Method and apparatus of securely processing data for file backup, de-duplication, and restoration
View Patent ↗Disclosed are an apparatus and method of restoring at least one data file. The method may include retrieving the at least one data file to be restored from a data storage location, determining that the at least one data file is a link file, and regenerating a previously exchanged shared secret. The method may also include decrypting a key from the link file using the shared secret, and retrieving data from a data repository location to be restored.
1. A method of restoring at least one data file, the method comprising:
retrieving the at least one data file to be restored from a data storage location which also stores at least one de-duplicated file;
determining that the at least one data file is a link file storing metadata comprising a uniform resource identifier (URI) of a repository source file, and which also includes a key encrypted with an agent and server shared secret that was previously exchanged;
regenerating the previously exchanged shared secret;
decrypting the key from the link file using the shared secret; and
retrieving data from a data repository location to be restored using the decrypted key.
2. The method of claim 1 , wherein the data storage location is an online data storage location.
3. The method of claim 1 , wherein the shared secret is shared between an agent application and a server application.
4. The method of claim 3 , wherein the shared secret is a Diffie-Hellman (D-H) type shared secret.
5. The method of claim 1 , wherein the key is a random advanced encryption standard (AES) key.
6. The method of claim 5 , wherein the AES key is decrypted from metadata of the link file.
7. The method of claim 1 , further comprising:
decrypting the retrieved data from the data repository location via the AES key.
8. An apparatus configured to restore at least one data file, the apparatus comprising:
a receiver configured to receive the at least one data file to be restored from a data storage location which also stores at least one de-duplicated file; and
a processor configured to
determine that the at least one data file is a link file storing metadata comprising a uniform resource identifier (URI) of a repository source file, and which also includes a key encrypted with an agent and server shared secret that was previously exchanged;
regenerate the previously exchanged shared secret; and
decrypt the key from the link file using the shared secret; and
wherein the receiver is further configured to receive data from a data repository location to be restored using the decrypted key.
9. The apparatus of claim 8 , wherein the data storage location is an online data storage location.
10. The apparatus of claim 8 , wherein the shared secret is shared between an agent application and a server application.
11. The apparatus of claim 10 , wherein the shared secret is a Diffie-Hellman (D-H) type shared secret.
12. The apparatus of claim 8 , wherein the key is a random advanced encryption standard (AES) key.
13. The apparatus of claim 12 , wherein the AES key is decrypted from metadata of the link file.
14. The apparatus of claim 8 , wherein the processor is further configured to decrypt the received data from the data repository location via the AES key.
15. A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform restoring at least one data file, the processor being further configured to perform:
retrieving the at least one data file to be restored from a data storage location which also stores at least one de-duplicated file;
determining that the at least one data file is a link file storing metadata comprising a uniform resource identifier (URI) of a repository source file, and which also includes a key encrypted with an agent and server shared secret that was previously exchanged;
regenerating the previously exchanged shared secret;
decrypting the key from the link file using the shared secret; and
retrieving data from a data repository location to be restored using the decrypted key.
16. The non-transitory computer readable storage medium of claim 15 , wherein the data storage location is an online data storage location.
17. The non-transitory computer readable storage medium of claim 15 , wherein the shared secret is shared between an agent application and a server application.
18. The non-transitory computer readable storage medium of claim 17 , wherein the shared secret is a Diffie-Hellman (D-H) type shared secret.
19. The non-transitory computer readable storage medium of claim 15 , wherein the key is a random advanced encryption standard (AES) key.
20. The non-transitory computer readable storage medium of claim 19 , wherein the AES key is decrypted from metadata of the link file.