Two-step data deletion having confirmation hold
A data management process in a storage system comprises a two-step deletion process with a confirmation hold. Data identified in a service request for deletion is encrypted using a one-time use public key to render the data inaccessible to users and system processes. The data is decrypted using a corresponding private key and verified that the data corresponds to the data and is quarantined to prevent access by changing permissions. The quarantined data is further analyzed using a set of criteria that to determine whether access to the data by system users or process is still needed. If not, the data is permanently deleted by securely deleting the encryption and decryption keys.
1. A computer implemented method of managing data in a storage system to remove unneeded data, comprising:
encrypting identified user data in-place in an original location of said identified user data in said storage system in response to a deletion request identifying said user data for deletion, said encrypting comprising encrypting immediately said identified user data using a one-time use encryption key, and said encrypting preventing further access to said user data;
decrypting temporarily the encrypted identified user data using a decryption key corresponding to said encryption key, and blocking access to the temporarily decrypted user data by changing access permissions;
verifying that the temporarily decrypted user data corresponds to the user data that was identified in said deletion request;
analyzing said temporarily decrypted user data using a confirmation process to determine whether permanent deletion of said user data should be confirmed; and
upon confirming said deletion, permanently deleting said user data.
2. The computer implemented method of claim 1 , wherein upon confirming said deletion, securely deleting said encryption and decryption keys.
3. The computer implemented method of claim 1 , wherein upon not confirming said deletion, maintaining said user data decrypted and restoring said access permissions.
4. The computer implemented method of claim 3 further comprising upon restoring said access permissions, deleting said encryption and decryption keys.
5. The computer implemented method of claim 1 , wherein said confirmation process comprises a hierarchical set of criteria that determines whether the user data is needed by system users or system processes.
6. The computer implemented method of claim 1 , wherein said confirmation process comprises a criterion that determines whether the data was accessed or created within a preceding predetermined period of time.
7. The computer implemented method of claim 6 , wherein said confirmation process further comprises a criterion that determines whether a service or user account that created the data has been deleted.
8. The computer implemented method of claim 6 , wherein said confirmation process further comprises a criterion that determines whether the user data was machine created or human created.
9. The computer implemented method of claim 8 , wherein said confirmation process further determines whether the user data is associated with either an active service account or an active user account, and, if so, keeps the user data.
10. Non-transitory computer readable media embodying executable instructions for controlling the operation of a processor to perform a method of managing data in a storage system to remove unneeded data, comprising:
encrypting identified user data in-place in an original location of said identified user data in said storage system in response to a deletion request identifying said user data for deletion, said encrypting comprising encrypting immediately said identified user data using a one-time use encryption key, and said encrypting preventing further access to said user data;
decrypting temporarily the encrypted identified user data using a decryption key corresponding to said encryption key, and blocking access to the temporarily decrypted user data by changing access permissions;
verifying that the temporarily decrypted user data corresponds to the user data that was identified in said deletion request;
analyzing said temporarily decrypted user data using a confirmation process to determine whether permanent deletion of said user data should be confirmed; and
upon confirming said deletion, permanently deleting said user data.
11. The non-transitory computer readable media of claim 10 , wherein upon confirming said deletion, securely deleting said encryption and decryption keys.
12. The non-transitory computer readable media of claim 10 , wherein upon not confirming said deletion, maintaining said user data decrypted and restoring said access permissions.
13. The non-transitory computer readable media of claim 12 further comprising upon restoring said access permissions, deleting said encryption and decryption keys.
14. The non-transitory computer readable media of claim 10 , wherein said confirmation process comprises a hierarchical set of criteria that determines whether the user data is needed by system users or system processes.
15. The non-transitory computer readable media of claim 10 , wherein said confirmation process comprises a criterion that determines whether the user data was accessed or created within a preceding predetermined period of time.
16. The non-transitory computer readable media of claim 15 , wherein said confirmation process further comprises a criterion that determines whether a service or user account that created the user data has been deleted.
17. The non-transitory computer readable media of claim 16 , wherein said confirmation process further comprises a criterion that determines whether the user data was machine created or human created.
18. The non-transitory computer readable media of claim 17 , wherein said confirmation process further determines whether the user data is associated with either an active service account or an active user account, and, if so, keeps the user data.