Data deduplication in a dispersed storage system

• US 9,679,153 B2
• Filed: 06/23/2014
• Issued: 06/13/2017
• Est. Priority Date: 12/29/2009
• Status: Active Grant

• Current Assignee: Pure Storage, Inc.
• Original Assignee: International Business Machines Corporation
• Inventors: Baptist, Andrew, Grube, Gary W., Markison, Timothy W., Gladwin, S. Christopher, Resch, Jason K., Leggette, Wesley
• Primary Examiner(s): Pham, Khanh
• Application Number:
  US14/312,532
• Publication Number:
  US 20140304526A1
• Time in Patent Office: 1,086 Days
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 11/1453 using de-duplication of the data
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2211/1028 Distributed, i.e. distributed RAID systems with parity
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

An efficient data deduplication method for use in a dispersed storage network (DSN). After a data object is received for storage in the DSN, it is determined whether a substantially identical data object has previously been encrypted and stored. The determination may be made, for example, by comparing an encryption key reference value relating to the data object to key reference information stored in DSN memory. If not detected, the data object is encrypted using an encryption key based on the data object. The encrypted data object is then compressed and stored. The encryption key and a key reference value are also stored as encoded key slices in DSN memory. If the data object was previously stored, it is encrypted using a retrieved encryption key that is substantially identical to the data object. The data object may then be compressed for storage using a pattern based data compression function.

Claims

1. A data encoding and compression method for execution by a computing device, wherein the method comprises:

receiving a storage request regarding storing a portion of a data object in dispersed storage network (DSN) memory;

generating a reference for the portion;

determining that a substantially identical portion is not stored in the DSN memory based on the reference;

when the substantially identical portion is not stored in the DSN memory;

encrypting, using an encryption algorithm, the portion using an encryption key to produce encrypted data, wherein the encryption key is one of;

the portion, an inversion of the portion, or a known inversion and non-inversion bit pattern of the portion, and wherein, based on encryption algorithm, the encrypted data includes one of;

substantially all zeros, substantially all ones, or a known pattern of ones and zeros;

compressing the encrypted data based on a compression function to produce compressed data, wherein the compression data is a representation of one of;

the substantially all zeros of the encrypted data, the substantially all ones of the encrypted data, and the known pattern of ones and zeros of the encrypted data;

storing the compressed data;

dispersed storage error encoding the encryption key to produce a plurality of sets of encoded key slices; and

facilitating storage of the plurality of sets of encoded key slices in the DSN memory.

2. The method of claim 1, wherein storing the compressed data comprises:

storing the compressed data in local memory of the computing device.

3. The method of claim 1, wherein storing the compressed data comprises:

dispersed storage error encoding the compressed data to produce one or more sets of encoded data slices; and

sending the one or more sets of encoded data slices to the DSN memory for storage therein.

4. The method of claim 3, wherein dispersed storage error encoding the encryption key and dispersed storage error encoding the compressed data are performed in accordance with differing encoding algorithm types.

5. The method of claim 1 further comprises:

generating the reference from the portion or from the encryption key; and

updating reference information for the DSN.

6. The method of claim 5, wherein the step of determining that a substantially identical portion of the data object is not stored in DSN memory includes:

comparing the reference to other references in the reference information; and

when the reference does not substantially match one of the other references, indicating the portion is not stored in the DSN memory.

7. The method of claim 1 further comprises:

when the substantially identical portion is stored in the DSN memory;

utilizing the reference to obtain operational parameters that indicate partitioning of the data object into portions, dispersed storage error encoding parameters for encoding the encryption key, a type of encryption algorithm, and the compression function; and

recovering the substantially identical portion based on the operational parameters.

8. A non-transitory computer readable storage medium having accessible therefrom a set of instructions interpretable by a processing module, the set of instructions being configured to cause the processing module to carry out operations for:

receiving a storage request regarding storing a portion of a data object in dispersed storage network (DSN) memory;

generating a reference for the portion;

determining that a substantially identical portion is not stored in the DSN memory based on the reference;

when the substantially identical portion is not stored in the DSN memory;

encrypting, using an encryption algorithm, the portion using an encryption key to produce encrypted data, wherein the encryption key is one of;

the portion, an inversion of the portion, or a known inversion and non-inversion bit pattern of the portion, and wherein, based on encryption algorithm, the encrypted data includes one of;

substantially all zeros, substantially all ones, or a known pattern of ones and zeros;

compressing the encrypted data based on a compression function to produce compressed data, wherein the compression data is a representation of one of;

the substantially all zeros of the encrypted data, the substantially all ones of the encrypted data, and the known pattern of ones and zeros of the encrypted data;

storing the compressed data;

dispersed storage error encoding the encryption key to produce a plurality of sets of encoded key slices; and

facilitating storage of the plurality of sets of encoded key slices in the DSN memory.

9. The non-transitory computer readable storage medium of claim 8, wherein the set of instructions further causes the processing module to carry out operations for storing the compressed data by:

storing the compressed data in local memory of a computing device.

10. The non-transitory computer readable storage medium of claim 8, wherein the set of instructions further being configured to cause the processing module to carry out operations for:

generating the reference from the portion or from the encryption key; and

updating reference information for the DSN.

11. The non-transitory computer readable storage medium of claim 10, wherein the set of instructions further causes the processing module to carry out operations for determining that a substantially identical portion of the data object is not stored in the DSN memory by:

comparing the reference to other references in the reference information; and

when the reference does not substantially match one of the other references, indicating the portion is not stored in the DSN memory.

12. The non-transitory computer readable storage medium of claim 10, wherein the set of instructions further being configured to cause the processing module to carry out operations for:

when the substantially identical portion is stored in the DSN memory;

utilizing the reference to obtain operational parameters that indication partitioning of the data object into portions, dispersed storage error encoding parameters for encoding the encryption key, a type of encryption algorithm, and the compression function; and

recovering the substantially identical portion based on the operational parameters.