Reproducing data from obfuscated data retrieved from a dispersed storage network

• US 10,169,146 B2
• Filed: 04/18/2016
• Issued: 01/01/2019
• Est. Priority Date: 12/27/2010
• Status: Active Grant

• Current Assignee: Pure Storage, Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Grube, Gary W., Markison, Timothy W.
• Primary Examiner(s): Armouche, Hadi S
• Assistant Examiner(s): Callahan, Paul E
• Application Number:
  US15/131,488
• Publication Number:
  US 20160232056A1
• Time in Patent Office: 988 Days
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 3/0619 in relation to data integrity, e.g. data losses, bit errors
• CPC Class Codes: G06F 3/062 Securing storage systems
• CPC Class Codes: G06F 3/064 Management of blocks
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A method includes first encoding first data into a first plurality of sets of encoded data slices, wherein the first encoding is in accordance with a first dispersed error encoding function. The method further includes second encoding second data into a second plurality of sets of encoded data slices, wherein the second encoding is in accordance with a second dispersed error encoding function. The method further includes creating a plurality of mixed sets of encoded data slices from the first and second plurality of sets of encoded data slices in accordance with a mixing pattern. The method further includes outputting the plurality of sets of mixed encoded data slices to storage units of the DSN for storage therein.

Claims

1. A method for execution by a computing device in a dispersed storage network (DSN), the method comprises:

first encoding first data into a first plurality of sets of encoded data slices, wherein the first encoding is in accordance with a first dispersed error encoding function such that, for a set of encoded data slices of the first plurality of sets of encoded data slices, a first decode threshold number of encoded data slices is required to recover a corresponding first data segment of the first data;

second encoding second data into a second plurality of sets of encoded data slices, wherein the second encoding is in accordance with a second dispersed error encoding function such that, for a set of encoded data slices of the second plurality of sets of encoded data slices, a second decode threshold number of encoded data slices is required to recover a corresponding second data segment of the first data, wherein the second data segment is different from the first data segment;

creating a plurality of mixed sets of encoded data slices from the first and second plurality of sets of encoded data slices in accordance with a mixing pattern; and

outputting the plurality of sets of mixed encoded data slices to storage units of the DSN for storage therein.

2. The method of claim 1 further comprises:

the first data including one or more of;

a file, a data object, a data block, and a directory; and

the second data including secret data.

3. The method of claim 1 further comprises:

the first data including one or more of;

a file, a data object, a data block, and a directory; and

the second data including watermarking data.

4. The method of claim 1 further comprises:

the first dispersed error encoding function being substantially identical to the second dispersed error encoding function.

5. The method of claim 1 further comprises:

storing at least a representation of the mixing pattern.

6. The method of claim 5, wherein the at least a representation of the mixing pattern comprises:

a data extraction process.

7. The method of claim 1 further comprises:

retrieving the plurality of sets of mixed encoded data slices;

interpreting, based on the first plurality of sets of encoded data slices, the plurality of sets of mixed encoded data slices to identify a pattern of invalid encoded data slices;

interpreting the pattern of invalid encoded data slices as the mixed pattern; and

initiating a second data extraction process in accordance with the mixed pattern.

8. A computing device for use in a dispersed storage network (DSN), the computing devices comprises:

an interface;

memory; and

a processing module operably coupled to the memory and the interface, wherein the processing module is operable to;

first encode first data into a first plurality of sets of encoded data slices, wherein the first encoding is in accordance with a first dispersed error encoding function such that, for a set of encoded data slices of the first plurality of sets of encoded data slices, a first decode threshold number of encoded data slices is required to recover a corresponding first data segment of the first data;

second encode second data into a second plurality of sets of encoded data slices, wherein the second encoding is in accordance with a second dispersed error encoding function such that, for a set of encoded data slices of the second plurality of sets of encoded data slices, a second decode threshold number of encoded data slices is required to recover a corresponding second data segment of the first data, wherein the second data segment is different from the first data segment;

create a plurality of mixed sets of encoded data slices from the first and second plurality of sets of encoded data slices in accordance with a mixing pattern; and

output, via the interface, the plurality of sets of mixed encoded data slices to storage units of the DSN for storage therein.

9. The computing device of claim 8 further comprises:

the first data including one or more of;

a file, a data object, a data block, and a directory; and

the second data including secret data.

10. The computing device of claim 8 further comprises:

the first data including one or more of;

a file, a data object, a data block, and a directory; and

the second data including watermarking data.

11. The computing device of claim 8 further comprises:

the first dispersed error encoding function being substantially identical to the second dispersed error encoding function.

12. The computing device of claim 8, wherein the processing module is further operable to:

output, via the interface, at least a representation of the mixing pattern for storage.

13. The computing device of claim 12, wherein the at least a representation of the mixing pattern comprises:

a data extraction process.

14. The computing device of claim 8, wherein the processing module is further operable to:

retrieve the plurality of sets of mixed encoded data slices;

interpret, based on the first plurality of sets of encoded data slices, the plurality of sets of mixed encoded data slices to identify a pattern of invalid encoded data slices;

interpret the pattern of invalid encoded data slices as the mixed pattern; and

initiate a second data extraction process in accordance with the mixed pattern.

15. A computer readable storage device comprises:

a first memory section for storing operational instructions that, when executed by a computing device, causes the computing device to;

first encode first data into a first plurality of sets of encoded data slices, wherein the first encoding is in accordance with a first dispersed error encoding function such that, for a set of encoded data slices of the first plurality of sets of encoded data slices, a first decode threshold number of encoded data slices is required to recover a corresponding first data segment of the first data; and

second encode second data into a second plurality of sets of encoded data slices, wherein the second encoding is in accordance with a second dispersed error encoding function such that, for a set of encoded data slices of the second plurality of sets of encoded data slices, a second decode threshold number of encoded data slices is required to recover a corresponding second data segment of the first data, wherein the second data segment is different from the first data segment;

a second memory section for storing operational instructions that, when executed by the computing device, causes the computing device to;

create a plurality of mixed sets of encoded data slices from the first and second plurality of sets of encoded data slices in accordance with a mixing pattern; and

a third memory section for storing operational instructions that, when executed by the computing device, causes the computing device to;

output the plurality of sets of mixed encoded data slices to storage units of a dispersed storage network (DSN) for storage therein.

16. The computer readable storage device of claim 15 further comprises:

the first data including one or more of;

a file, a data object, a data block, and a directory; and

the second data including at least one of secret data and watermarking data.

17. The computer readable storage device of claim 15 further comprises:

the first dispersed error encoding function being substantially identical to the second dispersed error encoding function.

18. The computer readable storage device of claim 15, wherein the third memory section further stores operational instructions that, when executed by the computing device, causes the computing device to:

output at least a representation of the mixing pattern for storage.

19. The computer readable storage device of claim 18, wherein the at least a representation of the mixing pattern comprises:

a data extraction process.

20. The computer readable storage device of claim 15 further comprises:

a fourth memory section for storing operational instructions that, when executed by the computing device or another computing device, causes the computing device or the other computing device to;

retrieve the plurality of sets of mixed encoded data slices;

interpret, based on the first plurality of sets of encoded data slices, the plurality of sets of mixed encoded data slices to identify a pattern of invalid encoded data slices;

interpret the pattern of invalid encoded data slices as the mixed pattern; and

initiate a second data extraction process in accordance with the mixed pattern.