Secure Data Deletion via Encryption Key Destruction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies face challenges in permanently deleting stored data, as deleted files can often be recovered due to system architecture and file management issues, particularly in computing platforms and storage area networks, which is undesirable for sensitive commercial information.
Innovation Solution
Implementing a method that uses encryption and key management techniques, such as hierarchical key schemes and transparent encryption/decryption processes, to ensure that data is irretrievably discarded by overwriting file fragments and destroying encryption keys, even in the presence of backups and disaster recovery systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional file deletion methods are used, then the operation is simple and fast, but the data can be recovered which compromises security
Solution Approach 1:
The patent segments the deletion process into multiple distinct phases: identifying the file to be deleted, locating all fragments across the file system, creating a deletion plan that accounts for backups and recovery systems, and executing overwrites in a specific sequence. This segmentation transforms a single complex operation into manageable steps that ensure complete data destruction while maintaining operational reliability.
Solution Approach 2:
The patent implements preliminary actions by first creating a comprehensive deletion plan before actual data overwriting occurs. This plan identifies all file fragments, backup locations, and recovery systems in advance, and determines the optimal overwrite sequence. By performing this planning phase beforehand, the system ensures that when deletion executes, all necessary precautions are already in place to prevent recovery, thus improving reliability without adding operational complexity during the actual deletion moment.
2Reliability
If file fragments are overwritten multiple times, then data recovery is prevented, but the process becomes time-consuming and impractical
Solution Approach 1:
The patent applies dynamics by making the overwrite process adaptive rather than static. The system dynamically determines the number of overwrite passes needed based on file characteristics, location, and sensitivity. The deletion plan is generated dynamically, adjusting the sequence and intensity of overwrites based on real-time analysis of the file system state, backup configurations, and recovery system capabilities. This dynamic approach prevents unnecessary repeated overwrites while ensuring adequate destruction, thus reducing time loss without compromising permanent data disposal.
Solution Approach 2:
The patent changes parameters such as overwrite pass count, overwrite pattern complexity, and target file selection criteria based on the specific deletion context. Rather than applying a fixed number of overwrites to all files, the system adjusts these parameters dynamically - using fewer passes for less sensitive data and more passes for highly confidential information. This parameter adaptation optimizes the balance between achieving permanent data disposal and minimizing the time required for deletion operations.
3Reliability
If all file copies and backups are located and overwritten, then complete data destruction is achieved, but the complexity of managing multiple copies increases
Solution Approach 1:
The patent creates a universal deletion plan that simultaneously handles multiple types of data copies and backup systems through a single coordinated process. The system identifies and manages various copy types (local copies, remote backups, cloud storage, archival systems) using a unified approach that applies to all fragment locations. This multi-functional deletion capability allows the system to treat diverse backup infrastructures through a common methodology, reducing the perceived complexity of managing multiple copy types while ensuring complete data destruction across all locations.
Solution Approach 2:
The deletion plan acts as an intermediary that coordinates between the file system, backup systems, and overwrite operations. Rather than directly managing each copy and backup system individually, the plan serves as a mediator that orchestrates the entire deletion process, managing the complexity of multiple copies by centralizing control in the planning phase. This intermediary approach simplifies backup management complexity by providing a single point of coordination that handles all fragment locations and backup systems systematically.
Data Source
AI summary
Embodiments of methods, devices and/or systems for a method of managing the retention and/or discarding of stored data are described.


