SECURE DATABASE BACKUP AND RECOVERY

• US 20170230177A1
• Filed: 04/26/2017
• Published: 08/10/2017
• Est. Priority Date: 11/06/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Barbas, Pedro M., Tilson, David M., Duffy, Joseph, Maycock, Ken
• Granted Patent: US 9,929,861 B2
• Time in Patent Office: Days
• CPC Class Codes: G06C 1/00 Computing aids in which the computing members form at least part of the displayed result and are manipulated directly by hand, e.g. abacuses or pocket adding devices
• CPC Class Codes: G06F 11/1448 Management of the data involved in backup or backup restore
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 16/182 Distributed file systems
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2201/80 Database-specific techniques
• CPC Class Codes: G06F 2201/805 Real-time
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 67/1065 Discovery involving distributed pre-established resource-based relationships among peers, e.g. based on distributed hash tables [DHT] pre-configuration of logical or physical connections H04L67/1053
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04N 21/2318 using striping

Abstract

As disclosed herein a computer system for secure database backup and recovery in a secure database network has N distributed data nodes. The computer system includes program instructions that include instructions to receive a database backup file, fragment the file using a fragment engine, and associate each fragment with one node, where the fragment is not stored on the associated node. The program instructions further include instructions to encrypt each fragment using a first encryption key, and store, randomly, encrypted fragments on the distributed data nodes. The program instructions further include instructions to retrieve the encrypted fragments, decrypt the encrypted fragments using the first encryption key, re-encrypt the decrypted fragments using a different encryption key, and store, randomly, the re-encrypted fragments on the distributed data nodes. A computer program product and method corresponding to the above computer system are also disclosed herein.

Claims

1. A method for secure database backup and recovery in a secure database network having N distributed data nodes, the method comprising:

receiving a database backup file from a database system;

fragmenting the file into n fragments;

associating each fragment with a node of the N distributed data nodes that will not be used to store the fragment;

encrypting each fragment of the n fragments using a first key;

storing the n fragments on the N nodes whereby no fragment is stored on its associated node;

retrieving the n fragments a determined time later from the N nodes;

decrypting each fragment of the n fragments using the first key;

encrypting each fragment of the n fragments again with a different key;

storing the n fragments again on the N nodes whereby no fragment is stored on its associated node.

2. The method of claim 1 wherein storing and retrieval of the n fragments is performed by agents in the database system and sensors in the data nodes whereby fragment node location is not stored in the database system.

3. The method of claim 2 wherein after retrieving each fragment from a respective node, said fragment is stored again on a different node from the node it was retrieved from.

4. The method of claim 3 further comprising using a key generator and store to fragment the key;

encrypt each key fragment; and

store each encrypted key fragment with a backup fragment.

5. The method of claim 4 wherein database metadata is added to the fragment whereby database metadata is fragmented and distributed.

6. The method of claim 5 wherein the database metadata includes, but is not limited to, network configuration, database node locations and backup image expiration.

7. The method of claim 6 wherein the encryption is public/private key encryption.