Transparent File Encryption Backup with Hash-Based Redundancy Elimination
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data backup systems fail to efficiently compress and identify redundant encrypted data, leading to duplicate backups and difficulties in restoring data to specific dates or revisions, especially in networked environments where multiple users need simultaneous access.
Innovation Solution
A method and apparatus that uses hashing techniques integrated with the operating system for secure file encryption and backup, allowing for transparent access, simultaneous multi-user access, and seamless compression, while eliminating redundant copies by using symmetric and asymmetric encryption, and maintaining data integrity through hash verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is applied to files, then data security is improved, but the ability to identify and eliminate redundant copies is lost
Solution Approach 1:
The patent introduces hash values as an intermediary mechanism that operates on plaintext data before encryption. This hash serves as a mediator between the original data and its encrypted form, enabling redundancy identification without compromising the security benefits of encryption. The hash value remains accessible and comparable across different encrypted versions of the same data.
Solution Approach 2:
The system performs preliminary hashing of data before encryption occurs. By calculating and storing hash values of the original plaintext data, the system prepares identification markers in advance that can be used later to recognize redundant encrypted copies without needing to decrypt or process the actual encrypted content.
2Ease of operation
If full disk encryption is used, then transparent access for authorized users is improved, but backup encryption key management becomes more complex
Solution Approach 1:
The patent segments the encryption approach by applying file-level encryption with individual file keys rather than full disk encryption. This segmentation allows each file to be encrypted independently with its own key, simplifying backup key management while maintaining transparent access for authorized users through the integration of encryption with the file system.
Solution Approach 2:
The system merges encryption functionality directly into the file system operations. By combining encryption with file creation, modification, and access operations, the patent eliminates the need for separate encryption/decryption steps, thereby simplifying key management while preserving transparent access for authorized users.
3Reliability
If multiple copies of encrypted files are stored, then data availability is improved, but storage space consumption increases
Solution Approach 1:
The system implements feedback through hash value comparison during the backup process. Before storing an encrypted file, the system calculates its hash value and compares it against existing hash values in the backup. This feedback mechanism identifies redundant copies and prevents their storage, thereby reducing storage space while maintaining data availability through proper backup management.
Solution Approach 2:
The patent changes the parameter of data identification from direct file content comparison to hash value comparison. By using hash values as the identification parameter, the system can efficiently detect and eliminate redundant encrypted copies without needing to process or store multiple full copies of the same data, thus reducing storage requirements.
4Adaptability or versatility
If encryption keys are managed separately from disk encryption, then flexibility for backup integration is improved, but system complexity increases
Solution Approach 1:
The patent applies local quality by assigning individual encryption keys to specific files or file groups rather than using a single centralized key for the entire disk. This localized key management approach provides flexibility for backup integration, as each file can be backed up independently with its own key, while the overall system structure remains manageable through consistent key derivation methods.
Data Source
AI summary
A method and apparatus for secure transparent backup and encryption of data including compression, elimination of redundant information, all working integrated whether data is stored locally or shared in networks. When data is shared in networks, several computers may access encrypted objects simultaneously with the same limitations as for non-encrypted objects. The method and apparatus can automatically and invisible take backups and can easily restore any object to the exact content as it existed for a selected point in time using a snapshot capability in combination with the user interface described that has its focus on making the use very easy for the end user. The invention offers security and performance enhancements when used with tables containing approved hashes for executables and other objects based on company policy and virus scanning. Specific objects may also be easily detected even if they are encrypted.