Granted Patent B2

US 9,256,499 · App. 14/480,136 · Granted Feb 9, 2016

Abstract

Claims (34)

1. A method, comprising:

retrieving at least one data file to be restored from a data storage location;

determining that the at least one data file is a link file storing metadata comprising a uniform resource identifier (URI) of a repository source file, and which also includes a key encrypted with an agent and server shared secret that was previously exchanged;

decrypting the key from the link file using the shared secret; and

retrieving data from a data repository location to be restored using the decrypted key.

2. The method of claim 1 , wherein the data storage location is an online data storage location.

3. The method of claim 1 , wherein the shared secret is shared between an agent application and a server application.

4. The method of claim 3 , wherein the shared secret is a Diffie-Hellman (D-H) type shared secret.

5. The method of claim 1 , wherein the key is a random advanced encryption standard (AES) key.

6. The method of claim 5 , wherein the AES key is decrypted from metadata of the link file.

7. The method of claim 1 , further comprising:

decrypting the retrieved data from the data repository location via the AES key.

8. An apparatus, comprising:

a receiver configured to receive at least one data file to be restored from a data storage location; and

a processor configured to:

determine that the at least one data file is a link file storing metadata comprising a uniform resource identifier (URI) of a repository source file, and which also includes a key encrypted with an agent and server shared secret that was previously exchanged; and

decrypt the key from the link file using the shared secret;

wherein the receiver is further configured to receive data from a data repository location to be restored using the decrypted key.

9. The apparatus of claim 8 , wherein the data storage location is an online data storage location.

10. The apparatus of claim 8 , wherein the shared secret is shared between an agent application and a server application.

11. The apparatus of claim 10 , wherein the shared secret is a Diffie-Hellman (D-H) type shared secret.

12. The apparatus of claim 8 , wherein the key is a random advanced encryption standard (AES) key.

13. The apparatus of claim 12 , wherein the AES key is decrypted from metadata of the link file.

14. The apparatus of claim 8 , wherein the processor is further configured to decrypt the received data from the data repository location via the AES key.

15. A non-transitory computer readable storage medium configured to store instructions that when executed cause a processor to perform:

retrieving at least one data file to be restored from a data storage location;

determining that the at least one data file is a link file storing metadata comprising a uniform resource identifier (URI) of a repository source file, and which also includes a key encrypted with an agent and server shared secret that was previously exchanged;

decrypting the key from the link file using the shared secret; and

retrieving data from a data repository location to be restored using the decrypted key.

16. The non-transitory computer readable storage medium of claim 15 , wherein the data storage location is an online data storage location.

17. The non-transitory computer readable storage medium of claim 15 , wherein the shared secret is shared between an agent application and a server application.

18. The non-transitory computer readable storage medium of claim 17 , wherein the shared secret is a Diffie-Hellman (D-H) type shared secret.

19. The non-transitory computer readable storage medium of claim 15 , wherein the key is a random advanced encryption standard (AES) key.

20. The non-transitory computer readable storage medium of claim 19 , wherein the AES key is decrypted from metadata of the link file.

Assignments (9)