OBJECT ENCRYPTION

• US 20160275295A1
• Filed: 09/29/2015
• Published: 09/22/2016
• Est. Priority Date: 03/19/2015
• Status: Abandoned Application

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Romanovskiy, Alexey, Borisov, Ilya Olegovich
• Application Number:
  US14/868,687
• Publication Number:
  US 20160275295A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A system, computer program product, and computer-executable method of managing data objects within a cloud storage provider, the system, computer program product, and computer-executable comprising receiving a data object I/O request at the cloud storage provider, parsing the data object I/O request to obtain metadata and one or more parameters, and processing the data object I/O request based on the obtained metadata and the one or more parameters, wherein the cloud storage provider is enabled to encrypt and/or decrypt a data object based on the one or more parameters.

Claims

1. A computer-executable method of managing data objects within a cloud storage provider, the computer-executable method comprising:

receiving a data object I/O request at the cloud storage provider;

parsing the data object I/O request to obtain metadata and one or more parameters; and

processing the data object I/O request based on the obtained metadata and the one or more parameters, wherein the cloud storage provider is enabled to encrypt a data object based on the one or more parameters.

2. The computer-executable method of claim 1, wherein processing comprises:

caching the data object; and

encrypting the data object based on the one or more parameters.

3. The computer-executable method of claim 2, wherein the data object I/O request is a write request;

and

storing the data object within the cloud storage provider.

4. The computer-executable method of claim 1, wherein the data object I/O request is a read request;

determining whether to decrypt the requested data object based on the one or more parameters;

upon a positive determination, decrypting the requested data object; and

returning the requested data object.

5. The computer-executable method of claim 4, further comprising:

upon a negative determination, returning the requested data object, wherein the requested data object is encrypted.

6. A system, comprising:

a cloud storage provider enabled to provide data storage; and

computer-executable program logic encoded in memory of one or more computers enabled to manage data objects within the cloud storage provider, wherein the computer-executable program logic is configured for the execution of;

receiving a data object I/O request at the cloud storage provider;

parsing the data object I/O request to obtain metadata and one or more parameters; and

processing the data object I/O request based on the obtained metadata and the one or more parameters, wherein the cloud storage provider is enabled to encrypt a data object based on the one or more parameters.

7. The system of claim 6, wherein processing comprises:

caching the data object; and

encrypting the data object based on the one or more parameters.

8. The system of claim 7, wherein the computer-executable program logic is further configured for the execution of:

wherein the data object I/O request is a write request; and

storing the data object within the cloud storage provider.

9. The system of claim 6, wherein the computer-executable program logic is further configured for the execution of

wherein the data object I/O request is a read request;

determining whether to decrypt the requested data object based on the one or more parameters;

upon a positive determination, decrypting the requested data object; and

returning the requested data object.

10. The System of claim 9, wherein the computer-executable program logic is further configured for the execution of:

upon a negative determination, returning the requested data object, wherein the requested data object is encrypted.

11. A computer program product for managing data objects within a cloud storage provider, the computer program product comprising:

a non-transitory computer readable medium encoded with computer-executable code, the code configured to enable the execution of;

receiving a data object I/O request at the cloud storage provider;

parsing the data object I/O request to obtain metadata and one or more parameters; and

processing the data object I/O request based on the obtained metadata and the one or more parameters, wherein the cloud storage provider is enabled to encrypt a data object based on the one or more parameters.

12. The computer program product of claim 11, wherein processing comprises:

caching the data object; and

encrypting the data object based on the one or more parameters.

13. The computer program product of claim 12, wherein the code is further configured to enable the execution of:

wherein the data object I/O request is a write request; and

storing the data object within the cloud storage provider.

14. The computer program product of claim 11, wherein the code is further configured to enable the execution of:

wherein the data object I/O request is a read request;

determining whether to decrypt the requested data object based on the one or more parameters;

upon a positive determination, decrypting the requested data object; and

returning the requested data object.

15. The computer program product of claim 14, wherein the code is further configured to enable the execution of:

upon a negative determination, returning the requested data object, wherein the requested data object is encrypted.