Techniques for providing multiplexed data for backup

• US 8,615,492 B1
• Filed: 07/29/2008
• Issued: 12/24/2013
• Est. Priority Date: 07/29/2008
• Status: Active Grant

• Current Assignee: Veritas Technologies, LLC (Whitehouse Group Ltd.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Clifford, Thomas, Malhotra, Gaurav
• Primary Examiner(s): Ly, Cheyne D
• Application Number:
  US12/181,614
• Time in Patent Office: 1,974 Days
• Field of Search: 713/193, 707/640
• US Class Current: 707/640
• CPC Class Codes: G06F 11/1448 Management of the data involved in backup or backup restore
• CPC Class Codes: G06F 11/1456 Hardware arrangements for backup
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes

Abstract

Techniques for providing multiplexed data for backup are disclosed. In one particular exemplary embodiment, the techniques may be realized as a method for providing multiplexed data for backup comprising determining one or more criteria for a set of data to be backed up by a backup device, wherein the one or more criteria are based at least in part on reducing encryption overhead for the set of data. The method further includes identifying one or more sets of data to form a multiplexed backup based upon the one or more sets of data meeting the one or more criteria, and transmitting the one or more identified sets of data to the backup device for backup.

Claims

1. A method for providing multiplexed data for backup comprising:

determining one or more criteria for a set of data to be backed up by a backup device, wherein the one or more criteria are based at least in part on reducing encryption overhead for the set of data;

identifying a plurality of sets of unencrypted data previously associated with a same encryption key to form a multiplexed backup based upon the plurality of sets of unencrypted data meeting the one or more criteria, wherein the same encryption key is usable for at least two sets of data having different content, and wherein the identification is performed based at least in part on receiving the encryption key from backup management software, the encryption key being associated with each of the plurality of sets of unencrypted data; and

transmitting the plurality of identified sets of data to the backup device for backup.

2. The method of claim 1, wherein encryption is performed by the backup device.

3. The method of claim 1, wherein encryption is performed by a client of the backup device.

4. The method of claim 1, further comprising caching data of the one or more identified sets of data prior to transmitting the one or more identified sets of data to the backup device for backup.

5. The method of claim 1, further comprising compressing the one or more identified sets of data prior to encryption.

6. The method of claim 2, wherein SCSI security protocol out (SPOUT) is utilized to facilitate encryption on the backup device.

7. The method of claim 2, wherein a key identifier associated with encrypted data of a backup medium is stored in a data header on the backup medium.

8. The method of claim 2, wherein a key identifier associated with encrypted data of a backup medium is stored in key associated data on the backup medium.

9. The method of claim 1, wherein encryption is performed utilizing software based encryption.

10. The method of claim 1, wherein encryption is performed utilizing hardware based encryption.

11. At least one non-transitory processor readable storage medium storing a computer program of instructions configured to be readable by at least one processor for instructing the at least one processor to execute a computer process for performing the method as recited in claim 1.

19. The method of claim 1, wherein the one or more criteria include at least one of:

the source of the data, the size of the data to be backed up, and the owner of the data.

12. An article of manufacture for providing multiplexed data for a backup, the article of manufacture comprising:

at least one processor readable medium; and

instructions carried on the at least one medium;

wherein the instructions are configured to be readable from the at least one medium by at least one processor and thereby cause the at least one processor to operate so as to;

determine one or more criteria for a set of data to be backed up by a backup device, wherein the one or more criteria are based at least in part on reducing encryption overhead for this set of data;

identify a plurality of sets of unencrypted data previously associated with a same encryption key to form a multiplexed backup based upon the plurality of sets of unencrypted data meeting the one or more criteria, wherein the same encryption key is usable for at least two sets of data having different content, and wherein the identification is performed based at least in part on receiving the encryption key from backup management software, the encryption key being associated with each of the plurality of sets of unencrypted data; and

transmit the plurality of identified sets of data to the backup device for backup.

13. A system for providing multiplexed data for a backup comprising:

one or more processors communicatively coupled to a network;

wherein the one or more processors are configured to;

determine one or more criteria for a set of data to be backed up by a backup device, wherein the one or more criteria are based at least in part on reducing encryption overhead for the set of data;

identify a plurality of sets of unencrypted data previously associated with a same encryption key to form a multiplexed backup based upon the plurality of sets of unencrypted data meeting the one or more criteria, wherein the same encryption key is usable for at least two sets of data having different content, and wherein the identification is performed based at least in part on receiving the encryption key from backup management software, the encryption key being associated with each of the plurality of sets of unencrypted data; and

transmit the plurality of identified sets of data to the backup device for backup.

14. The system of claim 13, wherein the backup device utilizes magnetic tape.

15. The system of claim 13, wherein the backup device utilizes optical storage.

16. The system of claim 13, further comprising storage for caching data of the one or more identified sets of data prior to transmitting the one or more identified sets of data to the backup device for backup.

17. The system of claim 13, wherein SCSI security protocol out (SPOUT) is utilized to facilitate encryption on the backup device.

18. The system of claim 13, wherein a key identifier associated with encrypted data of a backup medium is stored in at least one of:

a data header on the backup medium and key associated data on the backup medium.