Protecting de-duplication repositories against a malicious attack
View Patent ↗Methods and systems for protecting de-duplication repositories against a malicious attack are disclosed. One method receives at least one block of data to store in a data storage system. A de-duplication engine comprising a secret key is utilized to generate a secret key hash of the at least one block of data. A comparison of the secret key hash of the at least one block of data with a secret key hash table of previously stored data on the data storage system to identify duplicated data, the secret key hash comparing protecting the data storage system against a malicious attack.
1. A malicious-attack-preventing data de-duplication storage system comprising:
a memory that stores a secret key, where the secret key is a password or a padding sequence; and
a processor that:
produces a modified data block by appending the secret key to the end of the data block, pre-pending the secret key to the beginning of the data block, or xor-ing the data block with the secret key, where the secret key is associated with the data block;
produces a secret key hash by hashing the modified data block; and
provides the secret key hash to the de-duplication system.
2. A data de-duplication system, comprising:
a memory configured to store a secret key, where the secret key is a password or a padding sequence; and
a processor configured:
to produce a modified data block by appending the secret key to the end of a data block available to the de-duplication system, where the secret key is associated with the data block;
to produce a secret key hash by hashing the modified data block; and
to use the secret key hash as a uniqueness indicator in the data de-duplication system.
3. A data de-duplication system, comprising:
a memory configured to store a secret key, where the secret key is a password or a padding sequence; and
a processor configured:
to produce a modified data block by prepending the secret key to the beginning of a data block available to the de-duplication system, where the secret key is associated with the data block;
to produce a secret key hash by hashing the modified data block; and
to use the secret key hash as a uniqueness indicator in the data de-duplication system.