Selective encryption while loading from network attached storage system
According to one embodiment, a method, computer system, and computer program product for selective dataset encryption is provided. The embodiment may include identifying one or more data items within one or more datasets to be moved from network attached storage to cloud-based storage. The embodiment may also include determining an encryption method to be performed on each data item based on a level of confidentiality or sensitivity of each data item. The embodiment may further include sorting each data item into one or more groups based on the determined encryption method. The embodiment may also include performing each determined encryption method to the corresponding group.
1. A processor-implemented method, the method comprising:
identifying, by a processor, one or more unencrypted data items within one or more datasets to be moved from storage in a network attached storage system to storage in a cloud-based storage system;
determining an encryption method to be performed on each unencrypted data item based on a level of confidentiality or sensitivity of each unencrypted data item;
sorting each unencrypted data item into one or more groups based on the determined encryption method;
assigning a unique name to each sorted, unencrypted data item in accordance with a preconfigured naming structure; and
performing each determined encryption method to a corresponding group within the one or more groups.
2. The method of claim 1 , wherein the identifying further comprises:
tagging metadata associated with each data item with a location of the data item within an unencrypted dataset within the one or more datasets; and
extracting each data item from the the unencrypted dataset.
3. The method of claim 2 , further comprising:
transmitting each encrypted group to the cloud-based storage;
performing a decryption method corresponding to each encryption method for each group; and
inserting each data item from each decrypted group based on the location within the tagged metadata.
4. The method of claim 3 , wherein each encrypted group is transmitted with a corresponding decryption key.
5. The method of claim 1 , wherein the encryption method is further determined by one or more criteria selected from a group consisting of performance limitations of each encryption method in relation to the unencrypted data items to be encrypted, legal or industrial regulations that require certain methods of encryption, and individual user preferences and preconfigurations.
6. The method of claim 1 , further comprising:
identifying the level of confidentiality or sensitivity of each unencrypted data item through an extraction engine using natural language processing and/or tag-based identification.
7. The method of claim 1 , wherein the identifying is triggered upon one or more user interactions with a graphical user interface or by expiration of a preconfigured time period.
8. A computer system, the computer system comprising:
one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising:
identifying, by a processor, one or more unencrypted data items within one or more datasets to be moved from storage in a network attached storage system to storage in a cloud-based storage system;
determining an encryption method to be performed on each unencrypted data item based on a level of confidentiality or sensitivity of each unencrypted data item;
sorting each unencrypted data item into one or more groups based on the determined encryption method;
assigning a unique name to each sorted, unencrypted data item in accordance with a preconfigured naming structure; and
performing each determined encryption method to a corresponding group within the one or more groups.
9. The computer system of claim 8 , wherein the identifying further comprises:
tagging metadata associated with each data item with a location of the data item within an unencrypted dataset within the one or more datasets; and
extracting each data item from the the unencrypted dataset.
10. The computer system of claim 9 , further comprising:
transmitting each encrypted group to the cloud-based storage;
performing a decryption method corresponding to each encryption method for each group; and
inserting each data item from each decrypted group based on the location within the tagged metadata.
11. The computer system of claim 10 , wherein each encrypted group is transmitted with a corresponding decryption key.
12. The computer system of claim 8 , wherein the encryption method is further determined by one or more criteria selected from a group consisting of performance limitations of each encryption method in relation to the unencrypted data items to be encrypted, legal or industrial regulations that require certain methods of encryption, and individual user preferences and preconfigurations.
13. The computer system of claim 8 , further comprising:
identifying the level of confidentiality or sensitivity of each unencrypted data item through an extraction engine using natural language processing and/or tag-based identification.
14. The computer system of claim 8 , wherein the identifying is triggered upon one or more user interactions with a graphical user interface or by expiration of a preconfigured time period.
15. A computer program product, the computer program product comprising:
one or more computer-readable tangible storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor capable of performing a method, the method comprising:
identifying, by a processor, one or more unencrypted data items within one or more datasets to be moved from storage in a network attached storage system to storage in a cloud-based storage system;
determining an encryption method to be performed on each unencrypted data item based on a level of confidentiality or sensitivity of each unencrypted data item;
sorting each unencrypted data item into one or more groups based on the determined encryption method;
assigning a unique name to each sorted, unencrypted data item in accordance with a preconfigured naming structure; and
performing each determined encryption method to a corresponding group within the one or more groups.
16. The computer program product of claim 15 , wherein the identifying further comprises:
tagging metadata associated with each data item with a location of the data item within an unencrypted dataset within the one or more datasets; and
extracting each data item from the the unencrypted dataset.
17. The computer program product of claim 16 , further comprising:
transmitting each encrypted group to the cloud-based storage;
performing a decryption method corresponding to each encryption method for each group; and
inserting each data item from each decrypted group based on the location within the tagged metadata.
18. The computer program product of claim 17 , wherein each encrypted group is transmitted with a corresponding decryption key.
19. The computer program product of claim 15 , wherein the encryption method is further determined by one or more criteria selected from a group consisting of performance limitations of each encryption method in relation to the unencrypted data items to be encrypted, legal or industrial regulations that require certain methods of encryption, and individual user preferences and preconfigurations.
20. The computer program product of claim 15 , further comprising:
identifying the level of confidentiality or sensitivity of each unencrypted data item through an extraction engine using natural language processing and/or tag-based identification.