Secure database backup and recovery

• US 9,953,172 B2
• Filed: 09/14/2017
• Issued: 04/24/2018
• Est. Priority Date: 11/06/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Barbas, Pedro M., Duffy, Joseph, Maycock, Ken, Tilson, David M.
• Primary Examiner(s): Schmidt, Kari
• Assistant Examiner(s): Baum, Ronald
• Application Number:
  US15/704,562
• Publication Number:
  US 20180012028A1
• Time in Patent Office: 222 Days
• Field of Search: 713165
• CPC Class Codes: G06C 1/00 Computing aids in which the computing members form at least part of the displayed result and are manipulated directly by hand, e.g. abacuses or pocket adding devices
• CPC Class Codes: G06F 11/1448 Management of the data involved in backup or backup restore
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2201/80 Database-specific techniques
• CPC Class Codes: G06F 2201/805 Real-time
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 67/1065 Discovery involving distributed pre-established resource-based relationships among peers, e.g. based on distributed hash tables [DHT] pre-configuration of logical or physical connections H04L67/1053
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04N 21/2318 using striping

Abstract

As disclosed herein a computer system for secure database backup and recovery in a secure database network has N distributed data nodes. The computer system includes program instructions that include instructions to receive a database backup file, fragment the file using a fragment engine, and associate each fragment with one node, where the fragment is not stored on the associated node. The program instructions further include instructions to encrypt each fragment using a first encryption key, and store, randomly, encrypted fragments on the distributed data nodes. The program instructions further include instructions to retrieve the encrypted fragments, decrypt the encrypted fragments using the first encryption key, re-encrypt the decrypted fragments using a different encryption key, and store, randomly, the re-encrypted fragments on the distributed data nodes. A computer program product and method corresponding to the above computer system are also disclosed herein.

Claims

1. A computer system comprising:

one or more computer processors;

one or more computer readable storage media;

program instructions stored on the computer readable storage media for execution by at least one of the computer processors, the program instructions comprising instructions to;

receive a database backup file from a database system;

fragment the database backup file into a plurality of fragments using a fragment engine;

associate each fragment of the plurality of n fragments with a node of a plurality of distributed data nodes, respectively, wherein the fragment is not stored on the node with which the fragment is associated and wherein n is greater than 2;

encrypt each fragment of the plurality of fragments using a first encryption key, thereby providing a plurality of encrypted fragments;

store, randomly, the plurality of encrypted fragments on the plurality of distributed data nodes;

retrieve, after a determined duration, the plurality of encrypted fragments;

decrypt the plurality of encrypted fragments using the first encryption key, thereby providing a plurality of decrypted fragments;

re-encrypt the plurality of decrypted fragments using a different encryption key, thereby providing a plurality of re-encrypted fragments; and

store, randomly, the plurality of re-encrypted fragments on the plurality of distributed data nodes, wherein each fragment of the plurality of re-encrypted fragments is stored on a different node than that from which an encrypted fragment was retrieved;

wherein the computer-readable storage media are not transitory signals per se.

2. The computer system of claim 1, wherein the database system is unaware of a location of a stored fragment.

3. The computer system of claim 2, wherein the program instructions to store and retrieve the stored fragment are performed by database agents and node sensors corresponding to the plurality of distributed data nodes.

4. The computer system of claim 1, wherein the program instructions comprise instructions to:

use an encryption key generator and key store to fragment the first encryption key and the different encryption key;

encrypt each key fragment; and

store, randomly, each key fragment on the plurality of distributed data nodes.

5. The computer system of claim 4, wherein the program instructions comprise instructions to add database metadata to the key fragment, thereby providing fragmented and distributed metadata.

6. The computer system of claim 5, wherein the database metadata includes at least one of a network configuration, a database node location, and a backup image expiration.

7. The computer system of claim 1, wherein the program instructions to encrypt comprise instructions to use public key and private key encryption.

8. The computer system of claim 1, wherein a coordination engine associates the fragment with the node.

9. A method for secure database backup and recovery in a secure database network comprising a plurality of distributed data nodes, the method comprising:

receiving a database backup file from a database system;

fragmenting the database backup file into a plurality of fragments;

associating each fragment of the plurality of fragments with a node of the plurality of distributed data nodes, wherein the fragment is not stored on the node with which the fragment is associated;

encrypting each fragment of the plurality of fragments using a first encryption key, thereby providing a plurality of encrypted fragments;

storing, randomly, the plurality of encrypted fragments on the plurality of distributed data nodes;

retrieving, after a determined duration, the plurality of encrypted fragments;

decrypting the plurality of encrypted fragments using the first encryption key, thereby providing a plurality of decrypted fragments;

re-encrypting the plurality of decrypted fragments using a different encryption key, thereby providing a plurality of re-encrypted fragments; and

storing, randomly, the plurality of re-encrypted fragments on the plurality of distributed data nodes, wherein each fragment of the plurality of re-encrypted fragments is stored on a different node than that from which an encrypted fragment was retrieved.

10. The method of claim 9, wherein the database system is unaware of a location of a stored fragment.

11. The method of claim 10, wherein storing and retrieving the stored fragment is performed by database agents and sensors corresponding to the plurality of distributed data nodes.

12. The method of claim 9, further comprising:

fragmenting the first encryption key and the different encryption key using an encryption key generator and key store;

encrypting each key fragment; and

storing, randomly, each encrypted key fragment on the plurality of distributed data nodes.

13. The method of claim 12, further comprising adding database metadata to the key fragment, thereby providing fragmented and distributed metadata.

14. The method of claim 13, wherein the database metadata includes at least one of a network configuration, database node locations, or a backup image expiration.

15. The method of claim 9, wherein encrypting uses public key and private key encryption.

16. A computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising instructions to;

receive a database backup file from a database system;

fragment the database backup file into a plurality of fragments using a fragment engine;

associate each fragment of the plurality of fragments with a node of a plurality of distributed data nodes, respectively, wherein the fragment is not stored on the node with which the fragment is associated;

encrypt each fragment of the plurality of fragments using a first encryption key, thereby providing a plurality of encrypted fragments;

store, randomly, the plurality of encrypted fragments on the plurality of distributed data nodes;

retrieve, after a determined duration, the plurality of encrypted fragments;

decrypt the plurality of encrypted fragments using the first encryption key, thereby providing a plurality of decrypted fragments;

re-encrypt the plurality of decrypted fragments using a different encryption key, thereby providing a plurality of re-encrypted fragments; and

store, randomly, the plurality of re-encrypted fragments on the plurality of distributed data nodes, wherein each fragment of the plurality of re-encrypted fragments is stored on a different node than that from which an encrypted fragment was retrieved;

wherein the computer readable storage media are not transitory signals per se.

17. The computer program product of claim 16, wherein the database system is unaware of a location of a stored fragment.

18. The computer program product of claim 17, wherein the program instructions to store and retrieve the stored fragment are performed by database agents and node sensors corresponding to the plurality of distributed data nodes.