Management of the retention and/or discarding of stored data

• US 20050238175A1
• Filed: 04/22/2004
• Published: 10/27/2005
• Est. Priority Date: 04/22/2004
• Status: Active Grant

• Current Assignee: Decru Incorporated (NetApp, Inc.)
• Original Assignee: Decru Incorporated (NetApp, Inc.)
• Inventors: Plotkin, Serge, Brown, Kevin, Bojinov, Hristo Iankov
• Granted Patent: US 7,593,532 B2
• Time in Patent Office: Days
• US Class Current: 380/281
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

Embodiments of methods, devices and/or systems for a method of managing the retention and/or discarding of stored data are described.

Claims

1. A method of discarding stored data comprising:

discarding a key previously used to encrypt said stored data.

2. The method of claim 1, and further comprising:

encrypting multiple sets of stored data using multiple keys; and

encrypting said multiple keys so as to create at least one hierarchy of key encryption dependencies among said multiple keys;

wherein discarding a key previously used to encrypt said stored data includes discarding a key used to encrypt the key previously used to encrypt said stored data.

3. The method of claim 2, wherein said at least one hierarchy of key encryption dependencies includes more than one hierarchy level of key encryption dependencies.

4. The method of claim 2, wherein discarding a key used to encrypt the key previously said to encrypt said stored data includes discarding a key higher in said at least one hierarchy than the key previously used to encrypt said stored data.

5. The method of claim 1, wherein said stored data is contained in a file structure;

said key comprising a file key;

said discarding a key comprising discarding said file key.

6. The method of claim 5, and further comprising:

encrypting said file key with a retention key; and

wherein said discarding said file key comprises discarding said retention key.

7. The method of claim 6, wherein the encrypted file key is stored in said file structure.

8. The method of claim 6, wherein the encrypted file key is stored separately from said file structure.

9. The method of claim 8, wherein said retention key is also encrypted and the encrypted retention key is also stored separately from said file structure.

10. The method of claim 8, wherein stored separately comprises stored via a separate storage medium.

11. The method of claim 5, wherein the file key is stored in said file structure.

12. The method of claim 5, wherein the file key is stored separately from said file structure.

13. The method of claim 12, wherein stored separately comprises stored via a separate storage medium.

14. The method of claim 5, wherein said file structure is positioned in a hierarchy of file structures;

and further comprising;

encrypting said file key with a file key for a file structure higher in said hierarchy of file structures.

15. The method of claim 14, wherein said discarding said file key comprises discarding said file key for said file structure higher in said hierarchy.

16. The method of claim 15, wherein said discarding said file key for said file structure higher in the file hierarchy comprises discarding a root key.

17. The method of claim 16, wherein said discarding said root key comprises discarding data stored in said hierarchy of file structures.

18. The method of claim 15, wherein discarding said file key for said file structure higher in said file hierarchy comprises discarding data stored in multiple file structures in said file hierarchy below said file structure higher in said file hierarchy.

19. The method of claim 14, wherein said hierarchy of file structures comprises multiple hierarchies of file structures;

each of said hierarchies having a root key such that discarding the root key discards the data contents of the file structures of the particular hierarchy.

20. The method of claim 14, wherein encrypting said file key with a file key for a file structure higher in said hierarchy of file structures includes encrypting said file key with at least some file keys higher in said hierarchy along a path to a root key of said hierarchy.

21. A method of implementing data retention comprising:

manipulating one or more keys employed to encrypt said data.

22. The method of claim 21, wherein said manipulating includes discarding at least one of said one or more keys.

23. The method of claim 21, wherein said manipulating includes replacing at least one of said one or more keys.

24. The method of claim 23, wherein said one or more keys comprise a hierarchy of keys;

said keys being related in said hierarchy through an AND scheme, an OR scheme, or a combination of an AND/OR scheme.

25. The method of claim 23, wherein said one or more keys comprise a hierarchy of keys;

wherein said manipulating includes discarding at least one of said keys in said hierarchy.

26. The method of claim 25, wherein said hierarchy of keys includes parent keys and children keys;

and wherein discarding a parent key discards all of its children keys.

27. The method of claim 23, wherein said one or more keys comprise a hierarchy of keys in which at least some of said keys in said hierarchy are encrypted;

said replacing at least one of said one or more keys comprises re-encrypting at least one of said at least some of said keys with a different key.

28. The method of claim 27, wherein said replacing at least one of said one or more keys comprises replacing said at least one of said one or more keys based at least in part on at least one parameter of a set of parameters, said set of parameters comprising:

time, type of file, storage location, or size of file.

29. The method of claim 28, wherein said at least one parameter of said set of parameters comprises time.

30. The method of claim 29, wherein said replacing said at least one of said one or more keys takes place after a certain number of weeks, months, or years.

31. A method comprising:

discarding encrypted data stored on a system;

said system comprising a first layer, a second layer and a third layer, and said encrypted data residing on said third layer;

wherein said first layer is capable of making read and write requests directed to said third layer;

said second layer is capable of performing services including encryption; and

said third layer is capable of performing services including data storage, said encryption being transparent to said third layer.

32. The method of claim 31, wherein said encryption is also transparent to said first layer.

33. The method of claim 32, wherein at least any two of the three layers reside on the same computing platform.

34. The method of claim 31, wherein said encrypted data is discarded by discarding a key previously used to encrypt said encrypted data.

35. An article comprising:

a storage medium having stored thereon instructions, that when executed, result in performance of a method of discarding stored data comprising;

discarding a key previously used to encrypt said stored data.

36. The article of claim 35, wherein said instructions, when executed, result in said method further comprising:

encrypting multiple sets of stored data using multiple keys; and

encrypting said multiple keys so as to create at least one hierarchy of key encryption dependencies among said multiple keys;

wherein discarding a key previously used to encrypt said stored data includes discarding a key used to encrypt the key previously used to encrypt said stored data.

37. The article of claim 36, wherein said instructions, when executed, result in said at least one hierarchy of key encryption dependencies including more than one hierarchy level of key encryption dependencies.

38. The article of claim 36, wherein said instructions, when executed, result in discarding a key used to encrypt the key previously said to encrypt said stored data including discarding a key higher in said at least one hierarchy than the key previously used to encrypt said stored data.

39. The article of claim 35, wherein said instructions, when executed, result in said stored data being contained in a file structure;

and

said key comprising a file key; and

said discarding a key comprising discarding said file key.

40. The article of claim 39, wherein said instructions, when executed, result in said method further comprising:

encrypting said file key with a retention key; and

wherein said discarding said file key comprises discarding said retention key.

41. The article of claim 39, wherein said instructions, when executed, result in:

said file structure being positioned in a hierarchy of file structures; and

said method comprising;

encrypting said file key with a file key for a file structure higher in said hierarchy of file structures.

42. The article of claim 41, wherein said instructions, when executed, result in said discarding said file key comprising discarding said file key for said file structure higher in said hierarchy.

43. The article of claim 42, wherein said instructions, when executed, result in said discarding said file key for said file structure higher in the file hierarchy comprising discarding a root key.

44. The article of claim 43, wherein said instructions, when executed, result in said discarding said root key comprising discarding data stored in said hierarchy of file structures.

45. The article of claim 42, wherein said instructions, when executed, result in discarding said file key for said file structure higher in said file hierarchy comprising discarding data stored in multiple file structures in said file hierarchy below said file structure higher in said file hierarchy.

46. The article of claim 41, wherein said instructions, when executed, result in said hierarchy of file structures comprising multiple hierarchies of file structures;

each of said hierarchies having a root key such that discarding the root key discards the data contents of the file structures of the particular hierarchy.

47. The article of claim 41, wherein said instructions, when executed, result in encrypting said file key with a file key for a file structure higher in said hierarchy of file structures including encrypting said file key with at least some file keys higher in said hierarchy along a path to a root key of said hierarchy.

48. An article comprising:

a storage medium having stored thereon instructions that when executed, result in performance of a method of implementing data retention comprising;

manipulating one or more keys employed to encrypt said data.

49. The article of claim 48, wherein instructions, when executed, result in said manipulating including discarding at least one of said one or more keys.

50. The article of claim 48, wherein instructions, when executed, result in said manipulating including replacing at least one of said one or more keys.

51. The article of claim 50, wherein instructions, when executed, result in said one or more keys comprising a hierarchy of keys;

said keys being related in said hierarchy through an AND scheme, an OR scheme, or a combination of an AND/OR scheme.

52. The article of claim 50, wherein instructions, when executed, result in said one or more keys comprising a hierarchy of keys;

and said manipulating including discarding at least one of said keys in said hierarchy.

53. The article of claim 52, wherein instructions, when executed, result in said hierarchy of keys including parent keys and children keys;

and discarding a parent key discards all of its children keys.

54. The article of claim 50, wherein instructions, when executed, result in said one or more keys comprising a hierarchy of keys in which at least some of said keys in said hierarchy are encrypted;

and said replacing at least one of said one or more keys comprising re-encrypting at least one of said at least some of said keys with a different key.

55. The article of claim 54, wherein instructions, when executed, result in said replacing at least one of said one or more keys comprising replacing said at least one of said one or more keys based at least in part on at least one parameter of a set of parameters, said set of parameters comprising:

time, type of file, storage location, or size of file.

56. The article of claim 55, wherein instructions, when executed, result in said at least one parameter of said set of parameters comprising time.

57. The article of claim 56, wherein instructions, when executed, result in said replacing said at least one of said one or more keys taking place after a certain number of weeks, months, or years.

58. An apparatus comprising:

means for encrypting data with one or more keys; and

means for manipulating said one or more keys employed to encrypt data.

59. The apparatus of claim 58, wherein said means for manipulating includes means for discarding at least one of said one or more keys.

60. The apparatus of claim 58, wherein said means for manipulating includes means for replacing at least one of said one or more keys.

61. The apparatus of claim 60, wherein said one or more keys comprise a hierarchy of keys;

said keys being related in said hierarchy through an AND scheme, an OR scheme, or a combination of an AND/OR scheme.

62. The apparatus of claim 60, wherein said one or more keys comprise a hierarchy of keys;

wherein said means for manipulating includes means for discarding at least one of said keys in said hierarchy.

63. The apparatus of claim 62, wherein said hierarchy of keys includes parent keys and children keys;

and wherein said means for discarding a parent key includes means for discarding all of its children keys.

64. The apparatus of claim 60, wherein said one or more keys comprise a hierarchy of keys in which at least some of said keys in said hierarchy are encrypted;

said means for replacing at least one of said one or more keys comprises means for re-encrypting at least one of said at least some of said keys with a different key.

65. The apparatus of claim 64, wherein said means for replacing at least one of said one or more keys comprises means for replacing said at least one of said one or more keys based at least in part on at least one parameter of a set of parameters, said set of parameters comprising:

time, type of file, storage location, or size of file.

66. The apparatus of claim 65, wherein said at least one parameter of said set of parameters comprises time.

67. An apparatus comprising:

a computing platform, said computing platform adapted to manipulate one or more keys employed to encrypt data.

68. The apparatus of claim 67, wherein said computing platform is further adapted to manipulate by discarding at least one of said one or more keys.

69. The apparatus of claim 67, wherein said computing platform is further adapted to manipulate by replacing at least one of said one or more keys.

70. The apparatus of claim 69, wherein said one or more keys comprise a hierarchy of keys;

said keys being related in said hierarchy through an AND scheme, an OR scheme, or a combination of an AND/OR scheme.

71. The apparatus of claim 69, wherein said one or more keys comprise a hierarchy of keys;

wherein said computing platform is further adapted to manipulate by discarding at least one of said keys in said hierarchy.

72. The apparatus of claim 71, wherein said hierarchy of keys includes parent keys and children keys;

and wherein said computing platform is further adapted to discard children keys by discarding a parent key of said children keys.

73. The apparatus of claim 69, wherein said one or more keys comprise a hierarchy of keys in which at least some of said keys in said hierarchy are encrypted;

said computing platform is further adapted to replace at least one of said one or more keys by re-encrypting at least one of said at least some of said keys with a different key.

74. The apparatus of claim 73, wherein said computing platform is further adapted to replace at least one of said one or more keys by replacing said at least one of said one or more keys based at least in part on at least one parameter of a set of parameters, said set of parameters comprising:

time, type of file, storage location, or size of file.

75. The apparatus of claim 67, wherein said computing platform comprises a switch.

76. The apparatus of claim 67, wherein said computing platform is coupled in a network.

77. The apparatus of claim 67, and further comprising media to store said one or more keys, wherein said media is capable of discarding at least one of said one or more keys