Avoiding encryption of certain blocks in a deduplication vault

1. A method for avoiding encryption of certain blocks during a backup of a source storage into a deduplication vault storage, the method comprising:

analyzing an allocated plain text block stored in the source storage at a point in time to determine if the allocated plain text block is already stored in the deduplication vault storage;

in response to the allocated plain text block not being stored in the deduplication vault storage, encrypting the allocated plain text block and analyzing the encrypted block to determine if the encrypted block is already stored in the deduplication vault storage; and

in response to the encrypted block not being stored in the deduplication vault storage, storing the encrypted block in the deduplication vault storage;

analyzing a second allocated plain text block stored in the source storage at the point in time to determine if the second allocated plain text block is already stored in the deduplication vault storage; and

in response to the second allocated plain text block already being stored in the deduplication vault storage, avoiding encryption of the second allocated plain text block by not encrypting the second allocated plain text block and instead associating the location of the second allocated plain text block in the source storage with the location of the duplicate block already stored in the deduplication vault storage.

2. The method as recited in claim 1 , further comprising reading, from the deduplication vault storage, and storing, in a restore storage, each allocated block that was stored in the source storage at the point in time in the same position as stored in the source storage at the point in time, wherein each encrypted allocated block is decrypted prior to being stored in the restore storage and each plain text allocated block is not decrypted prior to being stored in the restore storage.

3. The method as recited in claim 1 , further comprising seeding the deduplication vault storage with common plain text blocks prior to the point in time.

4. The method as recited in claim 1 , wherein the analyzing the allocated plain text block includes compressing the allocated plain text block.

5. The method as recited in claim 1 , wherein the analyzing the allocated plain text block includes:

hashing the allocated plain text block to produce a hash value;

determining if the hash value matches a hash value of any plain text block already stored in the deduplication vault storage; and

if the hash value matches any hash value of any plain text block already stored in the deduplication vault storage, determining that the allocated plain text block is already stored in the deduplication vault storage.

6. The method as recited in claim 5 , wherein hash values associated with plain text blocks stored in the deduplication vault storage are stored in a database or hash table.

7. The method as recited in claim 1 , wherein the analyzing the encrypted block includes:

hashing the encrypted block to produce a hash value;

determining if the hash value matches a hash value of any encrypted block already stored in the deduplication vault storage; and

if the hash value matches the hash value of any encrypted block already stored in the deduplication vault storage, determining that the encrypted block is already stored in the deduplication vault storage.

8. The method as recited in claim 7 , wherein the storing the encrypted block in the deduplication vault storage further includes storing the hash value in a database or hash table such that the hash value is associated with the encrypted block.

9. The method as recited in claim 7 , wherein the encrypting the allocated plain text block includes encrypting the allocated plain text block using a user-chosen key.

10. One or more non-transitory computer-readable media storing one or more programs that, when executed, causes one or more processors to perform a method for avoiding encryption of certain blocks during a backup of a source storage into a deduplication vault storage, the method comprising:

analyzing an allocated plain text block stored in the source storage at a point in time to determine if the allocated plain text block is already stored in the deduplication vault storage;

in response to the allocated plain text block not being stored in the deduplication vault storage, encrypting the allocated plain text block and analyzing the encrypted block to determine if the encrypted block is already stored in the deduplication vault storage; and

in response to the encrypted block not being stored in the deduplication vault storage, storing the encrypted block in the deduplication vault storage;

analyzing a second allocated plain text block stored in the source storage at the point in time to determine if the second allocated plain text block is already stored in the deduplication vault storage; and

in response to the second allocated plain text block already being stored in the deduplication vault storage, avoiding encryption of the second allocated plain text block by not encrypting the second allocated plain text block and instead associating the location of the second allocated plain text block in the source storage with the location of the duplicate block already stored in the deduplication vault storage.

11. A method for avoiding encryption of certain blocks during a backup of a source storage into a deduplication vault storage, the method comprising:

seeding the deduplication vault storage with common plain text blocks;

analyzing an allocated plain text block stored in the source storage at a point in time to determine if the allocated plain text block is already stored in the deduplication vault storage;

in response to the allocated plain text block not being stored in the deduplication vault storage, encrypting the allocated plain text block and analyzing the encrypted block to determine if the encrypted block is already stored in the deduplication vault storage;

in response to the encrypted block not being stored in the deduplication vault storage, storing the encrypted block in the deduplication vault storage;

analyzing a second allocated plain text block stored in the source storage at the point in time to determine if the second allocated plain text block is already stored in the deduplication vault storage; and

in response to the second allocated plain text block already being stored in the deduplication vault storage, avoiding encryption of the second allocated plain text block by not encrypting the second allocated plain text block and instead associating the location of the second allocated plain text block in the source storage with the location of the duplicate block already stored in the deduplication vault storage.

12. The method as recited in claim 11 , wherein the common plain text blocks include blocks that make up files of a standard operating system and/or files of a standard software application and/or blocks that have been designated by an administrator or user of the deduplication vault storage as common blocks.

13. The method as recited in claim 11 , wherein the seeding the deduplication vault storage includes:

identifying an encrypted block stored in the deduplication vault storage that corresponds to multiple source storages; and

replacing the encrypted block with a corresponding plain text block in the deduplication vault storage.

14. The method as recited in claim 11 , wherein the analyzing the allocated plain text block includes compressing the allocated plain text block.

15. The method as recited in claim 11 , wherein the analyzing the allocated plain text block includes:

hashing the allocated plain text block to produce a hash value;

determining if the hash value matches a hash value of any plain text block already stored in the deduplication vault storage; and

if the hash value matches any hash value of any plain text block already stored in the deduplication vault storage, determining that the allocated plain text block is already stored in the deduplication vault storage.

16. The method as recited in claim 15 , wherein hash values associated with plain text blocks stored in the deduplication vault storage are stored in a database or hash table.

17. The method as recited in claim 11 , wherein the analyzing the encrypted block includes:

hashing the encrypted block to produce a hash value;

determining if the hash value matches a hash value of any encrypted block already stored in the deduplication vault storage; and

if the hash value matches the hash value of any encrypted block already stored in the deduplication vault storage, determining that the encrypted block is already stored in the deduplication vault storage.

18. The method as recited in claim 17 , wherein the storing the encrypted block in the deduplication vault storage further includes storing the hash value in a database or hash table such that the hash value is associated with the encrypted block.

19. The method as recited in claim 18 , wherein the encrypting the allocated plain text block includes encrypting the allocated plain text block using a user-chosen key.

20. One or more non-transitory computer-readable media storing one or more programs that, when executed, causes one or more processors to perform a method for avoiding encryption of certain blocks during a backup of a source storage into a deduplication vault storage, the method comprising:

seeding the deduplication vault storage with common plain text blocks;

analyzing an allocated plain text block stored in the source storage at a point in time to determine if the allocated plain text block is already stored in the deduplication vault storage;

in response to the allocated plain text block not being stored in the deduplication vault storage, encrypting the allocated plain text block and analyzing the encrypted block to determine if the encrypted block is already stored in the deduplication vault storage;

in response to the encrypted block not being stored in the deduplication vault storage, storing the encrypted block in the deduplication vault storage;

analyzing a second allocated plain text block stored in the source storage at the point in time to determine if the second allocated plain text block is already stored in the deduplication vault storage; and

in response to the second allocated plain text block already being stored in the deduplication vault storage, avoiding encryption of the second allocated plain text block by not encrypting the second allocated plain text block and instead associating the location of the second allocated plain text block in the source storage with the location of the duplicate block already stored in the deduplication vault storage.