via Multi-Key Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data encryption in storage systems can hinder compression and deduplication processes, leading to inefficient use of storage space, while providing unencrypted data increases security risks.
Innovation Solution
The system decrypts encrypted data using various encryption keys to determine the most compressible version and stores that version, allowing for efficient data reduction even in mixed encrypted and unencrypted data environments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted in storage systems, then security is improved, but compression and deduplication capabilities deteriorate
Solution Approach 1:
The system segments the data storage space into multiple volumes, where some volumes are encrypted and others are not. This allows different compression strategies to be applied to different segments, thereby maintaining security where needed while preserving compression capabilities in other areas.
Solution Approach 2:
The system applies different encryption and compression qualities to different parts of the storage system based on local requirements. Sensitive data receives encryption and reduced compression, while non-sensitive data receives no encryption and maximum compression, optimizing both security and storage efficiency locally.
2Productivity
If data is stored unencrypted, then compression efficiency is improved, but security risks increase
Solution Approach 1:
The system applies different encryption and compression qualities to different parts of the storage system based on local requirements. Sensitive data receives encryption and reduced compression, while non-sensitive data receives no encryption and maximum compression, optimizing both security and storage efficiency locally.
Solution Approach 2:
The system dynamically changes encryption parameters (such as encryption key assignment and encryption/decryption operations) based on data sensitivity and access patterns. This allows the system to optimize compression efficiency for non-sensitive data while maintaining security for sensitive data through selective parameter adjustment.
3Productivity
If multiple encryption keys are used for the same data, then data reduction capability is improved, but system complexity increases
Solution Approach 1:
The system performs preliminary actions by pre-computing and storing multiple encrypted versions of the same data using different encryption keys. When compression is needed, the system can directly compare these pre-computed versions without performing real-time decryption and re-encryption, thereby reducing computational complexity while maintaining data reduction capabilities.
Solution Approach 2:
The system creates multiple copies of the same data encrypted with different keys, storing them in parallel. This allows the system to evaluate compression ratios of different encrypted versions and select the most compressible one without complex real-time processing, simplifying the overall system architecture while improving data reduction capability.
Data Source
AI summary
A method of data reduction in a partially encrypted volume includes receiving data to be stored on a storage array, decrypting the data using a first encryption key to generate first decrypted data, and decrypting the data using a second encryption key to generate second decrypted data. The method further includes comparing, by a storage array controller, a first compressibility value of the first decrypted data to a second compressibility value of the second decrypted data. The method further includes storing the first decrypted data if the first compressibility value is greater than or equal to the second compressibility value. The method further includes storing the second decrypted data if the second compressibility value is greater than the first compressibility value.