Secure Data Deletion via Encryption Key Destruction

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current technologies face challenges in permanently deleting stored data, as deleted files can often be recovered due to system architecture and file management issues, particularly in computing platforms and storage area networks, which is undesirable for sensitive commercial information.

Innovation Solution

Implementing a method that uses encryption and key management techniques, such as hierarchical key schemes and transparent encryption/decryption processes, to ensure that data is irretrievably discarded by overwriting file fragments and destroying encryption keys, even in the presence of backups and disaster recovery systems.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional file deletion methods are used, then the operation is simple and fast, but the data can be recovered which compromises security

Engineering Contradiction:
Improvedata securityVSAvoiddeletion process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the deletion process into multiple distinct phases: identifying the file to be deleted, locating all fragments across the file system, creating a deletion plan that accounts for backups and recovery systems, and executing overwrites in a specific sequence. This segmentation transforms a single complex operation into manageable steps that ensure complete data destruction while maintaining operational reliability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements preliminary actions by first creating a comprehensive deletion plan before actual data overwriting occurs. This plan identifies all file fragments, backup locations, and recovery systems in advance, and determines the optimal overwrite sequence. By performing this planning phase beforehand, the system ensures that when deletion executes, all necessary precautions are already in place to prevent recovery, thus improving reliability without adding operational complexity during the actual deletion moment.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If file fragments are overwritten multiple times, then data recovery is prevented, but the process becomes time-consuming and impractical

Engineering Contradiction:
Improvepermanent data disposalVSAvoiddeletion time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies dynamics by making the overwrite process adaptive rather than static. The system dynamically determines the number of overwrite passes needed based on file characteristics, location, and sensitivity. The deletion plan is generated dynamically, adjusting the sequence and intensity of overwrites based on real-time analysis of the file system state, backup configurations, and recovery system capabilities. This dynamic approach prevents unnecessary repeated overwrites while ensuring adequate destruction, thus reducing time loss without compromising permanent data disposal.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes parameters such as overwrite pass count, overwrite pattern complexity, and target file selection criteria based on the specific deletion context. Rather than applying a fixed number of overwrites to all files, the system adjusts these parameters dynamically - using fewer passes for less sensitive data and more passes for highly confidential information. This parameter adaptation optimizes the balance between achieving permanent data disposal and minimizing the time required for deletion operations.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If all file copies and backups are located and overwritten, then complete data destruction is achieved, but the complexity of managing multiple copies increases

Engineering Contradiction:
Improvecomplete data destructionVSAvoidbackup management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates a universal deletion plan that simultaneously handles multiple types of data copies and backup systems through a single coordinated process. The system identifies and manages various copy types (local copies, remote backups, cloud storage, archival systems) using a unified approach that applies to all fragment locations. This multi-functional deletion capability allows the system to treat diverse backup infrastructures through a common methodology, reducing the perceived complexity of managing multiple copy types while ensuring complete data destruction across all locations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The deletion plan acts as an intermediary that coordinates between the file system, backup systems, and overwrite operations. Rather than directly managing each copy and backup system individually, the plan serves as a mediator that orchestrates the entire deletion process, managing the complexity of multiple copies by centralizing control in the planning phase. This intermediary approach simplifies backup management complexity by providing a single point of coordination that handles all fragment locations and backup systems systematically.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS7593532B2Management of the retention and/or discarding of stored data
Publication Date: 2009.09.22 DECRU
  • US7593532B2 patent drawing
  • US7593532B2 patent drawing
  • US7593532B2 patent drawing

AI summary

Embodiments of methods, devices and/or systems for a method of managing the retention and/or discarding of stored data are described.