Encryption Key Deletion for Secure Data Expiration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data backup systems face inefficiencies and high costs in completely deleting expired data, especially when direct access is difficult, leading to potential security risks from retained sensitive information.
Innovation Solution
A method involving a data generation unit, encryption unit, and controller that assigns expiration times to data, encrypts it, and deletes decryption keys for expired data, making the data irretrievable without physical access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional physical deletion methods are used on tape storage, then data can be completely removed, but the process is labor-intensive and expensive
Solution Approach 1:
The patent replaces the mechanical process of physically accessing and erasing tape data with an electronic cryptographic system. Instead of manually locating and erasing data on tapes, the system uses encryption keys to control data accessibility. When deletion is needed, the corresponding encryption key is destroyed, rendering the data permanently inaccessible without requiring physical tape handling or manual intervention.
Solution Approach 2:
The patent introduces encryption keys as an intermediary between the storage system and the data. Rather than directly managing data deletion on physical media, the system manages access control through cryptographic keys. The key acts as a mediator that either enables or disables data recovery, allowing efficient logical deletion without physical media manipulation.
2Reliability
If multiple backup copies are retained for regulatory compliance, then data availability is ensured, but security risks increase from retained sensitive information
Solution Approach 1:
The patent changes the state of data from accessible to inaccessible by modifying the cryptographic parameters. Instead of physically destroying or hiding data copies, the system changes the encryption state by destroying decryption keys. This parameter change (from encrypted to permanently undeCryptable) maintains data availability during the retention period while eliminating security risks after expiration.
Solution Approach 2:
The patent performs preliminary encryption of data before storage, embedding expiration metadata and key management structures in advance. When data expires, the system has pre-established mechanisms to destroy the decryption keys, ensuring that sensitive information cannot be recovered even if physical copies exist. This preliminary setup enables automated compliance without manual intervention.
3Reliability
If direct access to tape data is required for deletion, then complete removal is possible, but the process becomes complicated and time-consuming
Solution Approach 1:
The patent extracts the essential element required for data recovery (the decryption key) from the storage system and manages it separately. Instead of requiring access to physical tape copies for deletion, the system only needs to access and destroy the corresponding key in the key management system. This extraction simplifies the deletion process from complex physical media handling to simple key destruction.
Solution Approach 2:
The patent creates cryptographic copies (encryption keys) that control access to the actual data. Rather than manipulating the original data on tapes, the system works with key copies that govern data accessibility. Destroying these key copies achieves complete data removal without requiring access to or manipulation of the original stored data copies.
Data Source
AI summary
A method and apparatus for efficiently deleting data including backup or snapshots upon expiration are disclosed. The data can be deleted even without physical access to the data. A data generation unit generates a data. Each data has an expiration time and should be deleted upon expiration. An encryption unit encrypts the data, and the encrypted data is stored in data storage. A controller monitors whether there is an expired data, and if there is an expired data, the controller deletes a key necessary for decrypting the expired data.