Encryption Key Removal Tool for Windows Server Disk Space
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Server systems running Windows operating systems accumulate unused encryption keys, leading to slowed access and disk space consumption, with challenges in safely identifying and removing keys due to potential system-critical applications relying on some keys.
Innovation Solution
A key removal tool is implemented using a command line shell, such as PowerShell, which identifies and whitelists essential keys based on known names, certificates, and creation timestamps, allowing safe deletion of unused keys while preserving those in use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If all encryption keys are removed to free disk space and improve access speed, then disk space is freed and access speed improves, but system-critical applications may stop functioning
Solution Approach 1:
The patent segments the encryption keys into two distinct groups: used keys (identified through certificate store scanning and process module checking) and unused keys. This segmentation allows selective removal of only the unused keys while preserving the used ones, thereby freeing disk space without compromising system functionality.
Solution Approach 2:
The patent introduces an intermediary verification mechanism that checks whether encryption keys are referenced in certificate stores or held by running process modules before removal. This intermediary step acts as a safety gate, preventing the removal of keys that are still in use and thus avoiding system-critical application failures.
2Measurement precision
If encryption key files are monitored to determine usage status, then accurate identification of unused keys is achieved, but system complexity and processing time increase
Solution Approach 1:
The patent employs self-service mechanisms where the system uses its own existing infrastructure (certificate stores and process modules) to identify used encryption keys. By querying these existing components, the system determines key usage status without requiring external monitoring tools or complex additional infrastructure, thus achieving accurate identification while limiting complexity growth.
3Reliability
If a comprehensive scanning process is implemented to identify used keys before removal, then system safety is improved, but processing time increases
Solution Approach 1:
The patent performs preliminary actions by scanning certificate stores and checking process modules before the actual key removal takes place. This preliminary identification of used keys ensures that only unused keys are removed, guaranteeing system safety. The scanning is completed and stored in memory before the removal operation, separating the time-consuming identification phase from the execution phase.
Data Source
AI summary
Systems and methods are described for removing unused encryption key files from a computing device. In an example, a key removal tool can identify three sets of keys to preserve. For the first set, the key removal tool can append a device identifier to known key names and add the resulting key file names to a whitelist. For the second set, the key removal tool can identify keys associated with certificates on the computing device and add their corresponding file names to the whitelist. The third set can correspond to keys created after a cutoff timestamp. The key removal tool can delete all key files with key file names not on the whitelist that were created before the cutoff timestamp.